Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/b09e3c7b-d4da-3052-b836-3ec571164c65.roa
File:                     b09e3c7b-d4da-3052-b836-3ec571164c65.roa (raw, json)
Hash identifier:          sx28dhB/K2Mzs/s5Iljz0m9zSyBnknbF0hm88VK+9KE=
Subject key identifier:   06:DE:D1:43:19:0D:D9:61:34:B0:C8:7A:E2:F1:D2:8C:94:B0:68:7A
Certificate issuer:       /CN=7d6bea32-db4c-4326-93a0-713364b8aa44
Certificate serial:       010D0C9F4328584F498825BEEC7AC6C34033F560
Authority key identifier: D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/b09e3c7b-d4da-3052-b836-3ec571164c65.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     22351
IP address blocks:        216.250.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:25:be:ec:7a:c6:c3:40:33:f5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d6bea32-db4c-4326-93a0-713364b8aa44
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=e6a1d315-752a-403a-bd29-92877777dd4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:28:fa:01:ee:f6:08:d5:fc:ce:8a:47:b1:39:
                    1e:8c:0e:57:df:1e:d4:96:34:0f:e5:ca:73:08:c6:
                    96:c6:71:c5:68:5b:35:bf:73:ca:99:62:b0:0f:8a:
                    89:8d:b5:ea:4d:16:84:e9:1e:b7:6a:ce:ef:da:46:
                    e1:86:50:5a:59:fd:1b:7d:29:80:dc:4c:2d:ad:db:
                    bc:d1:6f:32:fb:be:55:c0:8a:ee:62:5d:4f:00:12:
                    64:44:a6:2d:73:3e:f9:d5:1c:47:5c:cf:cb:7d:fb:
                    a6:61:cb:34:49:a4:e7:10:9e:e2:8b:ab:0a:e0:40:
                    54:8c:eb:5c:40:63:fc:ac:26:0f:0d:9b:e9:15:dd:
                    fd:f9:4e:0b:fb:de:2a:16:c2:2f:44:8c:b6:07:28:
                    ad:bc:12:6d:af:36:0b:a0:a8:ed:88:5c:63:5e:0b:
                    1c:99:0d:81:33:e7:d4:63:dd:e3:76:81:ef:34:93:
                    5e:e8:e1:9f:d3:28:16:f0:23:cc:09:7e:1e:c2:d9:
                    5b:65:0d:76:b1:41:da:3e:9b:71:48:d9:55:77:ab:
                    69:98:0f:6f:12:d7:9d:4d:02:96:93:e1:3c:e1:8c:
                    05:0c:af:2c:c7:ce:96:ea:73:e2:d9:a4:1e:b5:13:
                    73:0d:d1:37:d8:f5:75:26:b7:14:b5:b4:49:7b:1e:
                    f2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:DE:D1:43:19:0D:D9:61:34:B0:C8:7A:E2:F1:D2:8C:94:B0:68:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/b09e3c7b-d4da-3052-b836-3ec571164c65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.crl

            X509v3 Authority Key Identifier:
                keyid:D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.250.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:0e:ef:9a:9d:27:2f:8b:41:ac:3b:85:10:ac:47:f3:7d:f6:
         09:24:d5:e9:55:ed:03:3b:dc:8f:b1:db:e8:54:21:a1:40:2c:
         9d:64:ab:fa:05:e8:fb:b6:15:ad:89:9e:dd:ab:4d:66:b2:c2:
         19:ff:12:48:19:13:05:5c:d7:ab:51:39:31:cb:10:a8:07:88:
         a3:cf:18:ce:93:e2:61:39:be:e9:56:25:40:9a:24:84:49:7e:
         bb:f3:f5:b9:de:f1:8b:9f:45:81:4d:15:ce:9a:38:02:a5:22:
         7a:02:c1:bd:db:84:95:b3:2d:5a:34:24:0d:39:3f:04:98:06:
         f3:4a:56:ba:a4:2c:59:ed:96:83:43:58:ac:a5:01:f9:1f:1e:
         b2:94:65:ec:33:ed:55:c4:d0:4f:5c:13:24:05:10:f9:2a:66:
         20:d8:1e:02:98:11:dd:cf:9d:9a:c6:27:82:67:80:4d:3d:10:
         9f:10:fd:90:de:1a:b6:69:40:c4:94:40:f5:d9:87:9a:60:a9:
         b0:f6:0e:37:91:10:91:00:78:0e:c5:94:dc:cd:22:d5:f2:29:
         ec:aa:85:66:1b:ef:d9:41:c9:23:61:f4:3b:1f:62:78:e5:67:
         0d:45:d3:af:90:6d:32:31:e2:76:a4:ae:1d:4b:72:11:22:c7:
         7f:62:7d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:23:22 2026 by rpki-client