Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/f1b7c2e2-7852-302b-9307-88d678c0ef2a.roa
File:                     f1b7c2e2-7852-302b-9307-88d678c0ef2a.roa (raw, json)
Hash identifier:          14h1+9gdtJGW4oXhPoIqUGNb8t02LGmJXMn8j1qTzRw=
Subject key identifier:   24:A7:8F:17:59:32:3A:7A:84:81:CB:8D:30:92:88:08:96:26:18:2A
Certificate issuer:       /CN=48c974e9-82f6-4ede-812c-5b9302f0c7cc
Certificate serial:       010D0C9F4328584F411293DB68BCA111ADF8B300
Authority key identifier: C4:16:34:F3:51:6F:6B:E6:30:BB:50:16:8D:70:1D:08:1A:18:28:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/f1b7c2e2-7852-302b-9307-88d678c0ef2a.roa
Signing time:             Tue 22 Sep 2026 01:00:12 +0000
ROA not before:           Tue 22 Sep 2026 01:00:12 +0000
ROA not after:            Mon 21 Dec 2026 02:00:12 +0000
asID:                     54004
IP address blocks:        206.246.71.0/24 maxlen: 24
                          206.246.74.0/24 maxlen: 24
                          206.246.84.0/24 maxlen: 24
                          206.246.113.0/24 maxlen: 24
                          207.199.131.0/24 maxlen: 24
                          207.199.136.0/24 maxlen: 24
                          207.199.156.0/24 maxlen: 24
                          207.199.165.0/24 maxlen: 24
                          209.147.71.0/24 maxlen: 24
                          209.147.73.0/24 maxlen: 24
                          209.147.87.0/24 maxlen: 24
                          216.107.0.0/24 maxlen: 24
                          216.107.1.0/24 maxlen: 24
                          216.107.18.0/24 maxlen: 24
                          216.155.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/48c974e9-82f6-4ede-812c-5b9302f0c7cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/48c974e9-82f6-4ede-812c-5b9302f0c7cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:41:12:93:db:68:bc:a1:11:ad:f8:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48c974e9-82f6-4ede-812c-5b9302f0c7cc
        Validity
            Not Before: Sep 22 01:00:12 2026 GMT
            Not After : Dec 21 02:00:12 2026 GMT
        Subject: CN=2dd49828-df48-4267-ba63-0955662c63c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:87:44:40:df:c9:c3:66:a2:2c:9e:b7:a5:48:
                    60:cc:00:93:cd:7a:65:73:a2:7b:9c:29:4d:e8:2c:
                    16:d8:8b:ac:4d:a0:1c:3f:c6:16:9f:d2:3c:fc:23:
                    24:a2:54:ab:ac:0f:ac:84:21:61:32:55:3f:6b:a7:
                    d6:c4:df:a9:e0:ce:1a:7a:ab:f6:0b:34:34:56:19:
                    bd:90:bf:e4:17:58:c5:00:bc:dd:bf:60:4f:81:78:
                    bb:a2:94:9d:2e:ee:2a:f9:52:3f:7a:35:c9:be:7d:
                    07:99:89:fe:bf:b7:b5:e0:3b:af:af:57:e3:65:b9:
                    59:27:fd:20:c1:a6:49:82:fe:73:e5:cc:f7:d6:de:
                    81:86:9a:dc:d4:be:16:f3:19:c0:26:2e:10:a8:ce:
                    b3:26:8b:86:32:67:5c:5a:1b:6f:40:8f:7b:5a:b9:
                    08:84:01:9e:90:c8:1e:f3:ff:c8:2b:fb:c0:c0:9a:
                    f4:bb:f3:f5:fa:35:cb:85:6d:fc:80:c1:14:83:cb:
                    80:ce:ec:49:fa:dd:be:33:35:99:15:4e:e8:ec:12:
                    c0:0c:7e:78:90:42:7c:c6:5b:c8:21:74:ce:88:5b:
                    9b:63:c0:55:25:0e:f0:fc:2c:dd:07:fd:a0:ea:f3:
                    db:32:7c:3b:a2:5d:d2:5d:6e:c1:0b:7d:4b:95:a7:
                    1d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A7:8F:17:59:32:3A:7A:84:81:CB:8D:30:92:88:08:96:26:18:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/f1b7c2e2-7852-302b-9307-88d678c0ef2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/48c974e9-82f6-4ede-812c-5b9302f0c7cc.crl

            X509v3 Authority Key Identifier:
                keyid:C4:16:34:F3:51:6F:6B:E6:30:BB:50:16:8D:70:1D:08:1A:18:28:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.246.71.0/24
                  206.246.74.0/24
                  206.246.84.0/24
                  206.246.113.0/24
                  207.199.131.0/24
                  207.199.136.0/24
                  207.199.156.0/24
                  207.199.165.0/24
                  209.147.71.0/24
                  209.147.73.0/24
                  209.147.87.0/24
                  216.107.0.0/23
                  216.107.18.0/24
                  216.155.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:1b:06:c9:46:41:06:f2:f7:ef:c3:a7:0a:d4:93:20:db:6e:
         0a:ab:f1:f7:61:3e:44:b5:bd:17:0d:41:db:2d:f0:0c:6d:db:
         18:4d:d3:09:75:15:33:a3:b3:52:a4:cd:38:df:42:36:e3:28:
         e2:a5:82:cd:ce:86:3e:b6:68:2f:09:47:4e:16:dd:c3:93:89:
         b7:7b:89:95:bf:1e:d2:11:b8:57:45:1f:83:53:eb:d4:b4:e4:
         79:ff:86:d5:f8:50:6e:f8:27:32:35:50:4a:9a:98:af:ea:83:
         30:1e:14:ac:cf:0b:31:04:43:10:62:a5:cb:d7:0b:ee:66:ea:
         e8:22:18:20:db:97:b5:d3:32:c4:b2:de:3a:79:b5:a3:ea:a3:
         74:7f:4c:87:8a:1f:a4:e9:a7:4a:cc:b1:0e:e9:db:ec:95:d2:
         cb:93:d5:3c:23:f2:5c:89:9e:1f:38:6f:79:53:e6:15:53:ec:
         b2:a5:7b:7c:93:e4:69:9a:57:0a:ea:48:6e:e8:36:5a:e2:2e:
         45:b8:0e:5c:ab:8b:b5:88:72:d2:6a:6c:31:37:f6:ee:15:d2:
         b8:d5:20:bc:53:88:4f:d2:f4:e2:4f:c3:2c:e2:41:6d:8f:ab:
         6f:ce:65:88:db:d6:bc:a7:5f:37:e8:7d:e7:52:4e:97:8b:f3:
         ca:03:51:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:16:45 2026 by rpki-client