Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/11061581-43ef-393f-b709-32e6eb3baa5d.roa
File:                     11061581-43ef-393f-b709-32e6eb3baa5d.roa (raw, json)
Hash identifier:          xBLr+K/m9gkM8iRxIZZscJEWaNUwzMvDSuhDMdX1hOE=
Subject key identifier:   8F:07:B0:EE:CC:40:B2:0D:FE:D4:19:BF:42:36:A8:40:3D:A1:D2:D7
Certificate issuer:       /CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
Certificate serial:       010D0C9F4328584FB50BB714CB4D6862F1631D00
Authority key identifier: D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/11061581-43ef-393f-b709-32e6eb3baa5d.roa
Signing time:             Mon 02 Nov 2026 14:00:14 +0000
ROA not before:           Mon 02 Nov 2026 14:00:14 +0000
ROA not after:            Sun 31 Jan 2027 14:00:14 +0000
asID:                     13213
IP address blocks:        206.130.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Nov 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:b5:0b:b7:14:cb:4d:68:62:f1:63:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
        Validity
            Not Before: Nov  2 14:00:14 2026 GMT
            Not After : Jan 31 14:00:14 2027 GMT
        Subject: CN=843d5417-770b-450f-8af9-e61bb4f8c485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6d:cb:1b:6a:0a:57:bf:84:c4:76:d5:96:9a:
                    02:45:ed:b1:31:92:5d:c9:ae:63:2a:02:74:d8:76:
                    c8:9b:47:42:7d:72:58:12:6b:4b:f0:c2:ad:d0:8d:
                    37:2d:e6:e8:4b:1a:4d:be:2e:0d:79:1d:b1:2e:9d:
                    2f:0c:14:77:93:6b:19:a0:bf:c7:c5:81:0c:96:7b:
                    ee:4e:12:26:ea:8e:65:69:53:b4:f7:ba:a8:dc:e0:
                    c0:f9:bc:68:eb:7d:47:ab:6b:74:70:e7:22:7b:6b:
                    05:83:f6:97:31:e9:af:33:66:ef:9d:7b:90:43:99:
                    8e:05:16:7c:20:b2:28:bf:e8:5e:ae:f2:f1:43:22:
                    4e:85:e8:d7:d0:85:df:fb:83:49:c9:46:c8:58:d2:
                    a4:ac:83:c7:60:96:b7:61:14:73:42:49:bf:6f:3b:
                    3d:e4:ee:b0:16:fe:9d:8c:f5:e2:1b:8e:62:18:4c:
                    8d:62:92:ca:e5:f2:a2:a2:5f:f6:f3:67:d8:9e:de:
                    84:00:3a:09:df:1b:42:50:7c:a6:6d:b3:38:3a:76:
                    a7:06:86:54:09:9a:23:29:be:f6:b8:8a:2e:49:c9:
                    50:81:ff:85:14:9c:1b:7b:ca:bf:54:eb:30:2b:c9:
                    84:58:e7:29:78:72:17:7a:51:6d:14:cd:3e:6d:ef:
                    83:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:07:B0:EE:CC:40:B2:0D:FE:D4:19:BF:42:36:A8:40:3D:A1:D2:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/11061581-43ef-393f-b709-32e6eb3baa5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl

            X509v3 Authority Key Identifier:
                keyid:D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.130.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:db:a4:f2:1c:bb:2f:63:ee:21:46:c7:23:d2:26:5c:30:bf:
         85:87:90:cf:87:85:70:99:bf:5e:62:39:e1:63:80:0d:4c:62:
         85:e5:0e:e6:52:0c:56:c6:19:38:78:d8:57:13:ac:38:72:25:
         b1:c9:74:54:f6:04:cc:10:36:6d:65:b3:45:1f:63:6c:36:96:
         89:ad:1e:b0:27:c5:d1:d2:e7:17:e0:2c:e4:82:7b:d2:af:10:
         8c:90:87:e9:b8:e2:63:69:2a:11:71:9f:22:d6:9e:e2:30:e6:
         f4:ff:61:10:c0:7e:92:d0:f2:5b:56:b9:9d:d5:72:cf:ae:2d:
         fe:4f:3a:55:c7:66:08:8b:23:9b:5f:68:8b:e6:4c:7b:d0:31:
         51:71:c4:b1:4f:a7:e8:fe:af:d5:8f:e9:45:c9:bd:69:6e:18:
         f1:cc:9a:63:2d:aa:e1:6e:c8:14:e4:70:b5:f5:20:3b:ad:46:
         c8:1f:ab:97:e8:0a:04:6c:92:ed:fa:e4:6c:8c:b8:1d:fb:e7:
         dd:2d:f0:f8:69:ea:a4:97:25:fb:ab:e7:5f:b8:7b:52:2a:5e:
         3c:cf:f5:36:ed:91:58:d8:4a:55:63:0d:53:5f:95:73:77:ab:
         2c:83:4c:df:3d:4e:7d:0b:6c:04:6e:e7:df:c7:ed:8c:2a:ec:
         c4:89:1c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 20:01:05 2026 by rpki-client