Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a3073e85-2b7a-45f5-809d-4c36116cd85c/67ba44aa-ad5d-3f58-a6d3-9047e43bc64d.roa
File:                     67ba44aa-ad5d-3f58-a6d3-9047e43bc64d.roa (raw, json)
Hash identifier:          gdr7ak+6ZPuvebafB9m+PSRt8i5wMyAOd26L/XsVL0E=
Subject key identifier:   48:01:DD:A9:90:92:4D:8D:E8:3C:18:F9:1D:38:D4:27:25:83:54:52
Certificate issuer:       /CN=a3073e85-2b7a-45f5-809d-4c36116cd85c
Certificate serial:       010D0C9F4328584E9EAFE65724BA3A64A60788E0
Authority key identifier: 16:D4:A2:91:CE:45:6E:BA:43:DB:81:7F:C1:DF:C0:86:2B:8A:F9:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a3073e85-2b7a-45f5-809d-4c36116cd85c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a3073e85-2b7a-45f5-809d-4c36116cd85c/67ba44aa-ad5d-3f58-a6d3-9047e43bc64d.roa
Signing time:             Sat 25 Jul 2026 21:00:12 +0000
ROA not before:           Sat 25 Jul 2026 21:00:12 +0000
ROA not after:            Fri 23 Oct 2026 21:00:12 +0000
asID:                     401245
IP address blocks:        206.225.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a3073e85-2b7a-45f5-809d-4c36116cd85c/a3073e85-2b7a-45f5-809d-4c36116cd85c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a3073e85-2b7a-45f5-809d-4c36116cd85c/a3073e85-2b7a-45f5-809d-4c36116cd85c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a3073e85-2b7a-45f5-809d-4c36116cd85c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9e:af:e6:57:24:ba:3a:64:a6:07:88:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3073e85-2b7a-45f5-809d-4c36116cd85c
        Validity
            Not Before: Jul 25 21:00:12 2026 GMT
            Not After : Oct 23 21:00:12 2026 GMT
        Subject: CN=e30c79c4-f37e-413f-a09c-5ad59df3670a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:49:d0:d8:33:9f:a2:de:b6:59:36:42:34:27:
                    28:e3:7f:98:c3:0b:13:14:5e:bb:67:6c:2a:d4:df:
                    ec:14:91:2a:92:8f:1f:eb:02:3a:8a:1e:aa:84:ca:
                    82:6c:42:f6:14:8c:7d:15:bc:24:8d:2b:9e:d5:70:
                    90:b7:73:96:ad:95:dc:58:22:90:90:c1:0c:d3:bf:
                    e6:1e:13:41:40:6e:da:5f:2b:a1:95:a3:a0:95:d3:
                    73:b2:60:68:ed:af:95:96:de:7c:f8:df:34:66:2c:
                    8b:82:51:25:d8:f2:4f:5b:63:50:73:8c:64:0d:5f:
                    ae:48:4e:f2:b6:cb:6e:bb:06:4c:48:85:ed:3d:11:
                    07:c0:05:e7:33:ee:dd:37:e9:8b:37:b7:3c:ec:e2:
                    bc:9f:72:85:9e:56:a8:09:3c:6c:81:7b:94:59:d5:
                    2a:4c:8e:14:e0:96:fc:b1:65:da:81:e1:98:c9:ed:
                    8a:ef:da:ae:43:b5:75:c9:f2:dc:14:98:70:d1:58:
                    e6:62:e0:66:d3:36:d3:80:b9:d0:5a:7a:ce:3d:10:
                    27:5d:03:f0:39:34:8d:2f:22:b1:0b:5a:fe:9b:5b:
                    4c:f3:dc:1d:8a:81:68:5a:fa:a5:13:4c:96:16:23:
                    cb:ff:fc:35:15:e9:f3:e2:75:50:61:02:5e:cd:d8:
                    97:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:01:DD:A9:90:92:4D:8D:E8:3C:18:F9:1D:38:D4:27:25:83:54:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a3073e85-2b7a-45f5-809d-4c36116cd85c/67ba44aa-ad5d-3f58-a6d3-9047e43bc64d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a3073e85-2b7a-45f5-809d-4c36116cd85c/a3073e85-2b7a-45f5-809d-4c36116cd85c.crl

            X509v3 Authority Key Identifier:
                keyid:16:D4:A2:91:CE:45:6E:BA:43:DB:81:7F:C1:DF:C0:86:2B:8A:F9:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a3073e85-2b7a-45f5-809d-4c36116cd85c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.225.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:37:6d:1e:9f:7b:05:0b:cd:e0:2b:e6:18:6a:0f:ad:2b:2b:
         cc:47:2c:b1:ae:10:a8:3b:03:33:02:e0:1f:64:d5:9e:99:29:
         0a:ed:d7:7b:91:f1:11:07:c5:2c:cc:45:34:21:d8:79:0e:d2:
         5c:ff:51:c8:5b:9d:21:5d:67:55:2e:f9:d8:e7:f6:91:9d:af:
         5e:6e:b0:dc:fe:a5:28:ab:41:31:65:9a:59:14:5e:d9:b9:53:
         dd:b4:cf:a3:2a:5b:55:8a:9e:e0:d9:64:7d:a6:5d:02:cd:68:
         58:5a:fc:28:fc:dc:fb:07:50:d9:9e:f6:7f:16:fd:a0:d0:f7:
         25:6e:a1:59:ca:53:c1:36:36:34:eb:56:ef:8e:d4:8c:75:1d:
         a4:4c:9a:45:e6:07:72:09:b8:30:70:f7:a1:6b:3c:7c:3f:34:
         6f:75:6d:0b:76:f7:40:2d:38:b9:bc:75:ae:f1:f8:5e:c6:e9:
         4c:15:11:ea:94:2a:15:19:72:11:67:86:c2:88:9e:fc:80:5d:
         42:a2:76:b9:04:a6:93:26:b8:f4:b6:2a:2b:e5:7b:16:72:6e:
         22:67:88:7a:5f:95:93:61:d9:21:6e:d5:34:95:b8:a3:31:b1:
         58:cb:4e:8c:34:40:cd:ea:67:91:2c:e8:98:9a:fd:78:00:ad:
         3d:57:d7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:05:14 2026 by rpki-client