Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/f32f1adb-ac8d-316e-a686-9fe4db005333.roa
File:                     f32f1adb-ac8d-316e-a686-9fe4db005333.roa (raw, json)
Hash identifier:          i+kyAN4iEf1wrUJbUdBPoN54wteqmX/xPyn8rC2E1P4=
Subject key identifier:   06:99:A0:36:09:71:39:E0:6E:2C:83:08:9D:F2:52:7F:31:77:64:CF
Certificate issuer:       /CN=226a13a2-fbfb-49ed-89c3-233c745ffa52
Certificate serial:       010D0C9F4328584ED431ED3E087EBD3069DBBC80
Authority key identifier: 37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/f32f1adb-ac8d-316e-a686-9fe4db005333.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     834
IP address blocks:        206.162.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:31:ed:3e:08:7e:bd:30:69:db:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226a13a2-fbfb-49ed-89c3-233c745ffa52
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=751ab48d-7de5-4ea3-87b0-b256d4cf127d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8e:f1:dc:bf:c8:0f:02:f7:ed:6e:f6:65:dd:
                    b4:17:1a:18:8e:c1:22:06:8e:c9:5c:ec:77:38:ed:
                    68:02:b1:73:33:f7:ef:32:e9:a8:ce:42:af:f1:a6:
                    75:3b:c2:71:36:43:fa:de:bd:c8:20:93:f9:42:3a:
                    c1:30:34:bc:21:e4:58:5d:aa:89:2e:b5:f5:e5:ac:
                    44:68:15:78:21:f1:f2:c5:72:4b:b6:1d:c3:1e:fb:
                    ac:29:b6:17:e3:4a:5a:7b:d2:e0:49:26:87:b1:e4:
                    9b:c4:cb:e2:9f:ae:e5:1a:77:72:7a:09:8b:33:6f:
                    f7:c4:80:07:d6:b5:4d:43:60:f9:31:65:41:41:8c:
                    51:2f:d9:ed:ef:2a:c0:1a:be:4a:49:cb:9f:87:3a:
                    c2:b8:f9:e1:1b:6d:3c:de:81:60:ac:dc:6d:d0:56:
                    7b:5c:10:4a:ad:25:f6:70:e9:1e:c6:3d:d4:53:5e:
                    bf:9e:9f:df:20:1b:f7:ab:6a:31:d9:b4:fe:53:43:
                    fe:dd:a5:23:89:6e:2f:32:4b:79:c2:18:84:9a:d8:
                    41:4f:e2:35:62:2d:98:88:17:94:5f:e4:df:02:88:
                    e8:9f:02:1b:34:f5:84:32:99:be:b1:ff:93:23:fb:
                    3a:7f:8e:f6:a1:9b:52:db:58:b8:b8:2c:01:56:c3:
                    65:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:99:A0:36:09:71:39:E0:6E:2C:83:08:9D:F2:52:7F:31:77:64:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/f32f1adb-ac8d-316e-a686-9fe4db005333.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.crl

            X509v3 Authority Key Identifier:
                keyid:37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.162.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:1d:30:78:8f:4b:e3:e1:eb:95:c3:6a:2d:2c:3a:a2:9e:63:
         3a:3d:3b:6c:4c:38:7d:18:be:f4:c8:ce:aa:f6:c9:81:6e:a9:
         e1:56:9a:7f:b6:87:0c:67:74:57:76:85:41:6a:28:29:7c:73:
         8d:02:bb:1d:78:b4:df:0e:d1:a6:b5:ef:79:91:a5:81:1d:64:
         87:f0:c1:b9:0f:f4:ee:36:04:4b:91:63:c6:d3:96:31:0c:de:
         37:3e:52:ac:1e:23:01:1f:e2:c0:fa:e1:99:f0:d2:17:32:06:
         bf:b4:13:21:e0:b1:ed:70:b3:ed:6e:25:2e:d6:ed:b6:f4:ef:
         63:58:58:ec:65:ed:24:a0:76:01:85:25:d5:44:00:e4:5a:de:
         79:43:af:9e:15:a7:10:72:fc:82:1a:65:21:75:14:eb:22:66:
         68:45:a3:c6:b4:b3:22:7b:2b:09:32:9f:15:66:39:b4:e2:f5:
         ae:0c:a0:fb:5e:de:24:50:4c:4a:a4:2e:15:c6:89:e1:ad:4a:
         41:f9:2e:e0:b3:07:e6:35:74:0b:81:fc:8d:d6:70:65:48:a9:
         73:cf:aa:83:da:e7:7e:ab:b2:c8:65:86:2f:a8:c4:92:36:6a:
         80:6f:cf:83:8c:87:75:e2:57:ca:da:5b:7a:52:ea:96:ef:a8:
         65:35:55:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:39:39 2026 by rpki-client