Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af/a56ac611-7a3b-3c59-88af-ec080958824b.roa
File:                     a56ac611-7a3b-3c59-88af-ec080958824b.roa (raw, json)
Hash identifier:          kmewoM7tXQQyEeLRwRSU9QvfEbHRFq8FAZUyZyy0500=
Subject key identifier:   6D:7A:EF:19:23:39:B0:89:96:CA:2D:4E:56:CF:64:51:36:69:40:59
Certificate issuer:       /CN=418536e3-a238-4d5c-85de-f77873e419af
Certificate serial:       010D0C9F4328584CFBBBE0A765A006F345A9C080
Authority key identifier: 86:30:08:47:96:08:91:BF:19:5C:82:DE:7F:52:59:C1:30:76:FE:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af/a56ac611-7a3b-3c59-88af-ec080958824b.roa
Signing time:             Wed 25 Feb 2026 19:21:05 +0000
ROA not before:           Wed 25 Feb 2026 19:21:05 +0000
ROA not after:            Tue 26 May 2026 18:21:05 +0000
asID:                     21777
IP address blocks:        206.168.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af/418536e3-a238-4d5c-85de-f77873e419af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af/418536e3-a238-4d5c-85de-f77873e419af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fb:bb:e0:a7:65:a0:06:f3:45:a9:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=418536e3-a238-4d5c-85de-f77873e419af
        Validity
            Not Before: Feb 25 19:21:05 2026 GMT
            Not After : May 26 18:21:05 2026 GMT
        Subject: CN=bcf462bc-d9e1-48b2-8dde-4e87e1d761be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:cf:6b:c8:46:c4:e2:16:11:f8:d8:3e:ad:ff:
                    2a:1b:39:12:a9:5d:c7:ae:16:3c:56:e3:a0:43:85:
                    73:ca:eb:1d:ea:2e:64:bf:0a:96:19:6f:67:6a:7f:
                    63:f3:3e:47:bf:c2:2e:0d:63:3b:30:31:30:da:11:
                    b0:10:93:31:c8:3a:21:1c:f1:ff:91:bb:26:9a:08:
                    2f:7d:ef:99:6b:ae:c5:b3:10:de:0a:d7:96:79:3d:
                    5c:ba:43:37:db:a7:1e:8b:65:f4:c5:b7:c9:ca:3f:
                    04:db:ce:12:bc:2c:68:e9:00:84:7f:2e:03:89:a6:
                    eb:28:a8:b0:28:69:4f:ca:d4:bf:48:54:e4:a3:2a:
                    f6:ae:00:57:3b:dd:ff:d8:f5:7f:30:e1:68:bc:89:
                    ee:74:95:fd:a7:ca:3d:d0:25:a5:46:72:27:9c:ff:
                    2b:ad:eb:74:c7:2a:4e:dc:3d:c8:10:b7:bc:47:3d:
                    ee:d3:3b:65:3a:bc:fb:8a:2c:d0:51:10:2f:75:b4:
                    15:c4:94:cd:93:27:66:a5:9d:73:5c:db:57:4f:b7:
                    2b:82:ea:51:53:c8:ac:08:b6:4b:37:ef:39:85:44:
                    fe:51:fe:ba:17:10:1c:bd:23:84:82:47:d2:15:17:
                    43:cf:64:44:4b:e6:a5:e4:ae:bd:d4:de:8e:75:39:
                    1e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:7A:EF:19:23:39:B0:89:96:CA:2D:4E:56:CF:64:51:36:69:40:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af/a56ac611-7a3b-3c59-88af-ec080958824b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af/418536e3-a238-4d5c-85de-f77873e419af.crl

            X509v3 Authority Key Identifier:
                keyid:86:30:08:47:96:08:91:BF:19:5C:82:DE:7F:52:59:C1:30:76:FE:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/418536e3-a238-4d5c-85de-f77873e419af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:a0:a3:35:5a:8a:b5:7c:49:c7:cf:92:24:e6:8c:7b:bb:a3:
         2d:9a:ee:1d:9b:e5:b8:c3:5a:2d:7d:5a:24:29:92:be:d9:97:
         03:6a:ec:c1:1a:73:e3:36:38:ef:40:75:b2:f0:bc:f6:7c:3e:
         8a:0d:fa:98:43:9a:54:a9:63:17:d9:5a:c5:48:6a:f8:3e:b0:
         70:f5:55:4c:0b:7d:dc:75:f0:bf:b7:44:f1:f0:8c:ca:9f:01:
         8b:dc:c6:65:6a:e2:d5:da:be:f0:d7:18:b6:a8:13:13:21:34:
         02:a1:ae:be:6d:7a:58:0b:ee:c7:f5:65:f9:46:91:99:bc:1c:
         a1:9c:2b:46:81:6b:e8:83:0b:1d:ec:80:ad:03:d9:9c:38:f6:
         17:09:08:e8:f0:58:b8:d1:2c:70:28:42:5d:e8:a7:9f:1f:a0:
         66:3e:af:08:6c:2a:93:1e:44:77:e3:76:81:69:2c:13:8d:b2:
         55:b7:5d:ba:a4:cb:42:9d:80:0e:90:bd:31:9d:a8:20:29:8c:
         77:59:79:d8:c8:c9:3c:2b:8d:85:85:bc:e9:77:de:b8:7a:84:
         85:0c:4f:c1:5e:42:72:09:bb:b3:48:a0:2a:eb:36:f7:a6:e5:
         48:42:23:4d:0e:af:b5:53:0a:31:20:83:03:e1:5c:f3:10:ee:
         3f:d2:3a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:33:05 2026 by rpki-client