Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/896b34a0-7255-3d97-889e-4198edcd6b5b.roa
File:                     896b34a0-7255-3d97-889e-4198edcd6b5b.roa (raw, json)
Hash identifier:          lSFeLjEGN83HmxtKHc3WSKfUGkMG/0RrzKruTutAQq8=
Subject key identifier:   62:72:8A:F9:98:1C:18:2A:88:F4:9E:43:FF:71:71:22:DC:9E:F1:64
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584D59EA6941B3B1410417DCCB70
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/896b34a0-7255-3d97-889e-4198edcd6b5b.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     271
IP address blocks:        206.12.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:69:41:b3:b1:41:04:17:dc:cb:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=e0c1a6b0-0ffe-45df-9531-ffecefb4c0bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:00:9a:80:e7:16:88:7f:27:a7:d1:e4:07:eb:
                    19:6a:31:4c:f9:d2:07:09:a7:d3:00:44:b1:39:97:
                    f3:ae:d8:64:17:90:9d:4e:f3:3a:6f:8d:4b:32:4d:
                    3c:58:19:03:f7:ad:f6:d2:26:7f:76:0d:5c:9e:a8:
                    ab:71:0b:09:8b:15:03:88:b0:70:25:80:8e:e4:de:
                    71:a3:5a:c4:db:de:d9:32:c7:6a:90:19:1e:a2:2f:
                    b2:2a:29:93:09:bc:2c:1a:e1:83:73:2b:94:89:97:
                    71:e9:82:bf:40:03:2f:be:e8:35:e3:b4:c3:7b:c5:
                    1a:6e:de:75:27:ed:b6:00:23:cf:7c:0c:8d:fd:fc:
                    b0:e0:3d:26:bc:e8:c4:b6:56:c7:84:69:a7:3e:63:
                    73:ec:75:74:d2:e2:12:e8:be:dd:a8:1c:91:59:a5:
                    af:89:ed:ac:94:d7:f2:a5:6a:e7:18:1f:a7:4b:4e:
                    33:d5:61:94:5e:25:ef:b6:b3:04:02:40:e5:bb:e0:
                    00:aa:17:e3:c6:9b:ab:73:41:80:b5:5d:1f:b6:e1:
                    92:5a:8c:65:76:da:a3:ae:e7:77:7e:9f:29:33:12:
                    be:e9:14:1e:3f:ba:2c:a2:a2:90:b4:e5:12:1b:dd:
                    53:19:f3:49:23:ea:5d:e3:7c:10:64:73:bd:67:42:
                    13:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:72:8A:F9:98:1C:18:2A:88:F4:9E:43:FF:71:71:22:DC:9E:F1:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/896b34a0-7255-3d97-889e-4198edcd6b5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.12.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:6a:2d:51:d0:cd:60:2a:ea:28:7a:10:5c:29:a3:29:1a:2b:
         7a:39:72:7c:74:70:e8:1d:41:22:85:c5:11:2e:a0:1f:e1:e1:
         7d:0f:dd:68:16:95:52:61:73:15:b3:bd:61:87:d4:22:bd:58:
         32:d2:b9:82:72:0c:e2:b3:ec:c2:3e:3e:21:26:97:b2:2c:9f:
         7f:52:68:5c:f6:c8:46:b4:94:c6:8d:16:5e:8d:39:8e:82:7c:
         8e:a6:fe:83:4a:af:b5:2a:7e:48:32:53:8c:99:a0:32:a4:1f:
         40:34:97:86:fa:04:88:d5:92:c0:78:02:a7:6d:ba:b5:08:a3:
         34:3d:b6:f2:f0:f2:f8:f5:3c:83:64:3d:2c:8b:ad:e1:cd:da:
         ae:ae:fc:fe:0e:f4:6a:5c:bc:8d:5b:ad:ff:e2:72:f7:a8:82:
         b4:d1:3c:80:6b:66:ac:ed:a7:a5:f9:ad:c0:11:cb:73:2b:fc:
         9f:c3:ba:0c:d3:97:77:be:b7:76:0d:0e:2a:54:4a:d4:64:b2:
         55:db:14:6a:01:78:4b:ee:eb:5a:66:00:0b:f9:49:d7:4a:82:
         80:d8:2f:cf:64:62:9c:c1:a5:39:03:78:f0:7c:c6:ed:0c:60:
         6e:c8:ab:db:94:83:7c:03:38:03:d9:1a:87:3e:3d:25:a6:5d:
         cc:5e:f6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:04:25 2026 by rpki-client