Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac04797e-f41e-4575-a76e-d3656d2d0da3/68884d9c-689f-3558-bca5-84a7a0d377e6.roa
File:                     68884d9c-689f-3558-bca5-84a7a0d377e6.roa (raw, json)
Hash identifier:          K9QoZUkDJvcjdr8rGZqGfIBGWoHRQvSrC8pyqFH9eVc=
Subject key identifier:   28:2D:4E:2A:15:AE:46:C1:75:45:F1:8A:A7:D4:30:FD:4C:FC:A7:22
Certificate issuer:       /CN=ac04797e-f41e-4575-a76e-d3656d2d0da3
Certificate serial:       010D0C9F4328584F3CE2874260A4A9B058C98080
Authority key identifier: 00:07:26:10:0F:18:C6:93:C3:1D:4A:E3:AD:2C:56:A2:DD:12:6F:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac04797e-f41e-4575-a76e-d3656d2d0da3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac04797e-f41e-4575-a76e-d3656d2d0da3/68884d9c-689f-3558-bca5-84a7a0d377e6.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     6650
IP address blocks:        206.252.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac04797e-f41e-4575-a76e-d3656d2d0da3/ac04797e-f41e-4575-a76e-d3656d2d0da3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac04797e-f41e-4575-a76e-d3656d2d0da3/ac04797e-f41e-4575-a76e-d3656d2d0da3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac04797e-f41e-4575-a76e-d3656d2d0da3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:87:42:60:a4:a9:b0:58:c9:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac04797e-f41e-4575-a76e-d3656d2d0da3
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=a5c6455f-acd0-4eb5-9107-85772550f73d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:86:04:94:01:20:0e:0f:97:43:c7:7f:e1:b6:
                    0e:7c:80:6c:f2:b2:80:41:fb:24:9e:34:56:78:59:
                    87:66:54:9b:91:80:2e:f1:e3:6a:d6:e0:74:54:b3:
                    d6:d8:1f:27:99:41:36:6b:3f:ff:90:d7:fe:4e:c6:
                    7a:be:59:c5:5b:0a:51:b7:52:9f:97:0d:84:51:20:
                    e7:4e:82:c4:7c:a9:91:1d:3a:49:03:f2:d4:c5:ad:
                    8b:c7:18:99:a5:70:73:c2:a3:9a:9f:49:c7:ca:c8:
                    10:1f:4e:64:e4:59:23:23:36:13:80:47:5e:73:a1:
                    b3:e5:04:7b:bc:0c:6f:d2:c8:3f:3d:86:14:8e:cc:
                    a2:cb:72:48:92:e1:63:c4:7e:76:ee:2c:6a:3b:8f:
                    65:93:09:41:11:ae:5e:85:3f:4d:bb:80:3a:c9:1e:
                    15:88:eb:8c:b8:1c:67:1b:d5:10:da:f8:f2:20:9e:
                    a1:4f:a9:14:ea:ea:87:e3:e0:25:86:86:8f:33:4a:
                    f2:71:39:df:17:4d:c1:ac:de:1a:89:93:e9:b8:d1:
                    b6:81:d7:41:bf:03:56:6c:c4:46:74:21:fc:af:d4:
                    92:d4:0b:78:90:d5:49:c6:35:9d:7d:0b:0b:02:fe:
                    b4:6b:28:81:2e:d6:f7:f9:7a:3e:ed:f6:f9:3e:2c:
                    d2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:2D:4E:2A:15:AE:46:C1:75:45:F1:8A:A7:D4:30:FD:4C:FC:A7:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac04797e-f41e-4575-a76e-d3656d2d0da3/68884d9c-689f-3558-bca5-84a7a0d377e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac04797e-f41e-4575-a76e-d3656d2d0da3/ac04797e-f41e-4575-a76e-d3656d2d0da3.crl

            X509v3 Authority Key Identifier:
                keyid:00:07:26:10:0F:18:C6:93:C3:1D:4A:E3:AD:2C:56:A2:DD:12:6F:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac04797e-f41e-4575-a76e-d3656d2d0da3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.252.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:7d:fa:90:d9:15:df:42:8a:fb:c4:09:39:e5:45:d3:19:b7:
         c5:53:3a:ac:60:d9:e9:de:6b:ca:45:e6:f7:dc:47:67:ac:42:
         d8:6d:ea:51:d1:88:a4:7a:a3:ff:b8:e6:04:5c:a3:d5:90:44:
         67:33:48:65:29:17:cc:39:f1:57:1d:24:fc:24:83:a0:b3:07:
         d9:4b:e6:14:5a:be:e6:cf:95:d2:96:36:07:c8:86:52:5b:85:
         1b:8c:ab:36:68:3e:ff:cc:cb:52:4c:25:b5:05:4f:27:88:14:
         05:63:a2:bc:95:aa:7c:60:bc:13:ac:23:99:47:1f:58:75:7f:
         e0:12:98:85:11:c1:7b:f9:bf:32:81:85:24:7a:97:b4:80:2c:
         1e:70:d0:53:90:a3:8b:7c:ab:f0:8a:7f:67:88:0a:10:9b:f9:
         48:91:be:f9:e1:d5:36:23:66:8a:c0:c6:d5:5a:42:81:9d:d2:
         0b:1a:24:e3:65:38:88:39:f3:4f:1d:a7:f6:d6:bf:a9:91:ad:
         d9:8c:34:b2:35:df:8a:13:03:f2:35:3d:be:71:f9:fc:42:eb:
         54:48:c1:93:a7:ff:b4:85:8d:ca:d4:cc:0d:d0:5b:8a:af:ba:
         d8:42:e3:94:fb:70:f4:be:e7:11:cf:ee:9c:1d:15:de:7e:76:
         5e:33:b2:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:50:17 2026 by rpki-client