Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5ae34a34-245d-3acb-9c8e-627c422ce244.roa
File:                     5ae34a34-245d-3acb-9c8e-627c422ce244.roa (raw, json)
Hash identifier:          xAI3sPn82FJ9C+LupZHBfILaP7UO0wtp8GNV06UaYHU=
Subject key identifier:   34:B4:7A:76:00:80:1D:CF:C9:F4:F8:68:79:C4:B1:87:B6:BA:36:02
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584CF2BD0D2147BEB62E8A0BC280
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5ae34a34-245d-3acb-9c8e-627c422ce244.roa
Signing time:             Sun 22 Feb 2026 14:00:41 +0000
ROA not before:           Sun 22 Feb 2026 14:00:41 +0000
ROA not after:            Sat 23 May 2026 13:00:41 +0000
asID:                     135377
IP address blocks:        206.54.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f2:bd:0d:21:47:be:b6:2e:8a:0b:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Feb 22 14:00:41 2026 GMT
            Not After : May 23 13:00:41 2026 GMT
        Subject: CN=204f0013-0cca-4505-9629-79c994505922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4d:92:ba:f6:a5:7c:e1:e3:f4:8e:94:ec:86:
                    86:58:f3:b2:1e:0b:95:1b:a1:c7:10:ed:71:60:94:
                    9e:9a:60:e0:d6:1e:3c:58:ec:53:71:db:61:79:fb:
                    5a:52:30:c2:be:ad:34:73:52:ed:f5:b4:c5:f2:09:
                    c7:4b:2b:62:42:68:bd:f9:de:86:f5:be:cb:f7:b7:
                    3a:84:96:b1:13:42:95:3d:9d:9e:2a:7c:d1:e4:4f:
                    6d:cf:4b:53:24:31:61:60:01:0f:e5:09:f2:d0:02:
                    e7:ca:03:11:9a:19:49:51:7f:0f:68:5a:cb:81:f4:
                    26:57:03:e5:61:9b:80:57:3b:06:99:70:5f:f5:57:
                    07:4e:4a:ef:12:58:df:28:49:e4:46:bf:9e:0e:c0:
                    96:2d:2a:54:ce:43:08:e6:2c:d1:78:82:1c:7d:ca:
                    0b:55:15:c2:43:ca:b1:e7:4e:0e:72:93:94:15:21:
                    6f:f4:44:77:0f:ad:27:eb:bc:5d:4c:c8:ce:0e:70:
                    bf:ea:c3:8d:50:e3:20:d0:72:ef:81:00:de:57:01:
                    d6:f5:33:04:fc:6d:3c:09:95:ea:c8:30:af:ee:85:
                    d7:d3:f7:4e:2d:3a:1d:89:2f:8a:fa:b8:e1:43:6c:
                    f3:2d:e9:ec:9a:a1:ef:db:82:28:1b:05:85:81:6d:
                    02:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B4:7A:76:00:80:1D:CF:C9:F4:F8:68:79:C4:B1:87:B6:BA:36:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5ae34a34-245d-3acb-9c8e-627c422ce244.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.54.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:61:41:5a:4f:50:aa:6e:a6:6d:c4:d2:6e:31:5b:9c:0b:29:
         3b:f4:7e:4e:2f:2a:39:a0:d7:a4:bb:93:a0:46:1a:5f:f3:16:
         fa:52:0f:4f:19:2b:52:ae:90:5b:72:62:b8:52:4a:3b:48:6e:
         a2:d3:65:03:8e:6d:5f:40:13:62:3e:08:24:dd:94:cf:f1:f0:
         64:91:c3:b6:4d:72:28:5e:42:e9:a2:f5:74:ce:83:f5:e9:db:
         5e:cc:d1:7a:27:07:dc:3c:68:d7:c7:98:51:82:3e:86:68:09:
         46:4c:6f:4d:93:2e:5c:68:ff:c3:48:8d:80:22:04:8e:68:0c:
         a2:f7:56:82:1e:5c:9d:af:53:20:21:2b:55:05:e0:47:54:0a:
         04:b6:b4:6a:48:f8:ec:7a:9f:08:52:68:af:39:54:7c:37:3d:
         3f:09:56:d5:e0:88:33:5e:1a:7c:45:21:35:ec:af:be:2b:36:
         99:38:ff:d7:b0:da:a2:53:01:36:c9:0c:ed:74:06:ab:d5:b8:
         e6:81:02:f4:69:a2:a9:6c:55:0d:e8:e0:dc:76:2b:2f:55:9a:
         f2:3a:04:9c:cc:06:ad:da:80:a8:56:a7:81:35:da:27:13:e6:
         0e:84:17:49:3a:da:3f:a7:38:23:13:1f:5d:dc:a3:83:2d:e5:
         11:c3:0f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:28:47 2026 by rpki-client