Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/819d1b74-0963-3c3f-951e-0c1f9811340e.roa
File:                     819d1b74-0963-3c3f-951e-0c1f9811340e.roa (raw, json)
Hash identifier:          wsx0wdqAvBEelwenfn/ROu+0tvYMYANYGuuaiR34JDQ=
Subject key identifier:   DA:B2:8E:8D:E5:FC:CB:E6:89:C5:18:5F:24:30:3B:7E:A8:B7:CE:34
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EA7971CF2B2E45DAD9DCABF80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/819d1b74-0963-3c3f-951e-0c1f9811340e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     401783
IP address blocks:        206.40.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:1c:f2:b2:e4:5d:ad:9d:ca:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=031ce4d2-4c3c-4456-801b-cff27f8ab048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8e:66:98:56:fa:ee:80:5f:63:31:49:1a:e9:
                    df:63:d2:db:86:45:d7:93:ef:c2:a2:ac:6a:a9:42:
                    48:d6:1a:85:3f:0f:54:6f:21:54:ce:06:73:53:e9:
                    6b:f5:68:a2:07:e0:a8:91:47:c9:53:e1:c8:b3:23:
                    ec:e1:57:2e:39:5d:57:5d:5d:01:46:b5:f1:d1:75:
                    01:47:d6:09:04:55:33:cf:dd:e2:d5:ca:6c:be:9a:
                    6a:a6:65:a8:68:2e:a2:16:0f:88:cd:c3:29:a8:24:
                    6d:e8:53:35:79:2f:ca:f2:ac:cb:a1:49:89:11:a7:
                    de:e9:fc:4b:72:fd:59:90:54:0e:4a:ae:6a:83:de:
                    5e:1c:61:e4:30:b2:cd:05:08:0f:ef:39:1f:11:41:
                    ff:1a:04:e9:20:b1:9a:fd:0e:ff:21:a8:25:33:10:
                    59:2f:45:22:af:40:51:81:dd:a5:c6:16:00:2e:f5:
                    4d:38:3c:63:15:bf:2b:98:99:ea:b5:79:70:5b:36:
                    3d:39:de:92:0c:e8:11:1f:a6:e6:13:9c:4b:1a:14:
                    14:ff:b0:99:81:db:55:0f:35:d5:c1:79:b1:76:93:
                    5f:c7:f9:19:f7:20:95:3f:4d:fa:b7:50:0a:23:dc:
                    15:3c:48:11:38:69:dc:80:ce:08:12:93:05:bd:73:
                    36:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:B2:8E:8D:E5:FC:CB:E6:89:C5:18:5F:24:30:3B:7E:A8:B7:CE:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/819d1b74-0963-3c3f-951e-0c1f9811340e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.40.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:d0:a4:8d:b4:e9:69:24:eb:0e:65:d7:56:5a:11:ea:bf:20:
         41:62:cd:99:81:42:bc:30:0c:5a:91:a7:89:26:e5:49:68:1f:
         f0:d8:9b:f9:11:3c:c1:be:db:f0:fe:a0:6e:40:f2:b4:c5:37:
         41:6e:98:67:9a:ac:4d:52:dd:20:11:09:71:c9:d9:de:fd:fb:
         c9:a3:03:97:81:e6:74:47:94:47:c9:84:ea:bb:48:42:fc:9d:
         d1:31:ef:74:70:c3:c6:01:4b:6d:9b:01:eb:47:d0:18:85:c3:
         0d:25:f7:68:00:db:5e:58:5c:39:69:27:8c:e9:0e:f3:e1:a8:
         ba:4d:27:14:ca:ca:24:e3:b0:f7:da:fa:d3:bb:d6:25:27:fc:
         1f:b3:f2:9c:0c:af:1d:ab:e1:7f:2f:20:d4:1e:03:77:f6:e1:
         51:bd:29:bb:21:6b:35:af:1b:ca:a9:0c:ae:27:25:fb:17:bd:
         1d:f9:b3:df:da:fe:4f:2c:2e:c7:8d:38:7e:ee:a1:ba:a2:42:
         dd:55:48:92:37:c3:d5:12:0b:69:2b:1c:2f:10:81:90:e9:57:
         ba:2c:00:f5:3c:b5:8f:d8:f8:b1:a0:4e:4f:3a:2a:12:e0:16:
         93:7b:8b:2f:2d:e5:7b:d3:a4:93:1a:f8:5d:7d:a2:0d:55:bd:
         7b:38:f0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 19:44:48 2026 by rpki-client