Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ed93cc6c-dfda-49fd-9807-ba1642d56009/cbf2e0da-ffe7-3cc7-80ef-53a6c1e05486.roa
File:                     cbf2e0da-ffe7-3cc7-80ef-53a6c1e05486.roa (raw, json)
Hash identifier:          OcChnEDAyhBFpVM8FzBQxLQrOFmIUvwtAAFhL434uaw=
Subject key identifier:   30:93:73:A1:A6:45:3E:8E:04:34:25:E3:4B:DD:B3:18:BF:29:45:EC
Certificate issuer:       /CN=ed93cc6c-dfda-49fd-9807-ba1642d56009
Certificate serial:       010D0C9F4328584F4972FAA0D21C64F2D02E1F80
Authority key identifier: 5F:7C:F8:02:29:CF:6F:19:D7:85:AA:2C:E3:F5:43:FE:9E:A1:09:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ed93cc6c-dfda-49fd-9807-ba1642d56009.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ed93cc6c-dfda-49fd-9807-ba1642d56009/cbf2e0da-ffe7-3cc7-80ef-53a6c1e05486.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396158
IP address blocks:        206.130.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ed93cc6c-dfda-49fd-9807-ba1642d56009/ed93cc6c-dfda-49fd-9807-ba1642d56009.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ed93cc6c-dfda-49fd-9807-ba1642d56009/ed93cc6c-dfda-49fd-9807-ba1642d56009.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ed93cc6c-dfda-49fd-9807-ba1642d56009.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:fa:a0:d2:1c:64:f2:d0:2e:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed93cc6c-dfda-49fd-9807-ba1642d56009
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ed048c0f-8b2d-4670-95e0-37ca67a2cfbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ac:91:4e:60:f2:3e:1e:66:08:51:cc:73:5e:
                    28:1e:c7:20:f6:d1:6d:9f:53:0d:42:f4:d9:4e:a5:
                    b0:ef:34:d6:18:cf:26:f6:d1:a6:5c:84:aa:a8:76:
                    26:81:c5:f2:3c:a3:86:91:33:ac:3e:41:bf:d0:53:
                    8e:b6:c8:79:d0:f6:1e:46:93:33:cd:96:36:14:15:
                    19:15:1f:7c:a8:cf:54:74:b3:c8:ad:10:f9:43:14:
                    be:a5:3d:49:1e:9a:9d:6e:af:5e:25:69:2e:2d:e0:
                    7a:5a:ce:92:ac:04:95:39:d3:e8:98:d6:e6:0c:4d:
                    41:ef:2e:7a:56:ca:6a:52:98:c7:36:6a:c7:09:c0:
                    13:0a:9e:b3:34:fd:5d:32:3d:73:69:82:81:08:d8:
                    91:c4:b8:4b:bc:da:ca:65:75:f2:c4:03:fd:93:63:
                    76:a4:d0:fe:27:0e:39:d4:4e:7e:52:cd:66:30:98:
                    d7:c6:4e:75:7a:1e:3d:c6:2c:f4:df:d7:f4:2f:3b:
                    42:85:ba:79:42:1e:d9:93:82:65:f7:d1:aa:66:57:
                    9c:cf:a3:03:f0:91:e0:75:49:33:d4:3f:64:d3:e4:
                    ff:de:a1:f0:ea:3d:f4:71:22:52:dd:06:b2:98:88:
                    82:de:83:fd:b5:bc:0f:9d:12:49:4f:ab:86:34:f2:
                    1d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:93:73:A1:A6:45:3E:8E:04:34:25:E3:4B:DD:B3:18:BF:29:45:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ed93cc6c-dfda-49fd-9807-ba1642d56009/cbf2e0da-ffe7-3cc7-80ef-53a6c1e05486.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ed93cc6c-dfda-49fd-9807-ba1642d56009/ed93cc6c-dfda-49fd-9807-ba1642d56009.crl

            X509v3 Authority Key Identifier:
                keyid:5F:7C:F8:02:29:CF:6F:19:D7:85:AA:2C:E3:F5:43:FE:9E:A1:09:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ed93cc6c-dfda-49fd-9807-ba1642d56009.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.130.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:bc:b3:fc:dd:22:b1:f2:8b:d6:20:90:3d:76:31:c9:3a:d1:
         1a:1e:6d:14:36:23:47:78:b0:c8:48:2e:7e:e8:2e:10:de:ee:
         b7:1f:01:21:79:cf:6c:54:2e:02:9f:2d:f3:df:a2:2a:59:81:
         a1:98:c8:33:ec:5a:10:e2:2c:55:6d:52:f3:a7:e7:d1:28:08:
         a8:8d:bf:e2:6a:1b:be:e8:40:0b:c4:d1:cf:7a:41:0c:23:5a:
         b2:97:39:90:db:c2:41:78:14:b3:2c:76:1b:31:8c:76:60:5a:
         c0:fd:2b:93:57:b7:3b:f4:17:15:1c:ff:a2:4c:57:d3:76:d9:
         00:fd:ab:43:46:ae:aa:2a:7a:c4:9d:a7:e1:e2:16:1c:bb:a8:
         2f:1a:21:b9:8a:13:8e:58:f2:09:02:ff:5c:37:5f:4e:f5:0c:
         e3:f9:4a:e1:6f:f8:f2:0b:32:67:c5:b3:07:14:9c:19:05:05:
         8c:be:c1:59:66:3c:0a:92:1c:d0:0a:8c:76:52:f8:8d:3b:62:
         11:b9:da:5d:c8:1c:75:5f:04:fb:d2:58:09:2f:37:9c:68:4c:
         1f:fc:a6:45:d9:28:c8:0e:30:89:86:4f:59:ee:09:3f:68:99:
         4d:26:4a:91:77:94:e2:64:5b:6b:f7:31:d2:65:c2:53:08:f1:
         24:4d:ff:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 10:36:50 2026 by rpki-client