Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/988454ca-96f4-3cee-bbde-cef59d93d902.roa
File:                     988454ca-96f4-3cee-bbde-cef59d93d902.roa (raw, json)
Hash identifier:          Vr1TfIPLXDRWE6vQ4UUby8aEcWzFz5e8v/0DbYuMNss=
Subject key identifier:   52:23:BF:A8:42:6D:4C:C6:79:70:F4:75:55:15:F8:39:A4:47:85:A5
Certificate issuer:       /CN=f767ea16-72b4-402a-9b2f-7583fe390bb7
Certificate serial:       010D0C9F4328584C794C479C46E38D518E92C980
Authority key identifier: 7A:C6:2E:73:FB:82:27:31:62:5F:C0:8E:76:FB:20:55:A6:05:B9:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/988454ca-96f4-3cee-bbde-cef59d93d902.roa
Signing time:             Sat 10 Jan 2026 02:00:31 +0000
ROA not before:           Sat 10 Jan 2026 02:00:31 +0000
ROA not after:            Fri 10 Apr 2026 01:00:31 +0000
asID:                     14773
IP address blocks:        206.82.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:79:4c:47:9c:46:e3:8d:51:8e:92:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f767ea16-72b4-402a-9b2f-7583fe390bb7
        Validity
            Not Before: Jan 10 02:00:31 2026 GMT
            Not After : Apr 10 01:00:31 2026 GMT
        Subject: CN=d4f347be-7ad5-4152-bfaa-5c10dfdf7da4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2b:d6:60:be:80:77:9e:8a:7b:84:73:5c:11:
                    a2:b6:83:60:12:89:8a:a0:36:bd:c0:c6:5f:c8:dd:
                    7d:bf:65:54:eb:80:e1:8b:97:27:60:f8:14:4e:d4:
                    d0:c0:d6:18:0e:f8:b0:23:ab:6b:d5:50:ab:15:0f:
                    19:76:01:a1:c6:8a:bc:f7:ce:e7:82:fa:c9:95:78:
                    7c:a6:4c:87:99:02:06:83:80:e3:3e:20:91:04:3d:
                    5e:7c:4d:c6:1d:89:99:34:45:20:d8:d6:43:1f:cf:
                    c0:96:ad:eb:6d:87:69:30:f1:4c:34:aa:49:11:6e:
                    6e:a1:59:5e:27:0f:94:c3:5c:b0:1f:92:c5:5c:39:
                    85:e6:11:b3:0b:b1:b0:95:98:6d:2d:33:c4:c7:10:
                    90:21:f9:cf:91:ef:ef:bc:e5:8a:50:59:36:12:1c:
                    39:92:1d:95:10:c6:ad:ac:a6:91:e7:b0:af:4d:c4:
                    1f:5d:d3:1f:5a:f7:07:de:5d:3e:2b:6a:1b:8b:d8:
                    43:2c:aa:43:f8:2b:e1:e9:b6:19:bd:ec:55:70:e6:
                    5c:ba:ef:bc:08:9a:46:47:53:0b:24:c1:cb:29:79:
                    c1:47:82:0b:a5:48:74:09:39:fa:5c:25:7b:69:56:
                    96:f6:10:ec:29:0d:83:cc:38:39:41:6c:96:fd:76:
                    67:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:23:BF:A8:42:6D:4C:C6:79:70:F4:75:55:15:F8:39:A4:47:85:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/988454ca-96f4-3cee-bbde-cef59d93d902.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.crl

            X509v3 Authority Key Identifier:
                keyid:7A:C6:2E:73:FB:82:27:31:62:5F:C0:8E:76:FB:20:55:A6:05:B9:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.82.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:de:0a:32:25:5b:12:fd:b7:4d:90:fb:bf:1b:14:3a:7a:59:
         a7:5a:3a:55:8d:94:b2:32:7a:a4:6e:70:cc:22:fa:13:93:71:
         90:68:19:22:2d:d9:88:46:de:93:74:0c:34:cb:de:5c:37:45:
         28:92:10:ed:5f:a3:67:60:0a:86:38:a2:df:8c:9f:09:7e:7b:
         04:4c:68:c2:a3:c9:2e:2a:3d:c2:03:fb:a6:79:68:2e:5a:fd:
         fb:59:cd:e4:bf:cf:96:24:19:a1:c5:5a:ac:22:9e:36:24:71:
         ce:b5:34:77:e8:bb:82:9c:6e:a3:97:a3:74:c8:cd:93:27:00:
         a5:55:bc:80:33:ef:b0:a4:b5:fb:78:6c:09:72:d6:41:05:e9:
         c1:ab:4c:32:fb:fe:69:d8:da:ca:2c:28:d5:06:27:ce:f7:28:
         fb:9f:90:62:d2:bf:f5:a9:99:0f:df:f0:04:16:da:95:0b:8e:
         44:6a:6a:ca:1b:58:bf:f6:bc:c9:68:e4:a3:e9:04:41:e5:da:
         af:b5:ca:cd:26:30:0b:51:9f:f9:4b:b5:d4:5a:86:20:44:8d:
         7d:44:9c:0a:9b:6e:b8:95:17:63:2b:33:9a:cd:79:99:e1:c2:
         7b:d0:dc:d6:a7:2e:4a:9b:bb:0d:ba:e4:a9:59:08:f0:2d:15:
         76:26:5c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:58:36 2026 by rpki-client