Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/5b9dfdf5-ca90-363f-81e8-e272bda9e88e.roa
File:                     5b9dfdf5-ca90-363f-81e8-e272bda9e88e.roa (raw, json)
Hash identifier:          RsslHzpWOUoYOWR8/VOdwnC0nqXEv3gGCQLshc8Ty3c=
Subject key identifier:   85:61:D6:36:26:BE:EB:A6:6F:06:13:15:7D:E8:C1:80:41:41:68:1C
Certificate issuer:       /CN=a8825ed0-210f-48ae-8970-c92773afbb48
Certificate serial:       010D0C9F4328584F7FE2DD483D05B280609F71C0
Authority key identifier: BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/5b9dfdf5-ca90-363f-81e8-e272bda9e88e.roa
Signing time:             Wed 14 Oct 2026 13:00:12 +0000
ROA not before:           Wed 14 Oct 2026 13:00:12 +0000
ROA not after:            Tue 12 Jan 2027 14:00:12 +0000
asID:                     16766
IP address blocks:        206.63.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7f:e2:dd:48:3d:05:b2:80:60:9f:71:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8825ed0-210f-48ae-8970-c92773afbb48
        Validity
            Not Before: Oct 14 13:00:12 2026 GMT
            Not After : Jan 12 14:00:12 2027 GMT
        Subject: CN=38061490-d2e3-4b8b-afcf-743978aee9ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:8f:f1:36:62:46:b7:ab:c9:fe:24:77:83:9d:
                    46:b8:b2:e2:10:5e:12:2c:ee:c8:0f:6c:46:26:03:
                    1a:63:02:34:85:fa:d2:bd:e2:46:b5:c4:c0:fd:e4:
                    26:03:22:4f:56:c8:fe:56:6e:6d:2c:60:5c:53:bb:
                    10:d1:fb:51:e7:88:a3:fe:bd:30:47:bb:95:6c:7b:
                    08:1d:d6:53:7a:ec:a1:c6:b1:9f:f0:46:8f:1e:1d:
                    8f:98:03:ec:7c:85:7c:bf:1f:08:60:27:b3:8a:2c:
                    40:72:08:8f:15:8b:7e:de:f0:aa:b6:c6:da:9d:0f:
                    99:b7:57:d1:4d:20:69:aa:63:91:ef:af:1d:45:a8:
                    de:26:31:7f:12:88:42:2a:b3:39:f8:c9:52:7e:78:
                    b9:fd:e1:cb:c6:88:cd:b3:73:e1:91:59:e4:66:fc:
                    d7:70:1d:44:0d:c1:b0:87:5a:dc:bc:d4:59:9c:67:
                    a1:82:af:7e:7a:75:5f:d8:53:a1:ed:26:3f:08:1b:
                    2e:25:0c:b3:a0:df:eb:70:3b:8b:c7:96:50:0e:f3:
                    46:e7:d6:92:85:9d:2e:7c:ea:47:ec:37:89:f5:39:
                    e8:03:58:9d:0f:3f:3e:e4:ca:4d:ae:21:30:d5:7d:
                    7c:df:c3:2f:44:4f:8d:35:7a:16:46:65:d5:02:0e:
                    06:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:61:D6:36:26:BE:EB:A6:6F:06:13:15:7D:E8:C1:80:41:41:68:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/5b9dfdf5-ca90-363f-81e8-e272bda9e88e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl

            X509v3 Authority Key Identifier:
                keyid:BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.63.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:fd:01:ff:5b:9d:5d:91:02:d7:08:6a:5c:48:31:ee:36:a9:
         c3:65:ba:3a:b9:c6:e7:96:82:bd:37:47:de:ae:4c:76:66:6f:
         3c:7e:26:c3:e2:2c:01:82:f4:e5:6f:f1:17:f3:d7:2c:20:0f:
         8b:03:ee:6a:c8:66:31:29:32:66:91:e1:2e:c7:3c:8b:82:66:
         10:c6:79:c9:02:48:7b:78:48:ad:9f:1e:37:0f:f0:fc:c4:61:
         af:de:c0:e1:ef:8f:a8:da:37:0b:54:8b:83:e3:00:33:1e:15:
         9b:da:a9:be:9b:53:6d:34:f0:bc:16:e4:45:c9:0a:a3:ab:2d:
         59:de:c9:55:e8:88:8f:21:d2:c0:c5:1f:8a:cd:19:cf:24:ef:
         0a:bb:fb:63:1a:20:49:da:ae:6f:55:11:69:63:7d:1f:dc:04:
         1b:ee:1a:2d:85:f5:60:aa:09:e1:bc:7f:82:ad:21:aa:1c:e2:
         0f:57:47:45:a6:62:6c:97:09:dc:42:9a:9c:3f:b4:28:52:c8:
         e7:46:47:0e:3d:8f:6b:62:f1:0c:04:e1:14:6a:a6:47:2e:ca:
         a4:32:1d:a1:51:3e:7d:a7:30:36:f1:e6:fd:b2:6c:9d:23:8b:
         e6:bf:e3:11:27:a9:d5:cd:84:a1:da:a2:01:7c:07:f7:8d:27:
         b8:bd:63:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 11:08:00 2026 by rpki-client