Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/7619f8d9-90fb-3f52-968a-d2a895ee65fc.roa
File:                     7619f8d9-90fb-3f52-968a-d2a895ee65fc.roa (raw, json)
Hash identifier:          4hS4ynvRhbRiO7xr5CXFqc5Yf4CGwuJvKh9/jVUdGWk=
Subject key identifier:   D9:C0:D2:1C:4B:10:BD:DD:B6:9E:AC:4E:B1:98:C0:9D:7A:3E:B0:9D
Certificate issuer:       /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Certificate serial:       010D0C9F4328584F0672A039D52D3F62D9C63A20
Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/7619f8d9-90fb-3f52-968a-d2a895ee65fc.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     6922
IP address blocks:        206.76.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:a0:39:d5:2d:3f:62:d9:c6:3a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=47c437fd-4992-4b4c-bd8f-7be23e42b309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:df:c8:ee:87:cc:0f:f6:ba:c3:e0:78:12:b9:
                    bb:66:54:2c:b3:4a:a1:ba:5a:ec:c9:3e:64:55:a9:
                    e6:80:e9:be:9f:98:82:f4:56:68:77:01:40:07:65:
                    ea:50:ce:9e:54:6a:25:10:d2:6b:ed:cd:bc:08:1f:
                    38:29:e7:16:3f:1b:12:ab:70:f4:e2:47:73:a4:d5:
                    12:87:86:2e:4b:1a:95:5b:b2:18:0f:18:ba:04:04:
                    46:94:c5:8f:88:8b:be:21:34:01:89:be:83:f5:08:
                    45:61:c4:1d:c5:74:16:60:bd:e6:02:76:96:ac:44:
                    e4:7e:44:fb:02:2c:41:ac:4b:ce:33:d5:c3:ce:7f:
                    68:1a:3d:61:1a:ad:ce:4a:d5:8c:70:ff:f5:8c:6f:
                    b1:d9:c5:73:a6:19:57:da:ba:d5:60:08:71:d1:32:
                    44:f9:2c:22:70:d6:5d:e8:ce:aa:71:24:00:f5:b7:
                    3d:ec:04:ec:39:de:34:45:2d:5d:b8:6d:72:a5:e9:
                    a8:22:25:c7:c1:a9:70:09:8d:71:10:17:81:89:91:
                    70:63:3e:83:e1:4c:0f:63:f4:02:08:41:da:cc:d6:
                    e0:65:80:69:3f:dc:b8:6f:8b:bf:e9:11:9e:ca:b3:
                    d4:44:d6:c3:dd:28:de:57:dd:f7:4b:f1:97:19:dc:
                    7f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:C0:D2:1C:4B:10:BD:DD:B6:9E:AC:4E:B1:98:C0:9D:7A:3E:B0:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/7619f8d9-90fb-3f52-968a-d2a895ee65fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl

            X509v3 Authority Key Identifier:
                keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.76.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:c2:ee:f0:ff:13:8e:84:fd:fd:5e:eb:4d:e6:a1:d7:36:55:
         0d:83:8b:0e:da:eb:a4:1c:e7:6e:9c:29:88:ab:e2:a0:a7:2e:
         da:cb:19:1a:03:26:42:db:09:a1:20:67:60:3b:bd:40:8a:df:
         79:9d:fc:20:46:6a:ff:d8:03:ef:30:03:de:b6:42:ea:18:02:
         ab:91:37:cc:72:27:c9:0d:3d:ea:11:2e:03:15:6a:38:55:56:
         cc:44:bb:37:3e:66:05:fb:cf:9e:b1:9d:b3:34:a6:67:68:b7:
         1e:78:97:9b:6b:57:99:d0:28:16:6a:75:2b:77:03:d6:2a:68:
         39:b7:26:0c:ba:cf:e0:c4:d4:2c:4f:fb:f7:26:a4:60:ae:fc:
         a0:5f:e4:5d:09:5a:95:50:c7:5e:be:ce:ef:8c:23:d4:c8:6d:
         40:3c:21:3f:a6:b7:44:89:66:3b:5a:a3:cd:10:70:e0:04:a0:
         a2:bb:10:b2:f9:c7:6e:fe:f2:68:eb:f3:f9:7a:21:69:26:40:
         cb:18:fd:f4:59:fd:40:92:8d:0d:99:27:7d:6d:f3:30:0f:db:
         af:7d:49:85:b4:6a:9a:bf:6a:9f:52:41:bc:5e:f6:2f:b8:c6:
         9b:74:ac:95:98:17:da:ca:d0:e7:1a:52:e9:6c:9b:fa:6a:df:
         ac:39:1a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:39:18 2026 by rpki-client