Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2052384d-1415-4b2d-a5f0-d9bc3402c93a/d6a36bad-b297-37b9-bf8e-314ca24458ae.roa
File:                     d6a36bad-b297-37b9-bf8e-314ca24458ae.roa (raw, json)
Hash identifier:          VLKiCIcU+paa/rIvNCtCwTKiL0HjTaD8Pf/uXoXPeLU=
Subject key identifier:   9E:C0:2B:5C:15:96:A6:AF:9A:C2:31:F8:41:CB:CB:F1:6D:A0:84:1A
Certificate issuer:       /CN=2052384d-1415-4b2d-a5f0-d9bc3402c93a
Certificate serial:       010D0C9F4328584E1FA9A3A0EDF04D55C533B340
Authority key identifier: 8D:FA:43:54:C1:9D:D5:5E:B5:AB:DE:AC:5B:20:19:87:9F:6D:DA:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2052384d-1415-4b2d-a5f0-d9bc3402c93a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2052384d-1415-4b2d-a5f0-d9bc3402c93a/d6a36bad-b297-37b9-bf8e-314ca24458ae.roa
Signing time:             Wed 10 Jun 2026 09:00:13 +0000
ROA not before:           Wed 10 Jun 2026 09:00:13 +0000
ROA not after:            Tue 08 Sep 2026 09:00:13 +0000
asID:                     715
IP address blocks:        206.220.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2052384d-1415-4b2d-a5f0-d9bc3402c93a/2052384d-1415-4b2d-a5f0-d9bc3402c93a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2052384d-1415-4b2d-a5f0-d9bc3402c93a/2052384d-1415-4b2d-a5f0-d9bc3402c93a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2052384d-1415-4b2d-a5f0-d9bc3402c93a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1f:a9:a3:a0:ed:f0:4d:55:c5:33:b3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2052384d-1415-4b2d-a5f0-d9bc3402c93a
        Validity
            Not Before: Jun 10 09:00:13 2026 GMT
            Not After : Sep  8 09:00:13 2026 GMT
        Subject: CN=312c341b-be63-4d32-b006-56e6449046a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2a:b7:b5:12:09:1b:84:d2:9d:80:72:c6:79:
                    6a:56:e4:b8:a7:da:db:6b:aa:ca:a4:a5:06:94:27:
                    b8:6a:a2:0a:8f:17:46:4c:9b:cd:1f:90:58:87:55:
                    96:6f:69:37:49:38:2d:6b:2b:80:65:a6:7f:40:d4:
                    fc:65:b1:56:e1:05:80:14:70:4e:4d:f1:cf:6d:a5:
                    fa:5d:8d:52:85:83:99:bc:e7:72:b4:62:7b:5b:d9:
                    16:dc:73:39:aa:59:1f:92:d5:e0:d4:3d:c7:2a:d6:
                    87:f5:bf:67:92:2c:3d:65:3e:5a:76:a2:4a:5c:e1:
                    e7:17:27:47:f6:71:dc:8b:56:04:96:6e:98:7a:ba:
                    a1:b6:79:7f:f0:77:94:dc:b9:73:84:5d:82:12:4a:
                    ea:9b:f6:10:1a:5d:9c:d1:ec:1f:8f:e7:1c:35:53:
                    34:59:f6:aa:76:0a:8b:c2:09:77:91:67:9e:cc:28:
                    3d:cb:db:04:37:d4:fc:70:b6:96:22:b0:f0:34:77:
                    de:54:b0:c0:30:88:6e:bc:1c:44:30:d9:10:85:f1:
                    4f:9c:0d:e6:fc:0b:44:3a:be:40:50:1e:b4:46:14:
                    83:70:07:5c:7a:bc:58:e2:39:87:94:dd:42:3b:7e:
                    3d:7f:df:f5:50:09:ae:a6:55:e5:e0:9c:c5:16:e3:
                    79:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C0:2B:5C:15:96:A6:AF:9A:C2:31:F8:41:CB:CB:F1:6D:A0:84:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2052384d-1415-4b2d-a5f0-d9bc3402c93a/d6a36bad-b297-37b9-bf8e-314ca24458ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2052384d-1415-4b2d-a5f0-d9bc3402c93a/2052384d-1415-4b2d-a5f0-d9bc3402c93a.crl

            X509v3 Authority Key Identifier:
                keyid:8D:FA:43:54:C1:9D:D5:5E:B5:AB:DE:AC:5B:20:19:87:9F:6D:DA:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2052384d-1415-4b2d-a5f0-d9bc3402c93a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.220.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:6b:03:11:bc:82:a5:1f:41:98:f7:8d:b7:60:83:f7:01:46:
         6d:76:bc:85:09:33:6a:9a:72:98:33:fc:f2:1a:84:f8:c5:21:
         04:3b:9c:f5:7e:a3:e7:2e:fd:0c:94:30:56:b1:41:69:8b:db:
         c8:9f:c2:37:79:d0:e0:af:8f:aa:20:ae:20:d7:23:83:42:1f:
         27:a0:e8:c8:4e:71:bc:04:e4:0c:39:5f:ec:da:be:7a:67:e6:
         fa:91:c4:d7:e1:5d:1d:46:7c:be:9b:76:43:fe:c9:79:52:a8:
         4b:eb:b4:a5:c2:8a:d2:17:32:ac:8d:34:19:c8:e4:4c:ac:51:
         67:5f:65:43:a3:96:fb:c1:e0:e5:c0:6a:2d:91:c8:60:fe:37:
         ab:7f:98:8c:a5:af:cd:c1:26:d9:d2:6b:e5:65:a8:30:eb:25:
         40:b2:f5:f2:de:aa:35:af:2d:0e:cf:27:6e:1f:ac:7f:50:2c:
         7f:41:e1:2b:1b:56:20:4c:20:27:a6:64:44:de:0a:23:32:86:
         5c:f9:e4:54:cf:7e:dd:43:cc:53:58:7b:c6:44:40:aa:ec:b1:
         d0:9b:14:65:10:2c:88:c0:6a:ff:54:c0:e1:08:90:04:c8:88:
         fb:f8:3a:5e:3d:9f:23:fe:08:10:9a:32:8d:f2:1a:38:bf:30:
         50:36:49:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:37:45 2026 by rpki-client