Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/ace1335e-d7fe-323f-81ea-e643998328db.roa
File:                     ace1335e-d7fe-323f-81ea-e643998328db.roa (raw, json)
Hash identifier:          h/QsJG698Gb8ATP/uJ2pTPhTa4GeMXgQ8xfXY0q+Sv4=
Subject key identifier:   87:44:6F:EC:06:69:7F:4B:8E:A6:EE:06:83:B9:C1:3C:FE:F2:95:31
Certificate issuer:       /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Certificate serial:       010D0C9F4328584F06729C5A5750C953B997EE80
Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/ace1335e-d7fe-323f-81ea-e643998328db.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     6922
IP address blocks:        206.76.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:9c:5a:57:50:c9:53:b9:97:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=32742a25-2525-4f56-b89c-859620bf9cd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:83:b1:91:d7:e5:59:b0:e9:73:f4:e2:3f:82:
                    d2:3e:47:43:10:ba:76:ec:65:9f:50:b2:52:3b:fe:
                    d2:4e:9f:fc:67:eb:14:96:a2:f2:c4:e9:4d:25:c3:
                    c4:5c:94:8b:10:07:a7:77:ef:1e:b1:90:44:ea:31:
                    d6:16:58:36:12:36:6c:2b:3a:41:df:23:0d:37:b9:
                    b1:bd:22:c4:00:09:cf:fd:c6:34:12:73:a9:20:69:
                    2b:95:0d:0b:a4:52:04:ce:59:11:95:1c:59:6e:4c:
                    d6:c1:63:4d:70:2a:0f:2b:6d:a4:43:7d:35:22:63:
                    ac:8e:97:88:be:e1:34:ae:0a:6c:ea:01:fc:e2:94:
                    8b:3a:c5:e6:e8:fb:12:ac:45:3d:34:7a:14:f8:ba:
                    d9:83:94:fe:1a:64:25:cd:4f:e2:de:b5:cc:30:b6:
                    5e:8b:0c:af:db:e4:0a:45:72:13:a5:dd:0d:fd:7f:
                    1c:6c:f3:e8:a9:37:6a:07:ca:2f:09:44:77:96:e1:
                    d7:84:85:8b:29:83:90:69:91:f6:e1:8f:25:0c:ab:
                    94:71:2a:2e:88:6a:77:10:28:a5:bf:f8:b6:4e:50:
                    c1:20:63:ed:7f:12:fc:e3:e1:a4:e3:82:33:d2:3f:
                    75:7d:cb:27:f0:35:3c:14:5c:59:c8:1a:ae:08:b7:
                    b1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:44:6F:EC:06:69:7F:4B:8E:A6:EE:06:83:B9:C1:3C:FE:F2:95:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/ace1335e-d7fe-323f-81ea-e643998328db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl

            X509v3 Authority Key Identifier:
                keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.76.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:c0:3c:88:04:f6:73:88:59:28:67:88:ac:3d:01:6a:f2:33:
         ba:db:a6:e0:0d:4b:09:fb:5c:55:82:2f:cc:ec:ed:ea:d3:4f:
         ad:23:b4:b0:66:61:43:8c:28:b9:b6:d4:63:e9:e2:b1:16:30:
         72:c6:53:0a:09:d6:87:0f:4f:9b:50:fa:ca:60:0e:2e:8f:da:
         8b:fb:f0:5f:35:ee:92:a2:05:58:3d:a3:37:28:34:7c:03:65:
         d6:7a:d2:3b:f4:80:74:30:37:34:21:e7:77:28:a9:87:6e:86:
         cf:11:57:49:a5:3a:ec:6c:8a:dc:d0:b3:0b:24:78:c8:df:bf:
         85:f1:c8:c0:f5:10:a5:b2:4a:bd:f1:ab:3e:bb:24:70:c9:95:
         26:41:f1:0f:b5:96:27:44:4f:80:69:35:a7:7e:4c:64:db:03:
         e4:36:ec:88:b2:8d:5a:24:25:5b:e2:2a:99:da:ea:08:85:a5:
         01:5b:c2:34:20:4b:f6:1a:d7:c8:e8:3a:62:51:db:42:d2:98:
         fa:5c:0c:c9:de:5c:f7:77:b0:19:fa:af:c7:b6:75:72:8b:b1:
         7b:3d:b7:eb:94:b7:32:4e:23:5c:24:33:ea:c1:24:2c:28:78:
         e7:d7:e2:26:4a:17:66:e6:e8:94:9c:27:52:a1:b6:81:40:2f:
         72:5b:6e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:39:30 2026 by rpki-client