Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/3352aa15-1a25-3a9d-8c42-d60c794947a6.roa
File:                     3352aa15-1a25-3a9d-8c42-d60c794947a6.roa (raw, json)
Hash identifier:          2YPY8XVzALtuvJz/UpoCXh0KSgn6ROhvlonkzv+xWWE=
Subject key identifier:   DB:1B:8A:69:D5:1F:42:7F:9D:D4:F0:0E:5D:4A:29:C9:45:6F:55:64
Certificate issuer:       /CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Certificate serial:       010D0C9F4328584CB121DB7DE3BD48A2A5154080
Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/3352aa15-1a25-3a9d-8c42-d60c794947a6.roa
Signing time:             Fri 30 Jan 2026 02:00:31 +0000
ROA not before:           Fri 30 Jan 2026 02:00:31 +0000
ROA not after:            Thu 30 Apr 2026 01:00:31 +0000
asID:                     46587
IP address blocks:        206.71.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b1:21:db:7d:e3:bd:48:a2:a5:15:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873
        Validity
            Not Before: Jan 30 02:00:31 2026 GMT
            Not After : Apr 30 01:00:31 2026 GMT
        Subject: CN=afc2c471-473c-44eb-a1ba-5c84ac6ad4f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d2:7c:d0:b0:32:b3:f2:41:b1:4a:7a:46:0a:
                    94:1e:d6:d3:7d:e1:39:3c:af:32:0b:69:1a:7b:7f:
                    d8:d2:b0:2f:ab:12:f6:40:50:39:37:f8:1c:f3:0f:
                    df:c1:e3:0a:71:4d:19:15:92:bc:37:8f:9e:e2:e6:
                    84:ad:83:4d:7d:a2:70:08:f3:71:4e:42:05:32:ca:
                    1b:01:e9:52:0c:ff:a8:71:06:50:48:9d:c6:9e:54:
                    05:45:37:42:36:f7:f9:81:2f:4e:83:ae:ec:9f:e5:
                    82:89:c7:c8:af:1d:38:01:e5:fe:cf:5c:46:9a:41:
                    2d:a2:bc:ef:19:88:b6:ab:9b:6c:4a:c4:52:68:46:
                    88:3d:1a:75:eb:bf:96:84:66:68:df:f1:84:3e:43:
                    09:d7:af:c3:b9:c0:3e:a7:83:85:25:fb:dc:45:bb:
                    98:a9:bf:2b:2e:b1:d5:c5:9c:f9:fb:55:43:10:65:
                    62:fc:f0:c8:35:3e:48:0e:bd:ae:6a:54:3d:41:b9:
                    a3:b7:1c:e4:7c:b1:7b:12:5b:3a:06:88:30:c5:d1:
                    da:15:52:73:df:3a:fb:dc:79:07:bd:59:aa:51:bc:
                    fd:b3:0b:e9:39:2e:b1:17:f7:1a:69:a1:31:d2:35:
                    ae:e3:f7:82:8e:ba:22:9a:29:fa:32:e2:f0:73:47:
                    54:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:1B:8A:69:D5:1F:42:7F:9D:D4:F0:0E:5D:4A:29:C9:45:6F:55:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/3352aa15-1a25-3a9d-8c42-d60c794947a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl

            X509v3 Authority Key Identifier:
                keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.71.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:63:83:41:f0:00:f7:13:2b:b0:04:b1:4e:2e:7d:eb:80:fa:
         19:e8:2a:bf:34:b1:1f:c5:4d:45:8d:6e:a3:6f:75:93:bb:c0:
         aa:9e:cc:3d:b2:ed:b1:44:f5:2c:60:00:15:0c:42:13:25:e1:
         88:d1:fa:0b:6b:28:1a:cc:28:21:9b:54:70:29:80:70:51:6a:
         a3:ba:f5:71:88:fd:40:e2:be:77:82:1c:56:80:a1:9f:c2:de:
         b4:1b:e3:00:9d:f6:4c:5e:03:91:28:99:c7:c1:2c:4d:aa:a8:
         e2:1a:a4:e6:5d:58:ff:26:c1:a4:65:0e:df:8d:12:77:5f:13:
         17:fc:0e:94:dc:ab:dc:8b:86:e5:a7:87:a2:91:f6:dd:b1:8f:
         52:90:e4:d2:cc:c2:6f:14:b4:9e:86:71:85:a2:01:5a:fc:a3:
         b0:53:d4:fb:a7:f1:ae:19:e2:4f:bf:1a:98:34:ff:99:bd:db:
         70:96:a5:a3:49:a0:49:3e:a6:bd:8b:05:15:a3:e4:13:22:55:
         03:2d:42:0e:ef:5b:0f:a9:25:67:d0:16:82:65:ad:f6:7e:7f:
         55:a7:86:12:24:ba:b0:14:ee:fb:a4:31:e9:49:24:c9:43:76:
         23:0b:a5:6d:a7:94:bf:8b:54:fd:7d:a0:ce:e2:c5:a4:7a:88:
         01:3a:03:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:34:02 2026 by rpki-client