Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/ced6341d-e795-328e-9371-e1a1f59d7ca0.roa
File:                     ced6341d-e795-328e-9371-e1a1f59d7ca0.roa (raw, json)
Hash identifier:          hwkTgz2GWjh3alCoj5r2EF+s4WffS5tWBXNpoSovH1s=
Subject key identifier:   1D:BC:E7:55:C8:5B:7F:77:B8:17:19:4F:60:80:3E:99:6A:FD:E0:CA
Certificate issuer:       /CN=8a2695b7-e823-4f74-93b8-98dbbf775bcf
Certificate serial:       010D0C9F4328584C794C53D31741DA83B1463540
Authority key identifier: 43:0A:58:EE:F9:9E:78:C5:3B:DC:25:A2:B4:83:93:81:46:69:C4:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/ced6341d-e795-328e-9371-e1a1f59d7ca0.roa
Signing time:             Sat 10 Jan 2026 02:00:31 +0000
ROA not before:           Sat 10 Jan 2026 02:00:31 +0000
ROA not after:            Fri 10 Apr 2026 01:00:31 +0000
asID:                     397493
IP address blocks:        206.197.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/8a2695b7-e823-4f74-93b8-98dbbf775bcf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/8a2695b7-e823-4f74-93b8-98dbbf775bcf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:79:4c:53:d3:17:41:da:83:b1:46:35:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2695b7-e823-4f74-93b8-98dbbf775bcf
        Validity
            Not Before: Jan 10 02:00:31 2026 GMT
            Not After : Apr 10 01:00:31 2026 GMT
        Subject: CN=20719503-be4e-4aac-b1af-1e0654570cad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:6c:b1:42:8e:e8:f1:7a:18:c8:dc:34:b8:53:
                    c4:1c:18:2d:2f:03:fb:d1:76:8a:4d:f1:58:68:b6:
                    01:81:34:ce:41:c1:30:0c:3f:00:7f:67:1a:e4:ba:
                    3d:a3:ff:04:ef:03:da:52:f1:ee:fc:d1:36:83:32:
                    8f:8f:41:f7:9b:1b:5e:97:b3:54:85:20:e9:06:39:
                    cb:ac:19:0b:17:47:63:90:94:95:c3:89:a8:fe:cd:
                    29:69:bc:2e:87:15:23:e0:db:66:1e:26:e3:4c:31:
                    7f:f0:87:a3:62:80:e6:ff:7b:ac:ce:ba:f0:68:25:
                    44:e8:fa:58:e9:e7:17:63:cf:7a:ed:d3:87:3f:80:
                    80:d6:1d:f8:71:d5:67:87:74:0b:74:78:33:19:a6:
                    92:00:35:dc:82:ff:cd:08:fa:ce:a8:a3:cc:4e:01:
                    3d:de:92:68:d7:16:a3:d8:cd:73:b7:63:bd:a5:fc:
                    83:f3:a7:bf:20:43:33:cf:1c:b3:9e:74:7a:fe:57:
                    bf:07:53:c8:2b:41:06:5c:38:25:15:15:07:11:de:
                    60:ab:cc:01:50:e5:1d:99:23:3b:4a:51:a0:8f:19:
                    7b:f9:83:ee:f9:89:3e:86:2f:d1:7a:eb:b7:f4:ea:
                    8c:20:5e:95:4c:32:09:13:a0:f8:e9:61:f2:40:90:
                    ce:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:BC:E7:55:C8:5B:7F:77:B8:17:19:4F:60:80:3E:99:6A:FD:E0:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/ced6341d-e795-328e-9371-e1a1f59d7ca0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/8a2695b7-e823-4f74-93b8-98dbbf775bcf.crl

            X509v3 Authority Key Identifier:
                keyid:43:0A:58:EE:F9:9E:78:C5:3B:DC:25:A2:B4:83:93:81:46:69:C4:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.197.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:c1:3d:51:bc:a9:8c:91:74:45:21:d8:f9:83:d8:0e:28:e7:
         e7:06:89:60:aa:07:58:73:ec:a1:5c:c8:ea:85:b7:34:09:de:
         e7:e4:4a:20:f1:8d:86:9b:9e:25:59:fd:d2:ff:ec:f6:2f:9c:
         11:33:1f:8d:58:b0:05:1a:96:ea:d8:4b:66:5f:42:9c:25:77:
         bf:dc:90:fa:34:07:0b:1c:66:fb:e9:a2:fd:19:37:4f:99:78:
         3a:21:bd:64:55:b5:1b:7f:e2:a1:4f:a1:c0:9b:72:f2:72:97:
         57:a5:b3:3c:74:38:21:c8:11:b2:5c:1a:1f:6e:c3:6b:03:21:
         ba:1b:7e:9e:e3:f1:cb:5e:70:0d:19:66:4f:c3:26:40:d6:b1:
         be:fb:af:6e:b5:b2:12:13:45:2e:d8:07:66:fd:11:0b:e5:42:
         9b:a7:c9:b8:d9:bc:4f:04:64:91:f0:39:85:7c:65:0e:27:8b:
         65:96:88:c7:9b:64:a3:01:e8:07:ba:59:55:b8:52:e9:ee:e7:
         10:44:2e:1a:71:a5:e7:bc:02:26:b4:ab:69:8d:d9:01:ab:c1:
         15:4c:8e:dd:f0:0b:e0:d7:6f:bf:44:10:fe:c6:c3:ad:a2:63:
         9a:df:57:5f:21:81:6b:a0:08:69:9c:57:4d:3d:76:eb:24:22:
         0a:76:69:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:39:30 2026 by rpki-client