Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/d764610e-a629-3c75-bb09-1542bb2fe71b.roa
File:                     d764610e-a629-3c75-bb09-1542bb2fe71b.roa (raw, json)
Hash identifier:          55JdNGvyPE+opzVglvDgZTDfEgGBTtqCgBC6WMRAKss=
Subject key identifier:   15:0B:23:65:D2:06:48:37:8B:20:68:C2:AF:0E:E2:D7:8A:BD:1E:2B
Certificate issuer:       /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Certificate serial:       010D0C9F4328584EA44510269D551D69456C1F00
Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/d764610e-a629-3c75-bb09-1542bb2fe71b.roa
Signing time:             Mon 27 Jul 2026 21:00:11 +0000
ROA not before:           Mon 27 Jul 2026 21:00:11 +0000
ROA not after:            Sun 25 Oct 2026 21:00:11 +0000
asID:                     6922
IP address blocks:        206.254.232.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a4:45:10:26:9d:55:1d:69:45:6c:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
        Validity
            Not Before: Jul 27 21:00:11 2026 GMT
            Not After : Oct 25 21:00:11 2026 GMT
        Subject: CN=3bd6c9cb-1f98-4d74-9e02-2e19c3167957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:64:8e:f0:91:29:34:fd:3d:1a:01:15:6e:75:
                    0c:7c:78:59:dd:f7:da:a9:8b:12:5e:05:4c:5e:d8:
                    20:0e:dc:b9:0a:63:70:35:f6:e6:a0:c8:d2:7f:00:
                    df:4f:3d:e3:d2:0b:c0:27:9b:4c:1e:9d:88:fb:6a:
                    50:71:4b:da:e1:99:45:4b:ee:2b:b5:97:bb:55:0c:
                    c1:aa:8e:0f:70:1f:41:25:f9:a6:6f:c6:93:a6:77:
                    ed:9e:7b:18:d2:15:12:25:c7:1e:63:39:5d:1e:ad:
                    fe:32:8d:63:f0:50:c8:7b:61:ca:f9:14:4a:1f:44:
                    83:b8:d7:fd:d0:6b:78:03:ba:e0:e1:48:aa:16:0c:
                    85:fd:25:39:1d:54:7e:d5:4d:20:c6:d4:23:62:39:
                    d6:c1:e9:4d:bf:9b:5d:1c:53:35:56:80:98:68:a0:
                    05:65:74:6b:e3:a9:f3:aa:6f:8a:a5:ca:e7:5d:c5:
                    3b:f2:0a:47:8c:e5:df:77:12:0a:df:74:88:13:81:
                    b1:2e:58:43:9a:e0:f8:3a:63:8b:72:af:31:69:a3:
                    12:34:42:8c:d3:c4:22:57:d4:1d:4b:9c:f7:cb:60:
                    89:b4:a3:05:8c:b2:95:34:47:75:9d:1b:e4:a8:09:
                    3c:dd:67:8d:65:a2:05:97:64:73:5a:8b:d2:b3:c5:
                    eb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:0B:23:65:D2:06:48:37:8B:20:68:C2:AF:0E:E2:D7:8A:BD:1E:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/d764610e-a629-3c75-bb09-1542bb2fe71b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl

            X509v3 Authority Key Identifier:
                keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.254.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:e0:53:0e:bc:7f:09:73:6b:b9:63:11:b2:9e:2d:d0:ac:a2:
         b1:6a:1d:a8:fa:49:fa:bd:69:dd:10:2d:c0:ad:90:d2:78:a4:
         be:d1:01:a9:cb:1d:c5:ae:91:ae:4c:71:bf:5e:3e:b5:55:fd:
         8f:d2:28:7c:68:83:ce:b7:25:8b:47:e2:95:b6:21:82:a9:a3:
         3a:c1:43:47:11:25:66:e6:76:e0:43:73:b6:10:dc:46:7b:c1:
         77:0b:b8:b1:a9:a5:ae:3f:72:63:bc:0c:14:b2:65:e0:32:6b:
         7a:bc:a7:d6:bc:e7:98:d8:90:77:e1:4e:eb:05:8d:49:1e:52:
         55:7a:89:1f:55:f4:bc:96:5d:2c:44:e5:5a:5f:6b:6e:18:7d:
         86:aa:61:97:00:80:81:a8:09:12:2c:39:c0:32:ac:b7:3a:24:
         a5:0e:e0:af:13:06:87:64:0a:d7:04:a1:bb:57:0b:86:92:71:
         03:af:6f:8a:3f:c4:e5:50:95:e7:30:d4:dc:9a:46:a7:c2:9a:
         69:0e:2b:93:ff:bf:2a:23:cd:9b:35:5c:ef:bb:bc:71:d5:8b:
         13:67:ce:23:3c:df:8a:fe:08:32:36:80:f9:41:3b:b2:0d:5b:
         66:eb:7e:1b:60:39:17:b9:6c:30:84:8a:da:fa:30:f0:e0:8c:
         0a:c6:e8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:48:50 2026 by rpki-client