Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/f6685b7a-5f10-3bf3-8eb9-9b0310d9e34c.roa
File:                     f6685b7a-5f10-3bf3-8eb9-9b0310d9e34c.roa (raw, json)
Hash identifier:          gh7dcy7tWvz6v0CLZB8+yC5kwXJWiZU8I+aAkQNp94A=
Subject key identifier:   E2:D1:27:A5:49:57:9C:9F:CA:EF:26:34:AF:C7:DC:0E:85:6F:24:CC
Certificate issuer:       /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
Certificate serial:       010D0C9F4328584F4975B83A3F5DC86E33D29AD8
Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/f6685b7a-5f10-3bf3-8eb9-9b0310d9e34c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     398420
IP address blocks:        206.71.146.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:b8:3a:3f:5d:c8:6e:33:d2:9a:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=410d6691-d3d2-42c1-a38e-806e3b60e602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5f:0f:be:e2:8c:49:cf:c5:55:31:90:a4:ac:
                    49:ef:96:f5:40:68:84:9d:b5:50:f2:b1:73:38:00:
                    b1:20:b9:ec:f5:14:84:02:39:ab:0b:fe:88:a2:11:
                    e2:10:f8:4f:93:8c:fd:13:c1:76:73:63:62:5e:b6:
                    f1:8d:2e:11:53:86:e1:dc:5b:9b:22:05:9d:97:70:
                    d8:6b:ef:b6:24:79:9f:83:10:c2:63:15:11:20:e3:
                    e1:17:25:9f:cc:fb:b0:24:40:bc:fe:96:b7:ca:32:
                    37:50:d8:5f:24:46:35:ea:95:55:72:2e:f9:c8:8a:
                    f7:27:a2:f3:ac:1f:b1:ed:2c:ae:83:9b:fb:a5:7d:
                    da:ea:e8:dd:64:e0:84:c7:d9:32:8d:f2:6c:50:67:
                    ff:c4:2f:ac:0f:ab:0e:d3:46:a6:b2:a4:f7:3e:90:
                    61:cf:bb:9b:48:09:c6:e3:ee:fd:75:46:d9:e5:7a:
                    bf:d8:a1:37:57:47:e1:15:f0:26:ee:7c:1d:12:37:
                    30:ea:73:8b:18:29:40:30:0e:9d:dc:95:b8:02:ed:
                    ca:03:e8:5d:18:89:ad:ec:55:26:17:fa:1a:6b:03:
                    0e:c7:22:34:d4:81:22:1b:4e:26:e2:ae:d8:25:06:
                    cd:9d:e0:cd:d9:a6:4e:3c:23:61:d4:13:1c:9e:b4:
                    96:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:D1:27:A5:49:57:9C:9F:CA:EF:26:34:AF:C7:DC:0E:85:6F:24:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/f6685b7a-5f10-3bf3-8eb9-9b0310d9e34c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl

            X509v3 Authority Key Identifier:
                keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.71.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:c6:7f:e7:55:e4:e0:b2:9a:9f:ac:30:56:fb:4d:0f:fd:7f:
         9e:68:c7:b9:c8:79:fd:89:3c:0d:ae:c9:c8:95:ad:5c:ec:f2:
         ec:43:67:5c:b8:5c:3a:6b:96:79:a7:7d:02:d2:44:34:dd:4e:
         25:38:18:bb:37:dc:65:fc:08:74:89:0b:f8:db:87:ec:59:f3:
         de:bf:70:82:f8:92:a7:c0:49:14:03:73:c3:41:2c:1b:7d:44:
         bd:72:df:64:e9:0b:54:97:b4:a1:94:44:2a:4a:9e:ca:8f:43:
         83:a4:92:63:6b:4c:a2:bb:9e:c2:77:6c:b8:94:4b:ed:2b:fb:
         1b:34:cf:7f:7e:c4:34:df:fb:d0:6c:39:fa:1d:25:58:f2:ec:
         19:8e:16:f0:54:34:b4:2d:62:52:a5:65:70:52:bc:86:46:9a:
         1b:f3:1e:4a:f9:6f:30:79:b8:3b:2c:64:38:d7:54:af:00:56:
         fa:83:31:52:c5:41:4b:dd:76:6e:b1:e1:6e:cf:45:b2:a5:4b:
         17:26:f3:dd:cd:2d:e2:78:e3:00:4a:d4:44:f1:a4:3e:c8:b8:
         c2:ab:f1:81:a8:73:21:5a:85:21:f2:d2:cc:e2:eb:77:79:76:
         55:32:a9:d6:93:7c:20:75:46:b2:cd:9a:65:2f:aa:55:47:99:
         d8:e0:c0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 20:25:42 2026 by rpki-client