Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5/9eb3754d-c9a3-3dfb-9907-486d1ba4a797.roa
File:                     9eb3754d-c9a3-3dfb-9907-486d1ba4a797.roa (raw, json)
Hash identifier:          9PAE11B+h4dNvQgGH78saLmYgXYni4HJOsAl4w6C5L0=
Subject key identifier:   8D:A8:19:19:15:80:D4:C2:AA:D8:EC:23:4C:6B:43:61:DB:C6:F0:38
Certificate issuer:       /CN=22b1996e-371f-42c0-b515-e2f8763ed7c5
Certificate serial:       010D0C9F4328584D6C0FAA1F3D5C4F51A6D39BC0
Authority key identifier: A3:7E:3C:90:27:87:6C:DF:A2:A6:6F:B5:1A:66:80:0B:4E:8C:D1:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5/9eb3754d-c9a3-3dfb-9907-486d1ba4a797.roa
Signing time:             Tue 07 Apr 2026 01:00:23 +0000
ROA not before:           Tue 07 Apr 2026 01:00:23 +0000
ROA not after:            Mon 06 Jul 2026 01:00:23 +0000
asID:                     9541
IP address blocks:        206.168.200.0/24 maxlen: 24
                          206.168.201.0/24 maxlen: 24
                          206.168.202.0/24 maxlen: 24
                          206.168.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5/22b1996e-371f-42c0-b515-e2f8763ed7c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5/22b1996e-371f-42c0-b515-e2f8763ed7c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6c:0f:aa:1f:3d:5c:4f:51:a6:d3:9b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22b1996e-371f-42c0-b515-e2f8763ed7c5
        Validity
            Not Before: Apr  7 01:00:23 2026 GMT
            Not After : Jul  6 01:00:23 2026 GMT
        Subject: CN=d322fc43-f52b-4ffc-9fb7-5827da7c38c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6b:d6:e0:77:8e:02:fe:fd:70:0b:e2:56:96:
                    cb:f8:91:7f:26:0d:e1:c0:74:7e:33:c0:1e:21:e3:
                    20:b5:b8:33:a6:8f:ed:18:91:ba:c7:90:43:68:b9:
                    e7:3f:d9:4b:e1:47:a9:13:ee:8e:f5:38:e2:48:a3:
                    98:9f:c1:f6:b1:73:1e:75:ce:20:f5:67:33:6c:93:
                    bb:8f:99:61:df:82:0d:21:cb:6b:b6:0b:ec:2c:c5:
                    53:f6:6e:0d:a6:f1:d6:d7:39:69:2d:82:0e:3b:bf:
                    78:6a:eb:58:9e:2e:53:47:f6:e0:51:96:c7:2a:85:
                    47:5f:ea:44:9f:d0:7e:24:f6:78:73:1b:0b:c9:d6:
                    e9:6b:1c:0a:ef:ab:4e:26:51:90:a2:4f:76:b5:9f:
                    ce:71:c8:01:fb:c2:91:8a:1b:8e:b5:43:ed:33:00:
                    de:cf:fb:51:57:b3:53:7e:47:74:af:dd:b2:3d:b0:
                    c2:b2:fd:bd:0a:9d:61:da:5a:5b:f6:6d:7f:f7:61:
                    12:f6:03:f7:a4:4b:14:96:5f:a9:6b:08:50:f2:53:
                    df:eb:68:9f:c9:0f:b7:44:4e:28:b5:ba:39:9f:90:
                    b5:83:3c:bb:e4:1b:3f:9f:f9:36:9d:ec:07:c9:9f:
                    f0:a1:d3:f0:c5:0a:71:3c:20:ba:51:23:96:e7:51:
                    a3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A8:19:19:15:80:D4:C2:AA:D8:EC:23:4C:6B:43:61:DB:C6:F0:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5/9eb3754d-c9a3-3dfb-9907-486d1ba4a797.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5/22b1996e-371f-42c0-b515-e2f8763ed7c5.crl

            X509v3 Authority Key Identifier:
                keyid:A3:7E:3C:90:27:87:6C:DF:A2:A6:6F:B5:1A:66:80:0B:4E:8C:D1:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:9f:c2:4b:16:f8:3b:44:5b:af:c3:29:91:45:74:63:a7:db:
         0c:71:a8:50:38:17:f5:b6:3a:1e:e8:bd:46:9c:d5:95:53:d0:
         6b:25:79:ac:a8:a9:17:7e:65:9b:18:97:d7:a5:76:c4:dd:8e:
         09:81:eb:b9:95:03:db:11:f2:e3:e9:45:53:ee:20:bd:29:b2:
         70:5b:2d:48:e7:91:a7:f4:f3:bd:0e:da:2a:fb:96:42:6f:85:
         14:17:e6:6c:76:3e:7a:aa:3c:61:03:fa:a9:27:0a:7a:e7:8f:
         22:75:a2:1b:bc:80:3f:9c:8e:57:88:a0:57:79:3b:ca:ae:ef:
         66:d2:1d:2b:b5:9f:fc:9a:8a:93:8a:a5:a6:43:ab:2f:fa:25:
         da:14:9a:8a:c5:a6:f2:ba:9a:8d:10:77:c5:4a:e7:0a:69:53:
         75:02:72:67:6d:76:e5:4b:38:c1:d5:43:68:bb:ed:a0:1a:7d:
         a8:be:1d:d1:c5:c3:5f:67:b3:be:9e:1b:00:36:64:ef:4f:82:
         6b:70:c9:8a:b5:47:6c:9d:f6:55:a6:7a:7f:69:cd:50:e9:84:
         2e:1e:05:21:8f:07:b3:2f:e7:08:02:30:b3:60:11:c2:fc:e1:
         ee:d7:76:df:47:49:c0:54:8b:2b:4f:b3:c0:91:d7:7e:86:71:
         4c:e7:3a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:23:52 2026 by rpki-client