Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4373a3ae-673a-3624-87d5-7d91bc4ddf35.roa
File:                     4373a3ae-673a-3624-87d5-7d91bc4ddf35.roa (raw, json)
Hash identifier:          p1ZVq8eZzIeJHPDVx0GAiHgvNw5WbNLeajNOQs9vIoo=
Subject key identifier:   9F:FE:F3:4E:32:88:29:E2:8D:A6:CB:D2:D9:CA:53:60:26:79:31:18
Certificate issuer:       /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Certificate serial:       010D0C9F4328584EA445258EB6E55C4CA5F65180
Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4373a3ae-673a-3624-87d5-7d91bc4ddf35.roa
Signing time:             Mon 27 Jul 2026 21:00:11 +0000
ROA not before:           Mon 27 Jul 2026 21:00:11 +0000
ROA not after:            Sun 25 Oct 2026 21:00:11 +0000
asID:                     6922
IP address blocks:        206.254.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a4:45:25:8e:b6:e5:5c:4c:a5:f6:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
        Validity
            Not Before: Jul 27 21:00:11 2026 GMT
            Not After : Oct 25 21:00:11 2026 GMT
        Subject: CN=4990e872-1ab9-4b21-aec3-0cf319804911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:13:7c:a2:c1:dc:0b:58:34:8f:e0:db:c5:07:
                    6b:0e:84:fb:d6:03:db:46:20:44:1b:3a:75:5b:2a:
                    32:1f:c6:a9:00:04:2e:ad:57:a0:e0:9b:21:9f:b6:
                    22:41:a4:85:b1:b3:b2:0c:e5:ab:2b:e4:90:b0:99:
                    85:b2:64:fc:bd:54:2d:bd:53:bf:84:b9:a8:89:c0:
                    fc:4d:7d:36:b2:e7:01:f1:7c:9c:2f:e1:d2:cb:e5:
                    32:64:fa:25:9c:6b:11:92:35:1f:ba:89:e4:da:48:
                    c5:ed:e6:5b:2f:89:7d:b5:62:6f:0a:d3:a9:85:95:
                    31:f8:aa:f7:59:5b:c4:d4:27:dd:6f:82:df:38:f7:
                    1e:f4:a0:1a:a9:1c:7b:68:fe:24:84:e0:72:4d:6b:
                    29:e5:0b:de:34:0b:3f:ce:ea:7d:8c:3e:62:b9:9e:
                    eb:01:cd:21:ea:66:05:29:fe:64:93:c3:ee:d9:7b:
                    42:01:32:d6:7d:e2:75:8a:0e:d9:8c:c1:81:99:f8:
                    08:34:08:5a:b3:39:57:cf:f6:0f:9d:eb:df:00:06:
                    3a:53:45:22:c4:a3:74:d1:fa:54:d3:96:38:b8:6f:
                    65:b1:b3:15:55:21:e9:d7:04:41:81:06:af:7a:5d:
                    e8:6f:da:a1:6b:5c:80:9a:dc:1a:3d:8e:92:a0:1b:
                    c9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:FE:F3:4E:32:88:29:E2:8D:A6:CB:D2:D9:CA:53:60:26:79:31:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4373a3ae-673a-3624-87d5-7d91bc4ddf35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl

            X509v3 Authority Key Identifier:
                keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.254.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:a4:80:43:32:57:4c:d1:3b:04:85:3f:bd:21:eb:f0:5f:80:
         0c:16:50:5d:80:95:7d:91:48:1a:f2:71:20:4e:b6:f5:a3:2a:
         67:55:10:66:c1:f2:59:16:75:cd:38:66:57:f4:47:4a:23:cb:
         12:d0:d2:27:45:c5:d8:12:89:d2:7a:45:90:a5:bd:de:cf:d9:
         c5:43:02:3a:b5:54:76:12:1b:1b:7b:23:59:2a:2c:86:a9:3a:
         94:d6:f1:44:67:15:61:2c:15:1d:b3:ee:3e:10:8b:6d:d5:d4:
         cf:22:99:82:ae:a2:5e:85:04:29:2d:48:68:68:ce:06:49:f2:
         2a:59:f2:b2:37:fc:f9:97:c7:3e:a2:e9:04:4f:b9:eb:31:88:
         02:e6:54:86:a2:f8:e3:10:7f:e8:da:99:7b:b4:69:60:0f:f3:
         06:6d:26:92:8c:55:5c:e0:e5:11:4c:bf:7b:2a:b8:2c:82:78:
         5a:08:31:c6:49:e8:8b:4e:58:87:de:d8:6e:3f:a3:09:63:b1:
         a6:fb:d2:9b:a9:2d:00:d4:2e:a6:95:43:38:65:75:21:61:e3:
         36:31:2c:ab:9e:a1:00:62:66:51:29:4d:02:32:62:6a:a2:f8:
         e0:62:9c:8d:3b:9e:4e:c7:a3:aa:bc:3d:46:1a:13:75:d4:84:
         3e:69:42:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:15:31 2026 by rpki-client