Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/f1b7c2e2-7852-302b-9307-88d678c0ef2a.roa
File:                     f1b7c2e2-7852-302b-9307-88d678c0ef2a.roa (raw, json)
Hash identifier:          HYnZrBuhRx4i8V2lCndbwVWX/OPvQvAL4ygIBjIKtHU=
Subject key identifier:   CA:E2:36:B4:40:5B:A2:0E:98:AB:5F:7E:22:02:E2:B4:43:DD:83:8F
Certificate issuer:       /CN=48c974e9-82f6-4ede-812c-5b9302f0c7cc
Certificate serial:       010D0C9F4328584E9EAFC858DD8FBBB1F6502500
Authority key identifier: C4:16:34:F3:51:6F:6B:E6:30:BB:50:16:8D:70:1D:08:1A:18:28:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/f1b7c2e2-7852-302b-9307-88d678c0ef2a.roa
Signing time:             Sat 25 Jul 2026 21:00:12 +0000
ROA not before:           Sat 25 Jul 2026 21:00:12 +0000
ROA not after:            Fri 23 Oct 2026 21:00:12 +0000
asID:                     54004
IP address blocks:        206.246.71.0/24 maxlen: 24
                          206.246.74.0/24 maxlen: 24
                          206.246.84.0/24 maxlen: 24
                          206.246.113.0/24 maxlen: 24
                          207.199.131.0/24 maxlen: 24
                          207.199.136.0/24 maxlen: 24
                          207.199.156.0/24 maxlen: 24
                          207.199.165.0/24 maxlen: 24
                          209.147.71.0/24 maxlen: 24
                          209.147.73.0/24 maxlen: 24
                          209.147.87.0/24 maxlen: 24
                          216.107.0.0/24 maxlen: 24
                          216.107.1.0/24 maxlen: 24
                          216.107.18.0/24 maxlen: 24
                          216.155.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/48c974e9-82f6-4ede-812c-5b9302f0c7cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/48c974e9-82f6-4ede-812c-5b9302f0c7cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9e:af:c8:58:dd:8f:bb:b1:f6:50:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48c974e9-82f6-4ede-812c-5b9302f0c7cc
        Validity
            Not Before: Jul 25 21:00:12 2026 GMT
            Not After : Oct 23 21:00:12 2026 GMT
        Subject: CN=2a27356e-975d-4c0c-90e7-ada686156fa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:73:1c:ea:fa:85:dc:e7:f1:88:3d:d9:89:14:
                    3d:f6:69:87:46:27:1a:8b:98:4f:8e:50:23:06:36:
                    e0:6a:d9:90:72:1a:9c:c6:c4:99:7a:3a:0b:91:be:
                    a3:e0:ec:fb:51:b1:97:35:c5:bf:10:00:13:85:73:
                    5e:4f:4e:90:79:68:84:e2:40:62:14:4a:95:f4:e3:
                    83:e3:01:ff:a4:54:81:af:03:b1:a4:9f:06:45:e6:
                    a9:b8:83:83:3f:29:17:63:75:da:8c:a6:16:fe:a5:
                    08:fe:54:9c:49:1b:cf:ad:e3:c4:23:35:1c:52:3b:
                    9a:c5:d5:01:71:91:c2:de:c1:64:b2:17:b9:90:7e:
                    bb:65:38:54:8c:8b:2d:43:02:36:0f:18:15:eb:83:
                    85:c1:28:ca:27:73:9e:24:9f:7e:f3:ed:82:92:ed:
                    41:f6:54:32:fd:ac:ad:15:ee:30:37:5e:35:0f:d3:
                    b8:87:7a:b4:52:7e:37:71:f0:7e:fc:02:18:27:25:
                    f0:f4:ef:53:b9:1e:01:f4:47:09:a4:13:f4:63:b5:
                    2b:b4:f9:80:eb:7c:32:c2:72:b0:5f:7a:b8:8e:49:
                    bf:6e:8a:d2:1f:b6:e2:6a:9f:3f:a7:fe:41:af:88:
                    b5:61:88:5b:43:7b:81:66:44:76:b5:65:3c:ae:7a:
                    bf:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E2:36:B4:40:5B:A2:0E:98:AB:5F:7E:22:02:E2:B4:43:DD:83:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/f1b7c2e2-7852-302b-9307-88d678c0ef2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/48c974e9-82f6-4ede-812c-5b9302f0c7cc.crl

            X509v3 Authority Key Identifier:
                keyid:C4:16:34:F3:51:6F:6B:E6:30:BB:50:16:8D:70:1D:08:1A:18:28:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.246.71.0/24
                  206.246.74.0/24
                  206.246.84.0/24
                  206.246.113.0/24
                  207.199.131.0/24
                  207.199.136.0/24
                  207.199.156.0/24
                  207.199.165.0/24
                  209.147.71.0/24
                  209.147.73.0/24
                  209.147.87.0/24
                  216.107.0.0/23
                  216.107.18.0/24
                  216.155.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:98:f1:85:6b:cc:6e:ba:53:cc:ff:aa:da:f4:11:e8:3d:39:
         67:ec:3a:43:79:2e:b3:a7:0c:c2:10:e8:d5:1a:16:7d:53:70:
         d8:43:c7:7b:ee:d2:69:c7:0f:e9:91:e7:43:02:24:5a:c5:e0:
         0b:90:63:fc:db:20:07:cf:a1:f9:6b:96:96:3f:b3:ed:5e:30:
         6f:ec:33:51:42:85:95:f0:d7:3f:ac:d8:17:53:36:01:1b:9a:
         c2:53:5f:3d:96:2a:ad:20:de:15:e9:c6:18:ce:b3:82:5e:f4:
         d9:ac:e7:c2:78:21:73:8e:b9:cb:92:1b:1c:53:ec:61:2c:0c:
         08:69:15:dd:33:71:99:71:1a:f2:d2:47:57:6d:6b:9e:eb:fa:
         28:71:04:c7:4a:29:aa:7d:77:17:c0:1e:1d:b6:2f:24:40:0a:
         c2:3e:f7:d2:01:ed:fb:bf:29:be:dc:17:80:0e:2d:0a:4c:56:
         fc:c7:cd:63:52:cc:3d:ef:a6:ba:e8:f6:11:c1:60:f2:9f:27:
         94:f4:46:7f:d0:03:a6:d4:d9:bd:23:11:03:f3:bc:6f:f8:da:
         3c:78:7f:ef:e8:71:e9:34:6a:71:7f:e0:f2:c0:82:dc:0c:be:
         c4:a7:a5:22:62:cc:8c:60:a1:07:23:02:9c:73:d9:4b:19:3a:
         be:e4:a4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:18:30 2026 by rpki-client