Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/243ae32a-0e53-30df-b63c-05db2f38f611.roa
File:                     243ae32a-0e53-30df-b63c-05db2f38f611.roa (raw, json)
Hash identifier:          Xu8TXOEpH3eGA33ajhCgLLlXH5ibOUylPTvNSoxb50I=
Subject key identifier:   BB:F5:59:31:E8:66:5B:43:EF:33:BF:64:42:CE:9B:F7:16:C7:56:BF
Certificate issuer:       /CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d
Certificate serial:       010D0C9F4328584EF87CBC071389D7158ED77380
Authority key identifier: EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/243ae32a-0e53-30df-b63c-05db2f38f611.roa
Signing time:             Thu 27 Aug 2026 01:00:12 +0000
ROA not before:           Thu 27 Aug 2026 01:00:12 +0000
ROA not after:            Wed 25 Nov 2026 02:00:12 +0000
asID:                     64213
IP address blocks:        206.53.142.0/24 maxlen: 24
                          206.83.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f8:7c:bc:07:13:89:d7:15:8e:d7:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d
        Validity
            Not Before: Aug 27 01:00:12 2026 GMT
            Not After : Nov 25 02:00:12 2026 GMT
        Subject: CN=026ede84-db25-474f-b48b-e97cd23de3dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a4:6d:eb:e5:4e:17:85:9d:ae:2b:5e:d5:90:
                    f3:b0:94:da:b2:88:e8:81:1c:6b:69:cf:c8:89:f4:
                    fe:65:d0:b6:14:c5:a9:24:e3:ae:81:64:f0:2d:79:
                    e1:88:7c:a0:a4:67:2d:e8:84:28:85:44:aa:48:82:
                    7c:32:66:a0:a1:12:ea:23:44:c0:7b:ff:d6:d0:ec:
                    e4:5e:3a:73:7b:79:8c:c4:72:c2:c4:ee:21:6f:8b:
                    e4:96:e5:84:4b:31:f2:24:1b:67:2f:0c:34:b2:98:
                    85:97:b0:b5:a6:7a:fc:d6:01:de:4f:b9:1f:04:8c:
                    a9:aa:4e:d1:78:ee:ba:d2:fc:ab:f3:4d:b2:40:10:
                    7f:b2:8e:ba:04:c8:2a:e1:7e:ec:07:7c:72:ce:f0:
                    fe:42:0f:6e:ff:cd:68:40:0b:a5:8a:fa:bf:3f:23:
                    2e:bb:1d:2b:2e:43:d6:a0:18:27:4c:2b:42:20:91:
                    86:c4:15:2b:f4:a4:2f:9c:57:e0:4d:75:1f:0c:a9:
                    3f:c1:b1:c4:33:b8:77:14:d5:d9:ad:a3:fd:e5:59:
                    4b:34:83:09:5d:2a:c3:46:05:7b:44:81:1e:61:ad:
                    2f:65:5d:57:68:00:85:59:d4:b4:e0:16:7f:60:6a:
                    4b:b7:b1:ba:e2:3d:41:1c:1e:62:ca:9d:b5:5d:22:
                    a7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:F5:59:31:E8:66:5B:43:EF:33:BF:64:42:CE:9B:F7:16:C7:56:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/243ae32a-0e53-30df-b63c-05db2f38f611.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl

            X509v3 Authority Key Identifier:
                keyid:EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.53.142.0/24
                  206.83.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:d2:ea:d0:0a:10:4c:6e:62:a5:11:3d:a6:05:be:70:00:82:
         01:c2:28:ee:4d:f0:a8:87:0b:75:1b:b8:f2:51:d0:ff:6c:e0:
         5d:8f:9b:29:35:5d:90:21:80:51:14:a4:22:ba:3a:2e:e4:00:
         a8:f2:90:b3:7f:b4:ef:71:7f:80:c7:d2:19:2a:29:60:13:9e:
         8d:f5:56:24:5c:dd:28:40:38:98:4f:d0:28:44:d7:30:19:c5:
         1b:e2:92:e7:98:d0:3f:96:2b:6a:39:8b:23:56:8c:ad:82:c9:
         0d:7a:2b:bd:52:c4:12:a8:36:4d:db:cb:c4:80:08:72:3c:41:
         49:f6:88:52:52:0b:a8:69:21:1a:8a:63:3f:eb:0a:00:8c:5e:
         d8:66:24:d6:8e:e2:78:25:0d:b9:a6:f5:6c:a9:99:54:3d:0f:
         a9:4f:1c:28:ad:ff:ae:35:84:fd:db:78:2a:46:29:6e:b7:8b:
         59:9c:e1:bd:7f:37:00:8e:73:72:30:92:05:86:ee:8b:1d:53:
         30:bd:8b:22:d4:05:32:08:a1:ac:9a:63:c9:70:28:4c:d0:6a:
         ea:b2:10:a7:1f:2b:03:af:98:38:b5:29:87:a9:60:2e:d7:b9:
         2b:b1:b6:8d:fc:28:f3:0a:df:59:4e:5b:2e:08:b5:ab:9e:80:
         d0:64:eb:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:11:16 2026 by rpki-client