Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/c6eba4d0-e78b-3380-8a7e-c6f25aee6ccf.roa
File:                     c6eba4d0-e78b-3380-8a7e-c6f25aee6ccf.roa (raw, json)
Hash identifier:          Ld0QbcBmB9EzPP6NgOKWVeOJbh+lBq5H5FpAhC2aL2c=
Subject key identifier:   2E:6D:69:6F:91:00:BD:BB:E1:E9:6C:9A:B9:91:03:9D:DB:9B:89:26
Certificate issuer:       /CN=4a06d1f9-0d04-482f-a665-8c270260e2c1
Certificate serial:       010D0C9F4328584D869552B8DAE91A08146D0880
Authority key identifier: 7B:44:2C:34:6A:A0:F4:F0:11:B5:27:93:C3:37:45:6B:6A:A6:43:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/c6eba4d0-e78b-3380-8a7e-c6f25aee6ccf.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     399103
IP address blocks:        206.168.154.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/4a06d1f9-0d04-482f-a665-8c270260e2c1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/4a06d1f9-0d04-482f-a665-8c270260e2c1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:52:b8:da:e9:1a:08:14:6d:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a06d1f9-0d04-482f-a665-8c270260e2c1
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=d763d276-1e2b-4622-a534-9cffac78df3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8e:32:f4:fe:18:cd:e4:b9:08:ff:9f:94:9c:
                    7c:4d:e8:07:e2:dd:e2:78:78:27:d4:e6:a0:39:21:
                    88:a0:a7:f1:95:ee:f0:42:02:ef:fb:7f:4e:2f:10:
                    fa:57:02:88:bf:c7:af:f0:f9:de:f7:41:fa:af:00:
                    c3:e6:c2:b1:46:0c:4e:fa:c7:59:46:90:74:ff:e1:
                    9d:ed:07:71:d9:dc:60:e6:67:03:d9:2d:9f:cc:0f:
                    31:af:06:f8:3b:4e:8e:05:12:6f:fb:fe:a8:7d:b9:
                    32:c6:46:12:e7:8c:b1:08:fe:15:e8:29:b4:f4:43:
                    10:59:30:8c:1e:3b:f8:02:29:ca:04:1a:30:65:3d:
                    90:37:47:9b:ae:91:28:4f:b7:92:1b:5e:54:48:76:
                    29:6f:79:ae:29:0f:ad:51:8c:15:c8:a5:04:61:90:
                    89:9e:fe:be:da:36:50:06:79:21:92:62:e5:e7:9c:
                    6a:ca:c3:b8:2b:e1:40:44:06:56:e5:ec:81:99:11:
                    ab:9e:b5:c6:90:1c:b9:01:0b:d8:31:94:6f:5b:4a:
                    da:57:94:ee:58:42:18:97:a0:0e:70:b7:ed:b2:d3:
                    39:a7:f8:2e:33:1c:88:76:74:61:6b:1e:bb:6f:0d:
                    db:13:51:79:b1:43:01:5f:5f:63:63:3b:91:d2:da:
                    e4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:6D:69:6F:91:00:BD:BB:E1:E9:6C:9A:B9:91:03:9D:DB:9B:89:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/c6eba4d0-e78b-3380-8a7e-c6f25aee6ccf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/4a06d1f9-0d04-482f-a665-8c270260e2c1.crl

            X509v3 Authority Key Identifier:
                keyid:7B:44:2C:34:6A:A0:F4:F0:11:B5:27:93:C3:37:45:6B:6A:A6:43:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.154.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:a4:79:0a:c0:6f:36:79:a8:93:ea:a0:4e:67:51:97:2f:28:
         81:b1:26:df:6c:24:b7:27:62:37:eb:1d:de:9c:58:d4:31:60:
         f7:fe:21:20:1e:49:35:91:e5:c2:5a:50:25:fc:da:5a:b2:58:
         7f:15:e9:6f:f4:cd:f0:7e:33:e0:78:a4:f3:1b:44:a0:d1:ac:
         b4:7f:08:9c:85:c5:3a:4e:48:1d:1b:bc:5d:75:ed:5a:cc:45:
         1c:51:60:e9:0c:40:dc:0d:f6:e7:53:7a:b4:f3:83:de:fd:c3:
         f3:47:27:18:f7:43:8b:98:56:7f:97:f8:d8:1a:83:c7:17:8d:
         da:71:1f:85:14:88:6e:78:b7:06:bd:43:e9:a9:da:be:78:be:
         a6:d8:e4:f7:bb:ae:8c:b8:c2:c0:71:dd:d5:1a:9a:51:a1:ca:
         45:5c:59:cc:7b:9e:a5:cc:16:03:48:cd:00:68:49:1a:4c:7d:
         03:a7:31:bf:fc:ef:27:90:ab:41:39:1d:44:4c:84:91:df:d9:
         92:84:df:03:62:b3:74:50:d7:a7:88:2f:71:d1:57:fa:c3:00:
         ac:73:3b:62:cf:ea:0d:d4:aa:bd:a3:02:45:a5:4a:47:7d:54:
         c4:38:04:ce:ef:7d:b2:f4:34:ee:35:c4:54:6e:2b:84:fe:db:
         0e:01:8d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:46:00 2026 by rpki-client