Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/c3f29afd-5096-3d9b-8379-45736e020302.roa
File:                     c3f29afd-5096-3d9b-8379-45736e020302.roa (raw, json)
Hash identifier:          7uQRFKylwOZGY1v9I40666GPYNnPVv/NsFdJ7FlVEI4=
Subject key identifier:   F5:C5:A2:A9:4C:04:B6:51:36:A8:82:B8:AA:92:5D:96:33:13:C2:06
Certificate issuer:       /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Certificate serial:       010D0C9F4328584EA445234650EAF375C9083CE0
Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/c3f29afd-5096-3d9b-8379-45736e020302.roa
Signing time:             Mon 27 Jul 2026 21:00:11 +0000
ROA not before:           Mon 27 Jul 2026 21:00:11 +0000
ROA not after:            Sun 25 Oct 2026 21:00:11 +0000
asID:                     6922
IP address blocks:        206.254.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a4:45:23:46:50:ea:f3:75:c9:08:3c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
        Validity
            Not Before: Jul 27 21:00:11 2026 GMT
            Not After : Oct 25 21:00:11 2026 GMT
        Subject: CN=7ae22f4b-dcd2-44db-8a54-b87303022524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d8:8d:64:77:2f:f8:81:56:89:5e:72:35:96:
                    d8:3d:7c:8e:85:c6:8c:a8:43:1f:63:6c:e9:f5:2c:
                    83:8a:32:54:f0:2a:fa:76:00:54:c2:18:e4:33:b7:
                    fb:06:ba:fa:6c:66:37:2e:1c:59:f6:2f:78:98:b1:
                    9e:4b:1f:5d:cb:fc:74:04:57:7e:06:19:e4:94:af:
                    5b:ed:17:ce:2e:e1:5e:90:db:d7:69:7c:3d:19:b3:
                    c6:8a:29:4b:a3:ce:6a:e5:32:73:6b:81:72:41:82:
                    8b:3f:6f:18:5b:45:78:37:3a:a9:93:f8:23:7f:ee:
                    99:43:fc:1a:7a:57:63:a4:21:3a:28:12:e3:15:f3:
                    3a:0b:48:a3:05:9b:c8:6a:9c:a7:87:67:6f:02:8e:
                    f9:45:a6:cd:14:8b:88:09:1d:18:09:02:fc:5f:16:
                    c1:74:dd:c9:ef:f8:5f:4c:c4:46:09:a3:f4:09:6d:
                    b0:9f:c0:1d:a0:bb:ea:8c:e6:5b:b8:97:22:22:20:
                    a2:9f:b8:b1:b9:48:03:d1:83:08:24:dd:04:6a:75:
                    bd:c5:56:c1:b8:1f:05:64:7d:9c:7a:de:8c:88:41:
                    86:7f:e2:7a:ec:98:d1:eb:f7:20:3b:cc:64:16:ea:
                    84:f0:70:c1:cd:6e:b9:8a:ca:41:03:0f:ab:a3:aa:
                    44:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C5:A2:A9:4C:04:B6:51:36:A8:82:B8:AA:92:5D:96:33:13:C2:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/c3f29afd-5096-3d9b-8379-45736e020302.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl

            X509v3 Authority Key Identifier:
                keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.254.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:f1:12:e6:b1:3d:05:e9:62:e9:d1:96:4d:50:09:5c:74:35:
         55:94:18:0e:32:99:7b:9c:0a:76:9d:e1:f8:70:08:37:e2:04:
         15:6f:28:dc:6d:18:5f:b1:cc:60:5f:b9:3b:10:6f:1f:cb:96:
         ea:3e:c1:78:a7:87:4f:52:be:5b:a8:e0:7a:8f:cb:79:c2:7f:
         65:7d:e4:7b:b1:e9:48:dc:e0:fc:5c:6a:68:9f:b1:58:af:b1:
         56:4b:d7:fd:12:f8:73:1f:6f:be:53:43:3c:fa:94:d8:74:93:
         d9:f9:8d:08:c6:62:29:0f:95:79:5d:93:8e:ac:94:02:74:62:
         23:c5:29:e0:c2:e5:32:ec:95:5c:ff:c4:4d:60:55:32:c4:53:
         2b:ef:05:cf:33:08:2f:dd:ab:f4:cb:0d:80:27:5e:50:aa:5b:
         e1:8b:fc:87:6f:e4:15:45:28:cb:3c:e7:8e:be:21:2a:dc:20:
         b8:41:d2:d8:99:24:a7:40:c1:0c:68:c1:f6:11:29:d0:9b:8b:
         73:07:95:e0:e1:e4:87:16:c8:1b:57:bc:0e:e9:39:62:bf:02:
         a7:e5:b7:95:9a:cd:04:21:45:51:f5:d8:59:90:6e:f0:80:14:
         ac:00:7e:42:58:40:00:10:ac:19:d1:ab:2f:07:86:c5:5a:58:
         d0:36:ae:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:08:16 2026 by rpki-client