Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c4147360-87bc-49de-9f1c-3c020bc4f1ee/0e7d721a-8234-33e7-8827-d38683af20a1.roa
File:                     0e7d721a-8234-33e7-8827-d38683af20a1.roa (raw, json)
Hash identifier:          h0yp3dC7cpXtBhuVyiuhDefmbdmRH2klOHnyZj8Wp7I=
Subject key identifier:   A0:34:57:72:EA:49:49:28:E0:54:88:38:B9:6D:35:D9:29:7F:1A:3A
Certificate issuer:       /CN=c4147360-87bc-49de-9f1c-3c020bc4f1ee
Certificate serial:       010D0C9F4328584CFEB5FD296AA5D6B45C08A000
Authority key identifier: 99:BC:B1:E3:04:DA:A9:29:0F:BA:75:31:F2:6E:85:53:FD:C3:CA:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c4147360-87bc-49de-9f1c-3c020bc4f1ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c4147360-87bc-49de-9f1c-3c020bc4f1ee/0e7d721a-8234-33e7-8827-d38683af20a1.roa
Signing time:             Mon 02 Feb 2026 16:05:57 +0000
ROA not before:           Mon 02 Feb 2026 16:05:57 +0000
ROA not after:            Sun 03 May 2026 15:05:57 +0000
asID:                     20210
IP address blocks:        206.109.104.0/23 maxlen: 23
                          206.109.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c4147360-87bc-49de-9f1c-3c020bc4f1ee/c4147360-87bc-49de-9f1c-3c020bc4f1ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c4147360-87bc-49de-9f1c-3c020bc4f1ee/c4147360-87bc-49de-9f1c-3c020bc4f1ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c4147360-87bc-49de-9f1c-3c020bc4f1ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fe:b5:fd:29:6a:a5:d6:b4:5c:08:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4147360-87bc-49de-9f1c-3c020bc4f1ee
        Validity
            Not Before: Feb  2 16:05:57 2026 GMT
            Not After : May  3 15:05:57 2026 GMT
        Subject: CN=9137067e-8a38-4987-afcc-edf54a85c75b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1f:8c:c9:f7:69:80:24:09:c7:8d:5c:35:21:
                    5c:c7:d4:3b:18:8b:09:98:00:d1:3d:70:5e:1d:08:
                    49:e4:bd:df:1d:a3:0f:2a:fe:ee:11:77:7a:2c:34:
                    c7:00:54:55:03:23:87:62:cc:d3:7c:cb:b0:79:ad:
                    d7:fb:bf:09:51:08:4d:d2:77:54:fc:fe:0e:df:56:
                    80:11:9a:48:ec:84:ec:b2:cd:0c:a1:3a:d4:e3:e1:
                    57:6b:80:ec:cb:4e:f2:e8:95:ad:20:66:8b:6e:d4:
                    cb:b5:e1:9b:f2:c6:1b:24:52:d1:50:8d:9d:ff:e8:
                    7c:be:97:c7:72:09:f1:9d:e5:9c:76:93:f6:e7:8f:
                    72:b2:6a:a7:a3:7f:42:84:bd:85:13:3b:e0:42:fc:
                    3e:5c:26:40:eb:97:fc:fd:a2:47:e9:90:af:23:88:
                    da:32:42:70:a8:fb:49:0b:ee:05:87:7b:50:38:fb:
                    f7:74:d8:27:64:99:8c:c6:a5:7b:45:96:25:a8:e2:
                    ea:ab:8c:5f:34:e1:82:78:76:ce:24:d2:fc:6a:43:
                    da:ce:41:a4:41:a1:47:6a:3d:e1:68:27:9d:8c:9f:
                    8f:19:dd:20:53:4d:8b:b1:64:19:08:8b:4f:7e:d4:
                    c2:31:6e:3d:83:fb:1a:ae:83:0c:e2:16:3c:e1:55:
                    95:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:34:57:72:EA:49:49:28:E0:54:88:38:B9:6D:35:D9:29:7F:1A:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c4147360-87bc-49de-9f1c-3c020bc4f1ee/0e7d721a-8234-33e7-8827-d38683af20a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c4147360-87bc-49de-9f1c-3c020bc4f1ee/c4147360-87bc-49de-9f1c-3c020bc4f1ee.crl

            X509v3 Authority Key Identifier:
                keyid:99:BC:B1:E3:04:DA:A9:29:0F:BA:75:31:F2:6E:85:53:FD:C3:CA:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c4147360-87bc-49de-9f1c-3c020bc4f1ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.109.104.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:00:12:2f:2b:d2:a3:d1:6a:d1:24:c8:b8:c7:25:3c:b0:58:
         a7:4f:49:c0:be:f6:77:86:71:3c:0f:96:d3:e5:d3:03:e8:a9:
         2c:2c:0e:e6:a1:ab:61:64:31:3f:58:77:df:40:04:af:50:69:
         4a:9c:a4:35:7f:56:80:69:5c:a8:e3:0e:c2:f5:38:c3:fb:21:
         9f:1c:ee:cb:02:46:19:52:ea:f4:a9:e8:49:4f:06:8c:c9:d3:
         19:d7:ec:12:56:19:14:f1:b0:4b:4f:b1:1b:16:4b:3c:5a:58:
         1b:42:9c:92:27:8c:03:64:28:cb:23:23:5d:58:64:6f:e2:f3:
         16:7a:88:27:34:c6:7c:a8:df:f2:ed:26:53:16:9e:c1:b8:dc:
         82:94:8a:a2:6a:2a:4d:51:56:b7:0c:09:e5:22:6d:81:a2:2e:
         a8:a3:fd:92:29:a4:be:0b:d7:ad:41:64:29:2a:a8:6b:aa:77:
         ed:a9:ed:10:b7:a4:47:54:4b:bc:72:73:f6:8a:04:c7:3f:3e:
         31:c7:c6:74:31:d9:d3:ab:da:1f:f4:8f:57:3a:23:b0:d0:25:
         ac:c9:f0:16:00:ac:58:94:46:3d:e9:86:a3:95:fd:e6:88:f1:
         21:28:f1:dd:8d:58:43:fa:3e:de:3e:00:ac:50:e6:6c:ac:6a:
         4c:61:dd:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:17:42 2026 by rpki-client