Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/facaddb3-e453-35b0-9d7d-113be547c25c.roa
File:                     facaddb3-e453-35b0-9d7d-113be547c25c.roa (raw, json)
Hash identifier:          pRr3EKnvxi5CqVtsHpBso7HN7oFfE0h0lJz3FwJeevw=
Subject key identifier:   3B:08:8F:55:F3:90:88:6A:8E:47:7F:3A:0D:D7:18:E3:E3:1F:4E:E4
Certificate issuer:       /CN=917f98c2-cbd2-43de-a8cf-7091ad719621
Certificate serial:       010D0C9F4328584ED9C7688B27A8937463204500
Authority key identifier: 5D:92:48:68:AC:B1:85:67:D2:75:86:CA:93:F0:1D:52:F7:6C:FC:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/facaddb3-e453-35b0-9d7d-113be547c25c.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     0
IP address blocks:        206.83.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/917f98c2-cbd2-43de-a8cf-7091ad719621.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/917f98c2-cbd2-43de-a8cf-7091ad719621.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:68:8b:27:a8:93:74:63:20:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=917f98c2-cbd2-43de-a8cf-7091ad719621
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=c2edd5b5-d721-4043-afb6-296181e19397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:01:52:b0:c5:5a:22:24:f6:1a:47:0f:bf:6e:
                    ed:99:57:75:81:e5:61:66:64:72:08:70:ad:dc:4e:
                    49:0c:b5:9d:a5:ba:fc:77:31:d6:95:c8:ff:09:98:
                    ac:98:46:c8:0e:04:bb:94:d4:5a:e6:53:60:b0:c6:
                    93:a2:9d:2c:5a:13:5c:a5:92:98:29:86:82:41:e0:
                    ea:47:d4:b1:5d:f1:76:f7:4b:51:a1:5a:34:15:3f:
                    cd:66:cb:b0:1c:08:83:3d:1a:c8:9a:44:69:5f:14:
                    a7:fd:50:de:81:51:f7:b3:37:8a:2d:ec:ba:e3:1c:
                    e8:60:60:1b:ae:7f:70:83:fb:ab:f2:e0:9f:61:2d:
                    23:a3:eb:69:77:04:15:ed:c1:79:ef:4b:c3:f9:30:
                    30:da:63:73:29:6d:e6:22:7f:f1:c1:5f:ce:20:b1:
                    8c:6b:71:3d:9c:7a:ad:72:98:de:69:77:8f:03:8e:
                    10:32:fd:4e:5b:ba:f7:5c:fc:08:a4:89:d0:a3:fb:
                    e3:ae:e5:19:e7:93:d3:fc:44:15:a1:d5:f0:85:73:
                    2f:60:30:73:02:00:68:df:9b:ac:b2:d6:93:fc:fc:
                    3a:dd:cb:b4:46:68:cf:7b:1a:5e:8d:fa:cc:ae:31:
                    6c:0f:0f:e9:d8:75:45:cb:7f:8a:49:f3:4e:ae:20:
                    cc:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:08:8F:55:F3:90:88:6A:8E:47:7F:3A:0D:D7:18:E3:E3:1F:4E:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/facaddb3-e453-35b0-9d7d-113be547c25c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/917f98c2-cbd2-43de-a8cf-7091ad719621.crl

            X509v3 Authority Key Identifier:
                keyid:5D:92:48:68:AC:B1:85:67:D2:75:86:CA:93:F0:1D:52:F7:6C:FC:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.83.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:4a:39:10:64:9f:49:fa:75:a3:c0:5c:d8:a5:7d:e2:76:4f:
         d5:0b:0e:22:4e:9b:8c:13:e8:90:1d:97:ae:14:73:2a:48:88:
         ff:3b:b2:3a:8d:da:e9:8b:95:da:1e:73:c3:f4:a4:38:81:58:
         d5:2c:4f:31:5b:fc:92:c8:41:29:23:55:a4:6c:d0:2d:c9:5b:
         7c:af:a9:46:23:2c:c9:d0:e0:e2:6d:ac:d4:f8:e5:08:81:13:
         88:e8:6f:1d:ee:3f:68:5b:0f:ea:a3:b6:1b:0f:c5:32:d9:d2:
         50:d6:78:67:16:dc:76:9a:93:16:1b:bd:db:6f:0e:3c:eb:c9:
         48:a0:49:07:58:6c:62:88:50:6a:5c:6f:43:6f:de:8d:8a:b4:
         df:53:c5:93:60:fe:a8:4f:f0:8a:86:23:bc:60:71:22:47:55:
         3d:8e:e0:79:44:0f:f7:cf:88:76:6d:3f:6a:7e:d0:54:29:04:
         b8:aa:d6:5a:7d:65:03:83:aa:08:19:fa:e9:37:07:34:e8:d2:
         7d:77:79:f1:55:8b:30:bf:c2:50:cc:b0:60:cb:91:6f:6c:4b:
         61:0b:ff:cf:71:89:ad:bb:5c:09:30:f4:ab:f4:6e:60:9f:77:
         16:30:19:8f:7b:9d:b2:5e:11:f3:b2:54:bb:ec:78:84:9f:c6:
         b7:89:2f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:31:24 2026 by rpki-client