Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/74d72927-c457-49f5-98e1-a37443a035e6/6c0c07b4-bbaf-3587-aaae-dc9ee78a1648.roa
File:                     6c0c07b4-bbaf-3587-aaae-dc9ee78a1648.roa (raw, json)
Hash identifier:          Gn7S6w8J9W8iIgczWhyPE0jrEk0W1J2CN0bpr4J1ZkU=
Subject key identifier:   EB:E4:DA:2F:5D:DE:23:F7:0E:C0:20:DA:35:16:18:EF:80:1B:13:3B
Certificate issuer:       /CN=74d72927-c457-49f5-98e1-a37443a035e6
Certificate serial:       010D0C9F4328584D55BA328BF0644388DB393E80
Authority key identifier: 91:EB:C2:5C:4E:35:C2:22:A9:A2:CF:44:B9:90:9D:59:F7:04:CD:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/74d72927-c457-49f5-98e1-a37443a035e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/74d72927-c457-49f5-98e1-a37443a035e6/6c0c07b4-bbaf-3587-aaae-dc9ee78a1648.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     14301
IP address blocks:        206.208.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/74d72927-c457-49f5-98e1-a37443a035e6/74d72927-c457-49f5-98e1-a37443a035e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/74d72927-c457-49f5-98e1-a37443a035e6/74d72927-c457-49f5-98e1-a37443a035e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/74d72927-c457-49f5-98e1-a37443a035e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:32:8b:f0:64:43:88:db:39:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74d72927-c457-49f5-98e1-a37443a035e6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=c7f3062e-5b0b-427d-9ecb-499680ec611c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:98:a2:aa:34:4a:a1:25:3b:b0:1c:63:9f:05:
                    89:6a:42:b5:e7:25:dc:14:fd:01:e8:e9:01:78:98:
                    5f:c5:dc:c9:89:63:6e:d2:e7:e0:3e:33:0d:84:98:
                    01:0c:26:33:bb:5d:b4:5b:4f:37:e7:8a:53:88:1b:
                    c8:dd:a9:1f:99:53:13:9c:06:c0:a6:d6:37:6a:40:
                    45:60:c2:3e:38:d0:c2:ff:cd:a8:47:7d:fa:19:77:
                    61:f5:07:d8:65:9c:cd:93:b2:f3:b1:f6:e5:81:9c:
                    57:80:a7:65:4c:af:bc:46:fc:e6:05:8e:ed:4d:76:
                    5f:0c:d3:6c:aa:af:91:73:c6:f1:89:df:ca:ac:c0:
                    c1:14:bf:3e:0d:66:a2:7e:e0:73:bd:22:de:41:63:
                    bc:8d:4f:8e:9f:51:ff:1f:c0:7d:5a:ab:ae:02:a8:
                    ca:3b:86:b8:af:2a:c8:48:c3:f3:bc:9d:c4:32:e1:
                    56:00:dc:ba:26:28:49:bb:1b:92:22:91:02:1e:3c:
                    ae:76:58:9e:a4:d9:9e:61:84:98:28:2d:5a:5e:d2:
                    ed:da:ae:2a:56:ce:b4:46:c0:04:70:a2:76:5f:d6:
                    24:de:38:43:71:db:52:f3:92:6d:e3:52:32:1b:bd:
                    5c:6e:b2:3d:85:4e:07:f0:99:0b:e7:f2:ca:81:99:
                    7c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E4:DA:2F:5D:DE:23:F7:0E:C0:20:DA:35:16:18:EF:80:1B:13:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/74d72927-c457-49f5-98e1-a37443a035e6/6c0c07b4-bbaf-3587-aaae-dc9ee78a1648.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/74d72927-c457-49f5-98e1-a37443a035e6/74d72927-c457-49f5-98e1-a37443a035e6.crl

            X509v3 Authority Key Identifier:
                keyid:91:EB:C2:5C:4E:35:C2:22:A9:A2:CF:44:B9:90:9D:59:F7:04:CD:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/74d72927-c457-49f5-98e1-a37443a035e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.208.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:2c:a3:9b:6d:b2:3a:16:08:d0:65:31:2c:2b:41:0e:aa:1c:
         5b:0e:90:37:a3:31:08:88:a9:a6:3b:5a:40:22:05:16:eb:56:
         aa:fd:99:7a:c2:05:b3:7a:d5:51:28:53:66:09:48:4d:5e:09:
         74:b9:0f:c6:aa:c2:54:96:7f:0a:3b:84:c7:9d:f3:25:42:6c:
         f4:c4:a3:b2:68:4a:88:03:c9:fc:ef:ec:9b:28:90:60:ab:33:
         c6:1c:bd:f5:1b:29:39:c3:b2:60:6d:7a:40:5a:2c:36:0e:b6:
         fb:69:0f:73:cb:27:7e:fe:ea:48:81:e7:3e:db:ba:73:7d:79:
         30:52:bf:70:b3:be:ba:77:5b:40:9b:da:54:2c:f1:cf:85:65:
         55:04:bf:c9:64:b4:1e:31:9e:3c:e6:29:db:08:e9:7e:a7:56:
         4b:af:9b:1a:f0:12:e9:d3:4b:7f:5c:66:65:30:78:2b:f3:cb:
         ac:85:b8:79:60:fe:5b:50:ca:2c:79:54:a6:7f:49:17:29:b5:
         45:e1:be:66:1b:85:0f:e1:8f:9b:a1:09:16:be:9f:b4:52:d9:
         91:8a:09:24:be:47:e6:9b:ce:3f:24:3e:4d:8f:9d:3c:20:98:
         5c:5a:ff:9d:a4:fb:a2:fd:d6:ec:e8:5d:63:0e:30:ef:1b:d3:
         d5:a1:b4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:17:58 2026 by rpki-client