Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/c3a22fc2-31de-3a17-9aa2-a789487ca63b.roa
File:                     c3a22fc2-31de-3a17-9aa2-a789487ca63b.roa (raw, json)
Hash identifier:          qXvgQYBzDknxDCGaiYQ69iRRvLXOneOAjrO6CKcmICg=
Subject key identifier:   71:44:05:D5:56:67:77:33:9F:1C:C9:0B:3D:B2:80:57:57:7C:9C:D2
Certificate issuer:       /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Certificate serial:       010D0C9F4328584EA4450C786E123E910BC8BB20
Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/c3a22fc2-31de-3a17-9aa2-a789487ca63b.roa
Signing time:             Mon 27 Jul 2026 21:00:11 +0000
ROA not before:           Mon 27 Jul 2026 21:00:11 +0000
ROA not after:            Sun 25 Oct 2026 21:00:11 +0000
asID:                     6922
IP address blocks:        206.254.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a4:45:0c:78:6e:12:3e:91:0b:c8:bb:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
        Validity
            Not Before: Jul 27 21:00:11 2026 GMT
            Not After : Oct 25 21:00:11 2026 GMT
        Subject: CN=e7b2b63e-d7d6-4647-a778-8cd6ea32ab06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:0c:d0:7a:ed:6e:31:69:89:48:06:80:11:ea:
                    63:31:ff:f8:5c:5a:cb:77:53:e2:0c:de:7e:97:f0:
                    2b:47:dc:9e:29:a8:28:6a:fb:5d:88:32:d8:e4:40:
                    46:6b:54:40:73:80:0b:b4:64:06:59:48:f2:50:ef:
                    63:e1:0b:5d:ec:bc:9a:7b:c7:7f:6e:e3:eb:52:fe:
                    b6:69:48:1f:dc:86:20:a8:87:b8:d9:d1:b4:26:e2:
                    3a:0d:11:79:9f:9f:c4:27:36:c0:36:39:fe:cf:8e:
                    04:5e:cb:d9:30:c3:b4:6f:43:99:79:3a:42:9c:d4:
                    b9:61:9b:9f:ef:d2:ad:33:fa:f4:79:6a:4e:a3:49:
                    f9:10:49:b5:b4:6e:5b:40:a7:a4:76:2c:d3:67:f9:
                    8a:9b:d7:cc:79:8b:7c:f3:74:29:f8:86:cf:ac:af:
                    83:1a:b0:e2:5a:dd:23:42:09:03:92:e3:0b:49:8e:
                    6d:3e:f4:f2:34:12:35:45:9d:30:98:15:f9:ca:09:
                    5f:96:02:b7:b1:c8:ab:56:00:68:f7:03:ce:6a:b4:
                    a6:00:a5:a7:99:da:4d:92:62:90:59:72:dc:43:02:
                    ff:92:70:ca:b4:40:ce:d3:70:16:24:fc:b3:d5:28:
                    86:22:af:8f:70:d2:e3:ad:3e:25:ef:f5:72:83:e3:
                    f7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:44:05:D5:56:67:77:33:9F:1C:C9:0B:3D:B2:80:57:57:7C:9C:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/c3a22fc2-31de-3a17-9aa2-a789487ca63b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl

            X509v3 Authority Key Identifier:
                keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.254.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:a2:c0:19:aa:52:42:db:cc:10:7f:ed:13:b0:10:fb:22:51:
         bc:6c:9e:1a:2f:95:8a:1c:fe:b6:44:8b:f8:48:f8:f6:16:d4:
         f4:2b:7f:98:b3:28:0c:ba:71:44:d2:34:b1:79:14:8a:49:47:
         b3:0b:68:39:4f:71:c7:60:62:fa:04:96:f8:11:ee:7e:32:e3:
         3a:80:43:de:d6:12:ca:72:70:24:24:1e:ac:de:b6:4e:83:17:
         c0:35:ce:8b:7b:75:66:25:0b:96:64:58:7b:01:81:32:83:19:
         cd:04:01:94:8b:ef:30:94:42:87:8c:3c:37:ab:73:d4:42:fa:
         f1:26:f4:d8:2a:36:66:87:48:b8:2e:c1:ff:d7:4b:3a:88:f8:
         ff:cd:18:c0:84:e9:2a:54:3f:1f:7c:ca:d7:9f:be:a9:9b:3e:
         85:86:80:6a:8b:95:7f:ca:f0:36:ee:b4:88:d4:0a:02:32:e0:
         90:a3:dd:2b:7b:85:8a:27:a3:da:37:0f:c2:e3:73:b5:ea:52:
         7f:5c:5f:36:39:86:d8:53:00:ef:2d:07:82:bc:81:e8:76:ad:
         74:9e:cd:2e:fc:2c:dc:3f:07:cc:25:42:6c:0f:42:23:79:cf:
         33:6e:21:e8:ab:a5:8f:57:32:0c:ee:58:90:26:37:d2:22:e7:
         f2:4a:90:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:29:54 2026 by rpki-client