Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/5ec2853a-e436-326c-8769-9d336ef60f9b.roa
File:                     5ec2853a-e436-326c-8769-9d336ef60f9b.roa (raw, json)
Hash identifier:          9p6BLq9BlwJauVjYW1OjQlxeY2k+TwpiqMD9OPE2D2w=
Subject key identifier:   0C:C5:89:9A:22:9F:99:27:11:47:FD:12:74:96:2B:1A:AD:E0:D2:43
Certificate issuer:       /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Certificate serial:       010D0C9F4328584D83CB0B0D2C8A1855480E4F00
Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/5ec2853a-e436-326c-8769-9d336ef60f9b.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     18
IP address blocks:        206.76.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:cb:0b:0d:2c:8a:18:55:48:0e:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=85f71b4e-7ca5-48eb-b8f8-2c45c0318ae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b7:0e:b3:d1:1b:bc:8d:5a:41:99:fc:f4:26:
                    02:b9:7a:04:e8:0e:1c:ff:ce:38:28:a6:ad:f5:d9:
                    8d:34:5c:78:ed:26:dc:38:f2:d6:fb:15:6f:1c:98:
                    2a:8b:5e:53:7b:7c:e8:a6:d4:21:03:00:16:07:31:
                    63:ba:72:5d:6c:3b:43:73:37:0e:1a:ce:d2:bb:84:
                    b0:79:98:d4:a0:0b:34:09:51:ce:c0:65:71:8f:a2:
                    f7:5d:4f:fb:38:d3:54:23:60:f7:83:7f:2b:c8:95:
                    a7:b8:eb:ed:b1:d6:36:55:1e:34:9e:72:9c:f7:e3:
                    87:77:f5:b0:fb:e7:42:87:ae:04:1a:0c:10:07:96:
                    0f:91:d3:53:f7:ef:9e:48:a2:45:2d:be:c4:66:f6:
                    e1:9c:5a:48:f8:1c:10:ce:db:2c:ad:9a:33:1f:5c:
                    27:f6:ce:e9:22:7c:03:df:b0:e8:e7:01:20:65:e8:
                    ad:b7:60:98:05:dc:8c:17:08:d4:0a:f3:04:de:44:
                    9b:f9:15:36:0f:7d:5c:b0:0b:3b:06:cd:a2:4c:59:
                    11:01:2e:3a:f8:23:18:e8:f0:ae:3f:2f:15:8e:58:
                    62:2c:55:41:f1:76:db:b2:e8:78:8f:67:ec:84:cc:
                    37:3d:83:ff:8d:f6:2f:b1:5a:c1:cf:d0:bd:77:c5:
                    17:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C5:89:9A:22:9F:99:27:11:47:FD:12:74:96:2B:1A:AD:E0:D2:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/5ec2853a-e436-326c-8769-9d336ef60f9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl

            X509v3 Authority Key Identifier:
                keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.76.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:58:67:d7:b9:f1:37:17:21:a3:d7:e9:02:10:de:e5:1e:80:
         eb:1d:5d:24:d9:1b:1d:ee:56:9d:6d:78:96:5f:8f:5e:ab:03:
         df:29:2a:56:83:cf:7e:2a:99:09:25:3d:32:28:07:3b:0c:92:
         bc:78:78:bd:76:9a:ee:97:15:bc:8f:51:df:84:3b:ed:a0:a6:
         aa:81:d3:bf:9d:e7:6b:7e:5a:1e:ba:f8:92:23:10:d7:99:78:
         b8:9c:fc:20:75:fa:87:d8:d3:e8:75:43:58:84:f1:86:63:d5:
         5c:63:bd:f1:b0:0a:bc:4b:b2:18:d8:6d:5b:a0:81:5c:74:5e:
         52:46:c3:80:15:3f:2d:7c:4a:2d:38:6c:5c:1c:c2:1f:f8:2e:
         68:9f:3e:f6:1a:f7:1d:da:bb:84:da:4a:b1:bc:1a:82:c1:d6:
         21:a2:9b:59:20:95:c5:bd:fa:d9:32:9b:20:d6:a8:4f:52:ae:
         0f:b9:7e:e2:57:0d:e0:cf:3d:70:82:86:c5:5a:40:0d:d2:6b:
         60:54:6d:30:1e:45:90:b4:89:04:0c:15:dc:8f:03:45:51:f8:
         d2:5a:d9:6d:4f:32:6f:9f:06:b2:ad:23:7e:f2:60:4e:01:f8:
         29:33:2e:96:e6:6e:43:de:15:8c:ee:18:d2:02:72:c6:29:06:
         df:12:60:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:47:25 2026 by rpki-client