Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/78c5ad37-a386-39d6-bf00-0437906bd824.roa
File:                     78c5ad37-a386-39d6-bf00-0437906bd824.roa (raw, json)
Hash identifier:          xPOmDf+/UXoTnQUuznDZQN+U0arpvYDkWS6BgfTjkIw=
Subject key identifier:   9A:86:B6:CC:5D:E1:9D:70:99:5C:5A:14:81:E4:51:F7:DF:01:1E:71
Certificate issuer:       /CN=1add3b23-5fb0-4412-be17-98450d352516
Certificate serial:       010D0C9F4328584EA7940A6BBD845836F20A1300
Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/78c5ad37-a386-39d6-bf00-0437906bd824.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397658
IP address blocks:        206.183.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:0a:6b:bd:84:58:36:f2:0a:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=06cbf1fc-a77d-4dd8-bd29-0c68b430b72f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:da:86:c1:8d:eb:9c:68:99:c9:c4:56:0c:6d:
                    b0:b1:d3:c2:7b:fe:1a:65:03:53:68:8a:97:87:bc:
                    3c:90:77:30:94:6d:7b:c2:97:a8:41:b1:03:cc:65:
                    b2:32:36:e8:a9:a2:94:29:44:bf:60:f0:94:9f:3d:
                    cb:eb:de:a5:61:9b:ee:31:67:59:8e:3a:a5:41:2f:
                    59:41:65:13:43:ff:b6:83:90:f5:9f:b6:7e:cf:0b:
                    69:a3:42:ce:51:ae:8c:a3:94:be:4f:0c:e8:c0:04:
                    c3:41:f7:94:5b:29:ce:82:3a:35:0d:73:1b:6f:9c:
                    48:5f:a9:6a:ef:4b:79:8b:77:d8:a5:0f:8e:0a:5f:
                    14:e7:86:4b:de:d0:26:98:5a:5e:5f:14:1d:5b:1b:
                    15:d6:89:4e:3b:b8:6f:f4:da:4a:e4:ae:5c:f7:4d:
                    31:35:e2:72:80:62:5d:f7:77:87:cf:87:2c:ef:84:
                    f9:7b:4b:28:7f:e8:77:f6:68:9a:17:f0:81:2f:08:
                    66:4d:e7:5b:0d:01:4f:e1:4b:db:d8:88:7b:a7:9b:
                    be:7e:92:84:9e:61:4f:7c:c8:f4:ed:00:8b:b5:c1:
                    ba:4a:fa:91:1e:02:97:30:51:d1:99:57:a2:2e:7a:
                    1d:e3:e3:16:71:54:7c:b4:93:22:2c:7b:3c:1a:ed:
                    ad:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:86:B6:CC:5D:E1:9D:70:99:5C:5A:14:81:E4:51:F7:DF:01:1E:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/78c5ad37-a386-39d6-bf00-0437906bd824.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl

            X509v3 Authority Key Identifier:
                keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.183.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:99:eb:24:d9:4e:3c:26:57:b2:b6:f2:2e:b3:dd:86:82:25:
         37:e4:92:1d:43:b5:e6:e4:09:94:e6:b1:74:b1:53:7a:25:6a:
         66:35:63:23:12:fe:ab:1f:e3:cb:28:42:1f:c0:8b:82:3d:8c:
         a1:e3:0a:c8:4d:93:5f:f3:b3:71:44:3d:ae:9d:e3:b7:23:58:
         75:01:63:f9:e5:56:14:b2:3c:9c:81:6e:65:ad:22:c6:95:97:
         82:30:a7:0d:7b:f6:18:a2:56:4f:ec:4e:91:86:fc:29:e0:b9:
         35:ad:b1:d7:ad:54:7f:e9:a3:b2:81:15:fb:ec:c7:2d:52:45:
         3a:4d:b9:79:52:12:74:35:4c:15:95:ba:79:9a:ca:56:50:7b:
         50:c3:50:02:b6:b9:02:d2:0f:c7:61:8c:49:b0:63:33:54:fe:
         09:2a:07:53:05:d6:11:9f:67:b1:74:f0:74:73:3e:4e:e9:cb:
         48:3b:2c:ab:a9:85:09:9b:3c:89:0a:9c:a2:7a:71:4b:e9:17:
         cf:1e:f9:aa:6a:b4:be:1f:65:6d:b4:5b:cd:a5:e5:cc:cc:f6:
         c4:3b:d1:0b:5f:33:7d:66:a5:e9:84:a8:17:34:22:ef:c8:94:
         29:40:b6:03:9b:c1:69:45:05:5e:c7:91:54:1b:1e:8b:7f:da:
         24:74:07:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:38:46 2026 by rpki-client