Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8eeb7a13-bcd2-48f7-b9b7-573102c88a1d/22764137-5f6c-3005-b83a-15b060f0a5af.roa
File:                     22764137-5f6c-3005-b83a-15b060f0a5af.roa (raw, json)
Hash identifier:          c3OqG3LEzchAGCnaUSfj7IYKQ8rvrgnyg+vSTaPc19Q=
Subject key identifier:   DA:DF:60:A2:B6:FB:76:01:DA:B7:6A:AE:87:F9:C4:31:9F:BE:E1:68
Certificate issuer:       /CN=8eeb7a13-bcd2-48f7-b9b7-573102c88a1d
Certificate serial:       010D0C9F4328584D80822B1EF8F4FD0AC1C5BE40
Authority key identifier: D1:CD:23:A7:5F:8C:AE:1D:9E:48:01:55:B4:7E:D4:CB:34:8A:43:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8eeb7a13-bcd2-48f7-b9b7-573102c88a1d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8eeb7a13-bcd2-48f7-b9b7-573102c88a1d/22764137-5f6c-3005-b83a-15b060f0a5af.roa
Signing time:             Tue 14 Apr 2026 08:47:19 +0000
ROA not before:           Tue 14 Apr 2026 08:47:19 +0000
ROA not after:            Mon 13 Jul 2026 08:47:19 +0000
asID:                     9423
IP address blocks:        204.126.106.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8eeb7a13-bcd2-48f7-b9b7-573102c88a1d/8eeb7a13-bcd2-48f7-b9b7-573102c88a1d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8eeb7a13-bcd2-48f7-b9b7-573102c88a1d/8eeb7a13-bcd2-48f7-b9b7-573102c88a1d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8eeb7a13-bcd2-48f7-b9b7-573102c88a1d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:80:82:2b:1e:f8:f4:fd:0a:c1:c5:be:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eeb7a13-bcd2-48f7-b9b7-573102c88a1d
        Validity
            Not Before: Apr 14 08:47:19 2026 GMT
            Not After : Jul 13 08:47:19 2026 GMT
        Subject: CN=9d165b5a-15c9-4e90-9f23-1fba7033a4e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c6:f3:b7:52:40:39:71:9a:f1:df:9a:65:1f:
                    10:ed:c4:36:61:3f:b2:13:63:ee:c9:12:ad:5d:d8:
                    85:47:ba:65:75:45:8a:4f:aa:ea:95:62:4b:70:b9:
                    25:55:eb:ee:e0:5d:93:e0:be:b9:ce:d8:71:e6:36:
                    4d:a6:b9:e5:f3:4d:d7:e0:bb:5e:1c:7d:b8:47:9e:
                    ea:ba:b2:c5:d6:b0:0a:c4:61:23:54:b5:39:f3:8e:
                    70:08:12:e0:2e:8f:1c:6c:87:35:bd:66:98:e1:f1:
                    c9:6c:5f:b8:33:cb:96:ba:27:6b:a4:0a:cd:e1:99:
                    13:42:ff:49:5d:40:46:e4:45:8d:cd:36:6f:e9:32:
                    45:3c:6a:b6:29:03:ce:3b:4b:e0:29:64:f9:e6:dc:
                    3f:23:03:55:cc:32:f9:53:49:7b:9d:f5:a3:05:c1:
                    d9:2e:7d:0b:e8:aa:a2:27:a4:0b:47:62:35:61:ca:
                    c8:d7:a5:4a:75:05:63:75:6c:3d:fe:34:fb:6b:50:
                    8d:16:57:4a:7c:d9:43:f1:19:37:1c:f8:59:0a:4c:
                    67:35:02:c2:07:0c:74:df:a3:2b:a4:71:38:b5:73:
                    6b:80:9c:3b:56:e8:c8:0a:18:1b:1e:18:3e:e2:30:
                    75:34:76:d7:2d:0b:38:c6:46:a4:7b:03:f9:ed:d3:
                    4d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:DF:60:A2:B6:FB:76:01:DA:B7:6A:AE:87:F9:C4:31:9F:BE:E1:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8eeb7a13-bcd2-48f7-b9b7-573102c88a1d/22764137-5f6c-3005-b83a-15b060f0a5af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8eeb7a13-bcd2-48f7-b9b7-573102c88a1d/8eeb7a13-bcd2-48f7-b9b7-573102c88a1d.crl

            X509v3 Authority Key Identifier:
                keyid:D1:CD:23:A7:5F:8C:AE:1D:9E:48:01:55:B4:7E:D4:CB:34:8A:43:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8eeb7a13-bcd2-48f7-b9b7-573102c88a1d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.126.106.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:45:8c:3a:74:da:14:62:2e:e3:c3:4c:8a:47:21:46:80:ba:
         19:33:94:c1:14:ff:e7:ee:39:bf:fc:fc:8b:e4:01:b0:f3:99:
         2e:12:d4:41:39:ba:ca:05:92:bb:08:a0:40:c2:96:bf:05:48:
         ee:17:ca:fd:d3:c9:aa:4a:14:48:bf:67:46:25:9b:61:dc:23:
         dd:9f:ba:54:bb:aa:15:46:7d:db:d6:ec:0a:d4:fd:3d:96:ba:
         00:32:9c:f7:a3:bd:a2:47:2c:55:78:19:09:3c:ab:fc:c4:71:
         18:b1:ed:76:d6:0a:04:99:c3:33:b3:3f:bf:c2:0f:94:b2:58:
         6a:66:4e:62:03:f2:7a:16:1c:a0:1e:76:2b:c5:62:0a:79:ac:
         8a:4e:5d:1f:c8:45:81:d0:b7:a3:c2:d4:42:d5:84:bc:8a:0d:
         70:b9:c3:a1:87:df:26:fd:9c:26:bf:8f:85:30:d1:d9:e6:62:
         95:4d:bd:9e:8c:98:ab:c3:44:13:e0:1d:13:de:39:52:9f:b0:
         5c:e9:53:f4:d2:f9:75:02:d7:4f:01:07:16:f6:5b:95:50:41:
         a5:fb:11:6f:53:22:91:14:cc:ef:9e:47:f0:b6:a1:57:8b:5f:
         38:42:87:df:8b:a9:22:52:5b:07:8a:9b:02:80:67:7c:24:73:
         86:73:cd:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:55:24 2026 by rpki-client