Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/280c53a6-83bc-37a6-b15e-55e1bf0f2a63.roa
File:                     280c53a6-83bc-37a6-b15e-55e1bf0f2a63.roa (raw, json)
Hash identifier:          aN0Pi96PlgH0LM8oCI96D8+O4Fgy5UXDg2u8yqEVEm0=
Subject key identifier:   A6:62:23:B8:82:73:2F:EC:D7:04:85:90:2D:CB:C8:71:84:22:47:F9
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584EA798B5F3E789280C8ED32100
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/280c53a6-83bc-37a6-b15e-55e1bf0f2a63.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     852
IP address blocks:        206.108.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:b5:f3:e7:89:28:0c:8e:d3:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=feda9227-8588-41f9-8cfc-86a7dd368e87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:1c:f9:2c:f7:ec:13:9f:b7:96:16:85:fb:ef:
                    c0:5c:2a:56:3a:b4:97:5e:95:ab:c1:b5:48:98:de:
                    88:8b:f1:de:a8:36:72:94:16:5e:f0:a7:51:0c:e5:
                    9f:35:5a:09:e8:ed:c3:63:05:e2:1b:6e:07:ff:74:
                    bd:da:c6:e0:74:cf:8d:fa:62:17:d6:b8:3e:0b:eb:
                    ed:cc:79:82:b8:e9:80:c2:56:28:14:ad:4f:23:5e:
                    80:15:0b:fc:dc:01:96:71:de:69:e9:26:63:00:89:
                    91:08:ee:07:93:c9:f3:9e:81:bb:56:29:12:ad:d5:
                    b9:ad:94:92:1b:62:2f:a4:97:ec:c7:40:e1:d5:55:
                    2a:97:c3:76:9a:fa:dc:e4:d0:91:99:6f:e1:85:b3:
                    8b:f1:89:9c:0c:3c:19:8e:21:1f:03:11:02:37:1f:
                    05:c4:0b:84:84:e2:38:d1:85:3d:c2:e4:2f:98:9e:
                    b4:1b:f6:b8:a8:c9:bc:d1:f0:54:73:27:fc:35:47:
                    32:48:34:82:31:7c:1d:e6:09:a2:88:a1:0e:e6:45:
                    4f:a4:5a:94:a8:13:05:6b:45:b8:af:20:38:13:fc:
                    85:ff:56:8b:17:df:34:4c:0a:4c:9c:de:44:20:4a:
                    9a:d7:17:3b:dc:e7:ae:0e:e3:99:5b:07:6a:fe:4a:
                    5d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:62:23:B8:82:73:2F:EC:D7:04:85:90:2D:CB:C8:71:84:22:47:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/280c53a6-83bc-37a6-b15e-55e1bf0f2a63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.108.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:78:9c:35:df:22:22:42:65:a2:eb:ca:e0:bc:3b:45:84:8f:
         0a:78:93:cd:57:ff:95:4f:ec:aa:b7:d8:a4:ed:b9:6b:13:f0:
         29:2a:61:ba:63:a8:93:10:5f:54:79:43:f7:d2:a3:b2:b0:fc:
         e3:90:a3:b6:8d:6d:73:ab:a5:d6:27:fb:ce:83:bb:39:53:f5:
         45:2f:3a:c5:73:f6:ca:b7:54:f0:04:91:81:74:76:96:ec:0c:
         b1:c7:fe:f8:eb:e4:11:9c:e7:2f:9c:d3:57:77:26:61:a6:b6:
         e5:02:3c:0d:d1:2b:0d:bc:cb:84:75:90:f4:69:9e:39:85:b9:
         f6:88:c6:8c:68:ec:45:f4:10:92:56:d8:fc:1c:9d:86:c8:8a:
         0c:f0:14:0f:3b:87:73:3a:60:17:d1:1c:c4:1d:c5:32:99:c8:
         42:10:34:13:b1:0d:3a:8e:17:d4:1a:66:da:70:c5:a9:f9:71:
         d4:64:1b:a2:e5:fa:45:75:45:85:71:bc:42:ac:3f:f9:0f:ed:
         de:b1:14:c4:be:8d:a2:be:26:81:35:b2:a7:de:3f:95:23:2d:
         80:18:37:8f:55:8b:bc:00:d8:c1:f3:34:24:b3:b0:2e:97:94:
         af:35:54:8d:3b:f6:e3:1e:65:b2:57:ad:24:53:41:3e:df:23:
         2a:27:c5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:16:12 2026 by rpki-client