Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/a5dac968-7289-3f6a-92b6-17627ddae8e3.roa
File:                     a5dac968-7289-3f6a-92b6-17627ddae8e3.roa (raw, json)
Hash identifier:          DDBc//zje+eXBoMdwjDpgnZ0wDMI1AErOjLzQDslmMU=
Subject key identifier:   01:A3:FD:B3:05:13:E6:A6:8F:E8:BD:20:53:B1:C7:D3:6B:27:13:DB
Certificate issuer:       /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Certificate serial:       010D0C9F4328584EA4450DD8CB19696622249980
Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/a5dac968-7289-3f6a-92b6-17627ddae8e3.roa
Signing time:             Mon 27 Jul 2026 21:00:11 +0000
ROA not before:           Mon 27 Jul 2026 21:00:11 +0000
ROA not after:            Sun 25 Oct 2026 21:00:11 +0000
asID:                     6922
IP address blocks:        206.254.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a4:45:0d:d8:cb:19:69:66:22:24:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
        Validity
            Not Before: Jul 27 21:00:11 2026 GMT
            Not After : Oct 25 21:00:11 2026 GMT
        Subject: CN=cd37fc92-8b60-45b8-88e2-3dcdcae17c56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fd:25:9c:65:04:a3:6a:47:12:e9:8c:15:72:
                    7b:20:1f:c2:35:89:7b:67:c7:d2:a8:f6:03:0b:c5:
                    e4:c2:72:2d:f1:c3:2e:dc:37:65:b4:cb:15:7c:b9:
                    38:3f:c9:60:a4:27:14:00:f6:d8:96:3f:12:e2:49:
                    9c:c7:f9:eb:3c:5b:8c:6d:09:3e:5e:b6:55:ec:c6:
                    79:a5:88:af:ca:86:e9:21:3e:11:71:ec:c2:a9:64:
                    64:e1:d4:4e:c8:20:c5:b5:a2:a5:7a:46:7e:77:b6:
                    d5:8c:2b:ff:09:28:c0:03:5a:fc:8d:db:8e:36:48:
                    01:66:45:84:f9:bd:43:b1:9a:4b:55:5a:da:fc:d2:
                    fe:48:07:ee:bc:06:94:2b:ed:eb:b6:79:d9:24:d1:
                    00:d4:bb:ac:d0:55:7e:d6:15:25:a5:6d:ae:64:c8:
                    7d:1b:03:20:b2:79:29:27:50:d6:06:05:45:7b:1b:
                    ad:af:0b:17:26:e3:e2:84:1b:39:6e:4e:45:9c:a6:
                    4c:4b:03:20:5e:de:1e:d6:79:ce:46:d9:58:f4:7d:
                    ac:22:52:89:d1:8a:2a:f9:e4:de:a0:8d:d5:3b:35:
                    33:e8:aa:6b:6c:d4:37:42:f1:97:96:6e:41:80:8e:
                    ca:42:33:32:f1:ac:4e:a3:47:03:9a:94:0d:82:bf:
                    84:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:A3:FD:B3:05:13:E6:A6:8F:E8:BD:20:53:B1:C7:D3:6B:27:13:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/a5dac968-7289-3f6a-92b6-17627ddae8e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl

            X509v3 Authority Key Identifier:
                keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.254.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:81:7a:28:db:21:74:71:c7:23:57:ff:10:ad:f5:53:77:9b:
         57:4b:99:56:b1:78:1b:f5:c5:6d:f4:d8:be:84:5b:ee:40:52:
         e6:e1:d8:17:dc:6d:40:75:5d:3e:54:7e:e2:51:69:d4:8d:a2:
         b6:bc:0c:ba:96:ff:5b:7e:7e:e0:6d:f6:06:d8:3f:ba:c6:32:
         57:11:6d:fc:ae:5f:0c:d5:d7:ff:74:21:79:a0:64:62:4e:83:
         83:65:4f:73:9d:fd:94:6d:db:6e:47:b7:69:41:70:3f:93:44:
         c0:36:00:b3:9b:83:0b:dd:1f:89:c9:16:af:56:c1:b2:c9:cd:
         15:0e:32:8b:45:c1:ee:d1:a2:0d:a9:6e:32:4c:36:79:d4:8b:
         dc:e6:68:8f:3a:8a:17:3e:49:3e:06:b1:1b:f1:73:39:83:4b:
         47:26:52:b1:04:99:c8:e6:3a:e9:d9:96:2b:b9:89:d3:16:52:
         fa:5d:4c:83:08:a8:56:88:65:b5:20:59:4e:31:ab:30:cc:dc:
         82:e2:91:e7:00:47:84:1e:43:bb:39:24:c0:ee:28:49:ca:9e:
         b5:f2:f0:0e:2d:6b:83:c2:83:34:5b:3f:fe:55:ba:da:94:d4:
         6d:1f:29:4b:5a:22:31:87:06:a1:55:b9:3b:e9:31:86:c5:da:
         7e:d3:0e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:20:58 2026 by rpki-client