Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/bb4f8f51-dffa-3912-8631-c450929a36b7.roa
File:                     bb4f8f51-dffa-3912-8631-c450929a36b7.roa (raw, json)
Hash identifier:          tIT4NiHqxi3UUfEkVMDmc777HkGtNTJwCTAbR31mvuU=
Subject key identifier:   95:7E:31:D1:CF:36:2F:A3:79:27:F9:37:67:E7:71:D0:90:78:A9:CC
Certificate issuer:       /CN=06b2da7d-ae03-4c12-bd29-f0c285888740
Certificate serial:       010D0C9F4328584D60E4F4FC0940E8F9BE7A7790
Authority key identifier: B8:FD:89:4B:88:4F:53:16:18:88:90:87:6E:B8:1B:07:4D:27:4A:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/bb4f8f51-dffa-3912-8631-c450929a36b7.roa
Signing time:             Fri 03 Apr 2026 01:00:24 +0000
ROA not before:           Fri 03 Apr 2026 01:00:24 +0000
ROA not after:            Thu 02 Jul 2026 01:00:24 +0000
asID:                     14618
IP address blocks:        206.195.222.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/06b2da7d-ae03-4c12-bd29-f0c285888740.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/06b2da7d-ae03-4c12-bd29-f0c285888740.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:e4:f4:fc:09:40:e8:f9:be:7a:77:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06b2da7d-ae03-4c12-bd29-f0c285888740
        Validity
            Not Before: Apr  3 01:00:24 2026 GMT
            Not After : Jul  2 01:00:24 2026 GMT
        Subject: CN=cc732d91-4699-43df-98db-8075646ce0c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:eb:52:48:c5:cd:3d:87:aa:76:7b:99:4b:a5:
                    3c:c3:ba:ac:0b:10:3d:08:c0:03:ce:24:d5:3b:a9:
                    b2:93:9b:94:22:fd:ca:81:5d:c9:2a:92:90:89:0e:
                    8f:65:0b:de:43:9a:d8:82:87:84:cc:7f:49:db:4e:
                    a0:47:7e:74:25:31:fb:1a:aa:8b:39:13:ea:65:48:
                    fc:bc:be:e8:84:3a:4c:7f:d5:ea:cd:48:ca:64:e8:
                    cc:a6:42:2e:9a:3d:79:95:35:de:44:39:3d:f8:e5:
                    25:00:b5:fb:fe:cd:be:7c:d7:f3:57:20:a0:dc:81:
                    7a:a3:36:5a:50:dc:4c:12:2c:5e:d1:56:d7:9e:19:
                    35:28:28:97:51:60:a0:fe:2c:cc:10:0f:d7:3e:a3:
                    86:c8:72:e6:55:7a:f2:a5:38:2a:97:a6:6f:43:e6:
                    7c:b7:11:ec:f1:2e:2a:dd:f6:ce:b6:8a:fa:33:8c:
                    16:96:9e:d1:15:c6:f8:55:78:60:f3:45:81:ca:86:
                    6c:fe:65:40:f3:ff:17:e5:7c:2e:fa:dd:08:ee:58:
                    56:8a:1e:af:35:5b:d8:f6:ad:ec:04:63:20:89:82:
                    db:f3:f2:79:51:6b:17:b0:24:f3:4d:fe:3c:a2:80:
                    e9:16:aa:b1:61:84:8f:94:14:07:ef:bf:77:d8:08:
                    d7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:7E:31:D1:CF:36:2F:A3:79:27:F9:37:67:E7:71:D0:90:78:A9:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/bb4f8f51-dffa-3912-8631-c450929a36b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/06b2da7d-ae03-4c12-bd29-f0c285888740.crl

            X509v3 Authority Key Identifier:
                keyid:B8:FD:89:4B:88:4F:53:16:18:88:90:87:6E:B8:1B:07:4D:27:4A:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.195.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:bc:f9:53:71:a8:51:ec:f7:c4:a3:99:65:df:8d:97:46:8b:
         77:34:3a:4e:fd:fa:c7:84:a6:cf:7e:80:52:4b:22:c8:24:f3:
         28:47:17:69:9e:e5:32:69:82:b0:e5:2f:ca:df:4d:0c:4f:b6:
         7c:01:4e:ca:9f:73:ba:81:6a:a8:a9:bb:1a:d9:94:b2:51:ab:
         71:46:a7:8a:8f:0e:2f:10:09:0f:aa:da:08:06:b4:fc:8b:6c:
         ef:c7:98:1c:91:e9:bc:53:72:52:08:a2:7b:85:08:2f:3d:7b:
         71:50:66:71:b7:55:52:9b:c8:c1:30:3a:54:56:72:fb:62:ed:
         4d:63:bb:76:54:1a:69:06:e5:0b:61:c9:4d:7a:52:28:2e:03:
         68:28:06:ee:e4:8d:bf:98:71:88:8f:c8:b1:f0:cd:29:86:63:
         19:bf:56:91:ce:e6:8e:64:09:d1:49:91:43:90:86:63:0b:26:
         c3:4c:e8:07:7c:f9:2c:f1:0f:64:fd:c4:fc:03:6e:3b:4c:e6:
         0e:d9:84:f0:cd:c2:75:3c:0a:47:f1:78:e2:23:78:e5:72:c5:
         85:5b:b6:84:bb:fb:fc:b7:b8:cf:78:6d:34:d9:44:71:06:a5:
         df:f8:a9:48:76:39:cc:e3:64:6d:16:2d:ac:a6:e6:9b:51:95:
         72:eb:8b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:35:23 2026 by rpki-client