Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d556317-cc4f-4b83-86b0-25d4f92c6d02/a9b63255-9e89-39b3-8fcb-9d335ee82b62.roa
File:                     a9b63255-9e89-39b3-8fcb-9d335ee82b62.roa (raw, json)
Hash identifier:          vtGShle+T0bYYi4vIHFyed9/uCRbJnpS4u7z6EgTT94=
Subject key identifier:   BF:0C:EA:B4:3D:6C:B3:CF:6F:67:34:B4:DD:91:9C:F5:C5:0E:23:DE
Certificate issuer:       /CN=7d556317-cc4f-4b83-86b0-25d4f92c6d02
Certificate serial:       010D0C9F4328584D7CCFCAE3FF41EE2BF53259F0
Authority key identifier: DC:9F:B7:A1:34:BF:07:73:0D:1A:DD:4D:25:46:CA:54:4E:43:B0:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d556317-cc4f-4b83-86b0-25d4f92c6d02.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d556317-cc4f-4b83-86b0-25d4f92c6d02/a9b63255-9e89-39b3-8fcb-9d335ee82b62.roa
Signing time:             Mon 13 Apr 2026 01:00:24 +0000
ROA not before:           Mon 13 Apr 2026 01:00:24 +0000
ROA not after:            Sun 12 Jul 2026 01:00:24 +0000
asID:                     2497
IP address blocks:        206.132.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d556317-cc4f-4b83-86b0-25d4f92c6d02/7d556317-cc4f-4b83-86b0-25d4f92c6d02.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d556317-cc4f-4b83-86b0-25d4f92c6d02/7d556317-cc4f-4b83-86b0-25d4f92c6d02.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d556317-cc4f-4b83-86b0-25d4f92c6d02.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7c:cf:ca:e3:ff:41:ee:2b:f5:32:59:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d556317-cc4f-4b83-86b0-25d4f92c6d02
        Validity
            Not Before: Apr 13 01:00:24 2026 GMT
            Not After : Jul 12 01:00:24 2026 GMT
        Subject: CN=fdde938b-d3aa-4a28-b78f-e23760ba1b7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f7:d9:b7:0d:72:4b:b4:25:11:44:4a:98:96:
                    85:18:7c:59:cb:6c:80:fe:0a:c2:db:3b:2e:c9:f4:
                    b6:b5:52:f9:44:fe:5d:4e:65:2b:2b:69:00:3b:24:
                    bd:e3:ed:21:83:ba:74:e8:33:d3:66:dc:3d:b9:f4:
                    eb:f0:05:a3:77:9e:d2:56:9b:3b:d5:8a:f1:fa:46:
                    72:7b:52:31:9d:24:8a:98:84:8f:bf:35:be:22:97:
                    68:7a:7a:cc:53:7b:10:e7:d5:ea:94:b1:cb:36:10:
                    b8:04:60:6c:3f:5f:0c:61:15:c8:05:4b:0a:c4:32:
                    70:bc:18:57:b8:e2:41:b7:bd:2e:ff:4c:af:b3:6a:
                    2f:05:be:8e:55:aa:e3:24:2f:60:be:8e:4f:42:fc:
                    f7:44:e8:72:53:b6:a9:d7:0a:72:d3:87:84:98:77:
                    48:13:cf:97:31:c9:d2:5c:39:12:f8:f9:3d:07:0c:
                    27:60:26:0f:be:59:50:87:2a:c0:04:78:a5:dc:62:
                    f2:1e:d6:1e:91:47:ea:16:18:c9:a8:40:19:38:09:
                    da:86:66:17:17:8e:9c:0c:d5:cd:5c:d3:97:d6:e4:
                    3c:e2:ea:87:ef:1e:3b:ae:09:a0:2b:37:dc:c3:80:
                    22:69:9f:ff:ff:9f:e1:ef:35:9d:58:e2:a1:43:9e:
                    bb:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:0C:EA:B4:3D:6C:B3:CF:6F:67:34:B4:DD:91:9C:F5:C5:0E:23:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d556317-cc4f-4b83-86b0-25d4f92c6d02/a9b63255-9e89-39b3-8fcb-9d335ee82b62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d556317-cc4f-4b83-86b0-25d4f92c6d02/7d556317-cc4f-4b83-86b0-25d4f92c6d02.crl

            X509v3 Authority Key Identifier:
                keyid:DC:9F:B7:A1:34:BF:07:73:0D:1A:DD:4D:25:46:CA:54:4E:43:B0:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d556317-cc4f-4b83-86b0-25d4f92c6d02.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.132.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:08:78:92:1e:93:7a:8a:0c:3d:44:12:5f:bd:04:07:dc:d5:
         6f:ee:97:42:f7:c1:d0:9b:1e:70:c8:a3:53:59:5f:60:34:74:
         e9:2b:6e:e0:54:50:de:60:57:f3:95:42:69:b7:cd:70:4c:05:
         d4:19:af:43:30:95:84:55:a0:1c:66:61:2f:80:b5:e8:d1:16:
         09:a7:82:48:ea:82:a5:68:96:24:f7:70:e2:2f:8c:52:e9:19:
         52:4e:72:79:13:9b:a3:93:db:70:92:9e:98:49:a7:49:92:56:
         f4:8e:54:20:a6:a7:c1:c8:dd:ac:b2:58:08:c5:b3:2c:a4:99:
         68:ca:16:48:4c:53:f4:77:30:84:5b:32:fd:11:df:d0:8a:9c:
         ff:f5:c4:06:2d:36:09:82:54:71:e3:fd:60:e6:7b:ce:cc:4f:
         89:77:d2:dd:12:e8:35:09:8f:cf:04:14:32:e6:3c:5e:eb:01:
         bc:11:87:79:2f:38:22:05:15:71:b3:55:2d:ac:26:25:20:a1:
         08:07:4d:30:7a:d4:47:26:16:d5:e8:1f:a0:0b:ac:a8:a5:7b:
         28:3c:9d:be:e6:5a:29:4e:7e:ae:35:01:91:c2:a1:7b:d7:b0:
         cc:26:90:f1:67:1c:71:93:c7:8e:0e:1d:45:a3:ba:ab:a6:ee:
         bf:37:6b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:07:51 2026 by rpki-client