Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/135588ac-24c1-380f-9059-f9b09563076a.roa
File:                     135588ac-24c1-380f-9059-f9b09563076a.roa (raw, json)
Hash identifier:          jfvU6BKF6W8EPYFCADtiWQg4AbUmVbnA/IKwyK4Wi+4=
Subject key identifier:   91:C0:C6:A5:91:D1:31:9E:D4:DD:85:F4:BB:DC:CF:0D:DD:CB:78:5B
Certificate issuer:       /CN=226a13a2-fbfb-49ed-89c3-233c745ffa52
Certificate serial:       010D0C9F4328584F7352E0A827A3692CC6BC2C00
Authority key identifier: 37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/135588ac-24c1-380f-9059-f9b09563076a.roa
Signing time:             Sat 10 Oct 2026 01:00:13 +0000
ROA not before:           Sat 10 Oct 2026 01:00:13 +0000
ROA not after:            Fri 08 Jan 2027 02:00:13 +0000
asID:                     6939
IP address blocks:        206.125.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:73:52:e0:a8:27:a3:69:2c:c6:bc:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226a13a2-fbfb-49ed-89c3-233c745ffa52
        Validity
            Not Before: Oct 10 01:00:13 2026 GMT
            Not After : Jan  8 02:00:13 2027 GMT
        Subject: CN=e643def6-c994-4479-9b11-878742bb3489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f5:a2:68:2a:5e:66:ac:90:c1:d3:1a:4c:82:
                    fd:56:fc:57:b9:20:87:00:8a:0c:c1:dd:1d:77:18:
                    c9:05:8e:91:67:5e:e8:71:d6:a9:0b:31:c7:ae:ed:
                    1b:d2:f6:a2:e0:bb:72:10:33:d8:74:32:68:22:9b:
                    90:a7:8b:1a:5d:05:00:9f:a3:a5:e6:eb:e3:82:c2:
                    cb:65:93:5b:ad:ea:02:0b:30:ad:28:a3:04:47:8f:
                    c6:c8:e7:3d:14:d1:6b:12:ee:50:c2:1d:30:97:ea:
                    80:57:3f:af:73:22:8b:87:38:67:1d:18:00:f0:62:
                    24:2c:b6:4f:c3:21:b7:47:5b:72:02:c8:64:bb:db:
                    cc:d7:41:1e:47:b0:df:46:93:70:4c:cf:be:e3:9c:
                    aa:74:55:e9:84:22:72:55:34:57:0e:55:98:57:4c:
                    af:0e:fe:33:56:1f:d5:c1:0a:eb:a9:f1:84:b6:1c:
                    fb:e5:eb:4c:71:59:ce:86:33:9d:3c:9c:12:c2:17:
                    e2:7c:5e:ae:bc:8a:0d:14:31:76:4a:12:67:69:34:
                    ea:0a:0b:87:d2:cf:6f:c1:26:f7:69:67:d2:60:fb:
                    5e:28:b5:ff:97:8e:ee:2d:f1:45:fa:6d:3a:78:fc:
                    15:fe:3e:68:4d:3a:b3:b0:80:66:42:f8:04:1b:14:
                    e4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C0:C6:A5:91:D1:31:9E:D4:DD:85:F4:BB:DC:CF:0D:DD:CB:78:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/135588ac-24c1-380f-9059-f9b09563076a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.crl

            X509v3 Authority Key Identifier:
                keyid:37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.125.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:65:c0:79:94:12:86:8e:03:dd:8d:ee:ab:d4:2b:2d:83:98:
         e1:c8:f8:28:7a:44:01:c7:93:4e:f9:3a:33:f6:e8:03:c9:88:
         52:40:21:5c:01:00:f6:ab:fc:62:38:ab:0c:6b:15:bb:b2:ed:
         e2:9b:4d:f7:ce:5f:46:c8:d2:ce:5b:06:21:dc:ea:58:20:de:
         cf:aa:8e:51:8c:5f:ea:1c:c3:f2:96:d1:95:e3:e4:51:5b:7f:
         d5:3b:aa:5a:84:ce:f0:82:27:2e:b6:2f:85:dc:eb:40:34:39:
         1d:99:69:d8:05:ab:dc:42:d9:f2:eb:5c:1e:fb:5f:35:f0:af:
         9f:3f:ad:5f:6e:1c:60:49:5f:8a:f1:af:63:07:8a:0e:8c:7e:
         c2:c1:b4:3f:47:f8:ab:dc:80:97:02:65:5d:4e:e7:34:02:a2:
         f6:28:69:e9:96:84:93:99:8a:f8:4b:fb:ed:f1:6a:e6:2e:1a:
         3f:47:0d:b7:d4:f0:3e:91:c9:a3:03:71:eb:99:8a:5a:f5:f4:
         bb:56:3c:05:f9:c9:96:e2:b1:50:da:4c:29:8a:42:af:ed:65:
         0b:aa:42:e1:a4:30:2d:c9:99:89:89:aa:46:69:ed:0a:91:72:
         c8:6a:83:3e:ba:30:99:14:37:7b:51:0b:b2:a2:3e:25:b8:e3:
         fd:e4:84:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:23:45 2026 by rpki-client