Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/4908246b-2d77-37e2-9da8-344783408bf2.roa
File:                     4908246b-2d77-37e2-9da8-344783408bf2.roa (raw, json)
Hash identifier:          qZKe54bBh9WgpXaN2p4+8sHV9xUplqIlJGoKeKLfVVk=
Subject key identifier:   C7:83:B2:22:BB:E6:84:5B:92:90:1E:1E:48:03:19:2C:50:87:24:29
Certificate issuer:       /CN=9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec
Certificate serial:       010D0C9F4328584EFED0230494BAFAE469B008C0
Authority key identifier: B6:F3:A8:F6:CC:10:73:46:38:5F:AB:6A:C9:47:D8:74:32:0F:94:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/4908246b-2d77-37e2-9da8-344783408bf2.roa
Signing time:             Sat 29 Aug 2026 07:23:12 +0000
ROA not before:           Sat 29 Aug 2026 07:23:12 +0000
ROA not after:            Fri 27 Nov 2026 08:23:12 +0000
asID:                     11179
IP address blocks:        206.201.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fe:d0:23:04:94:ba:fa:e4:69:b0:08:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec
        Validity
            Not Before: Aug 29 07:23:12 2026 GMT
            Not After : Nov 27 08:23:12 2026 GMT
        Subject: CN=57e147ff-200c-4e00-9d43-23621e9381c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:44:b1:e6:41:49:fd:ff:6c:05:47:1b:3b:a5:
                    60:12:6b:20:f1:a3:6d:3c:b8:c2:c3:ae:ff:2d:98:
                    a2:a8:3b:8f:64:69:59:66:b1:ab:63:b1:f9:78:5f:
                    90:ea:99:dc:03:34:2f:d3:4e:9a:d2:58:50:99:d4:
                    4d:69:5f:f6:31:f2:5a:18:e8:6f:05:3f:ea:92:36:
                    89:83:fa:74:de:0c:58:d6:59:68:d4:93:c4:5f:0c:
                    cf:5e:5b:90:6c:78:37:30:8a:94:c2:f1:34:dd:e2:
                    2b:f2:49:58:1a:44:6a:3a:8e:09:ff:b5:0b:0a:70:
                    af:e8:c8:9e:f1:a7:6e:9c:db:87:42:bf:93:28:f8:
                    ae:b1:de:4e:17:4a:38:42:54:26:2e:bb:c8:f4:e3:
                    1e:88:08:c9:43:87:c1:5d:a2:1b:1c:7b:80:3c:c6:
                    28:7c:92:af:e3:73:d2:0e:9a:2f:3b:3b:58:ce:9d:
                    83:65:ae:18:71:49:6a:1f:8b:df:3a:db:39:0b:21:
                    b4:01:ba:eb:77:2d:25:d1:f8:16:7e:2b:c3:79:6f:
                    05:bb:bf:8d:23:2c:3f:70:5f:53:cf:78:9a:04:dd:
                    d3:07:b1:ef:46:27:69:28:01:0a:ce:a6:1d:f1:5f:
                    e9:0d:00:ae:1d:8f:c6:9b:45:ad:e9:a3:e5:09:78:
                    8d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:83:B2:22:BB:E6:84:5B:92:90:1E:1E:48:03:19:2C:50:87:24:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/4908246b-2d77-37e2-9da8-344783408bf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.crl

            X509v3 Authority Key Identifier:
                keyid:B6:F3:A8:F6:CC:10:73:46:38:5F:AB:6A:C9:47:D8:74:32:0F:94:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.201.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:fd:17:86:32:2f:52:8b:99:c2:7b:4c:bf:16:95:88:74:fb:
         f6:2c:fd:3b:bc:21:04:c0:ce:da:fa:8e:5d:27:fb:1f:ae:34:
         78:76:ed:05:f0:a2:87:b4:22:44:91:3c:71:db:28:29:a8:06:
         3d:ba:31:b3:3d:9a:9f:26:dc:ca:0a:27:7f:42:87:eb:40:3e:
         8b:27:5b:da:50:7d:54:a6:42:03:6c:11:3d:df:a2:b6:38:a5:
         1e:9c:79:e1:6f:8c:1c:af:f4:4f:23:94:2a:50:62:d2:62:f2:
         f6:b9:23:58:d8:02:a9:b2:a3:40:d7:01:7e:a6:d2:d5:5d:5a:
         4b:3d:64:c6:bb:83:36:a5:f6:25:90:67:40:f7:67:5e:03:c2:
         45:ef:69:1f:cb:79:b7:1d:ad:43:eb:15:27:8e:63:ec:c8:0e:
         ee:0b:24:42:9e:64:2e:ad:10:b5:1d:48:19:f2:28:af:ac:44:
         6d:df:e6:c4:2f:f1:90:8e:cc:d3:1a:41:47:26:16:e0:00:5b:
         5b:a3:c0:20:cb:bc:a8:a7:8e:e1:2d:07:10:a1:34:85:49:fb:
         b9:d7:77:4e:c3:1a:fc:32:ac:59:de:27:75:25:f4:1b:65:15:
         f1:6c:cf:09:65:fb:6c:2a:d7:52:86:c8:cc:2e:f6:13:b2:90:
         3a:0a:f7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:19:15 2026 by rpki-client