Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2052384d-1415-4b2d-a5f0-d9bc3402c93a/d6a36bad-b297-37b9-bf8e-314ca24458ae.roa
File:                     d6a36bad-b297-37b9-bf8e-314ca24458ae.roa (raw, json)
Hash identifier:          aS89c3Bk+YxpKzUYHTiX+XFf5hOUbdwKKU21RA4j+E8=
Subject key identifier:   80:57:EF:8E:D2:B8:4E:76:57:62:5F:DA:F0:8F:EF:5C:E5:1A:26:4B
Certificate issuer:       /CN=2052384d-1415-4b2d-a5f0-d9bc3402c93a
Certificate serial:       010D0C9F4328584D3F64E95812F9D64EE997ABC0
Authority key identifier: 8D:FA:43:54:C1:9D:D5:5E:B5:AB:DE:AC:5B:20:19:87:9F:6D:DA:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2052384d-1415-4b2d-a5f0-d9bc3402c93a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2052384d-1415-4b2d-a5f0-d9bc3402c93a/d6a36bad-b297-37b9-bf8e-314ca24458ae.roa
Signing time:             Sun 22 Mar 2026 01:00:32 +0000
ROA not before:           Sun 22 Mar 2026 01:00:32 +0000
ROA not after:            Sat 20 Jun 2026 01:00:32 +0000
asID:                     715
IP address blocks:        206.220.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2052384d-1415-4b2d-a5f0-d9bc3402c93a/2052384d-1415-4b2d-a5f0-d9bc3402c93a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2052384d-1415-4b2d-a5f0-d9bc3402c93a/2052384d-1415-4b2d-a5f0-d9bc3402c93a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2052384d-1415-4b2d-a5f0-d9bc3402c93a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3f:64:e9:58:12:f9:d6:4e:e9:97:ab:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2052384d-1415-4b2d-a5f0-d9bc3402c93a
        Validity
            Not Before: Mar 22 01:00:32 2026 GMT
            Not After : Jun 20 01:00:32 2026 GMT
        Subject: CN=019a3b7a-c286-4cc9-b67b-0f9cc69d8cb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:db:76:a3:2a:0c:13:27:2b:fe:41:37:67:d8:
                    cf:de:fd:ff:10:72:e1:52:e4:37:cc:bb:fc:c3:1f:
                    ed:70:2d:e6:13:fc:b8:8c:6f:63:0c:b2:cb:5f:a2:
                    b3:f8:05:06:14:78:ae:43:4a:d2:f9:3a:ff:6f:94:
                    32:18:b2:df:5f:e2:91:3c:2b:4a:49:b3:59:6d:3a:
                    a6:c5:4e:aa:7b:5d:5e:67:ff:0d:b0:9d:98:08:6a:
                    6d:fd:20:76:87:76:60:88:b0:8c:f1:64:87:2d:3f:
                    e0:e1:1d:9d:23:b0:24:05:b1:e3:c1:0d:ad:bb:f2:
                    20:86:78:a0:8d:b3:5c:1e:b3:a5:9f:76:da:ab:22:
                    b4:dd:87:1f:11:b3:6a:06:54:11:11:e9:be:0a:94:
                    c6:0b:87:e4:f6:b7:85:8b:e7:78:d7:e0:0f:12:ca:
                    5f:84:a7:af:2c:84:8e:b6:9c:b7:ed:43:3c:d7:ec:
                    37:ea:00:54:4b:2c:ba:8e:c8:62:fb:ab:34:d3:11:
                    56:44:46:d0:13:6a:e5:86:de:a3:bb:7a:a6:ec:81:
                    3d:e0:4e:f1:11:36:8a:bb:79:04:1b:d5:ce:c6:f1:
                    6c:e4:ef:f4:73:77:ea:1d:36:6a:37:01:3b:8b:22:
                    1c:51:22:55:2d:3b:28:7d:28:b4:dc:40:97:67:32:
                    3b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:57:EF:8E:D2:B8:4E:76:57:62:5F:DA:F0:8F:EF:5C:E5:1A:26:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2052384d-1415-4b2d-a5f0-d9bc3402c93a/d6a36bad-b297-37b9-bf8e-314ca24458ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2052384d-1415-4b2d-a5f0-d9bc3402c93a/2052384d-1415-4b2d-a5f0-d9bc3402c93a.crl

            X509v3 Authority Key Identifier:
                keyid:8D:FA:43:54:C1:9D:D5:5E:B5:AB:DE:AC:5B:20:19:87:9F:6D:DA:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2052384d-1415-4b2d-a5f0-d9bc3402c93a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.220.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:1b:f7:38:ba:9a:8a:67:73:7c:f6:d3:ba:15:89:ff:44:73:
         4f:61:ae:69:4f:f7:f4:e1:52:1e:f9:76:c5:6c:ee:a0:89:45:
         fa:e2:89:dc:8e:a6:30:59:b4:a3:f5:ea:8c:92:87:5f:90:39:
         c9:06:d3:5e:11:6e:6a:dc:01:d2:7b:11:53:0b:d2:94:a7:77:
         4f:65:70:97:7e:01:cc:05:f6:fa:ed:63:d7:06:50:9a:ee:7d:
         d2:35:79:ca:28:33:87:a3:5c:90:24:3f:6a:8f:af:2b:1d:56:
         40:4b:cc:4d:b0:3f:98:e0:f8:e5:d8:ff:ec:a6:fe:49:03:fa:
         9d:23:e1:f9:f9:fa:59:83:61:33:28:f4:17:44:72:19:56:3f:
         c6:74:ef:ca:91:b2:86:53:e4:eb:6a:7d:ed:2f:73:c3:1a:33:
         54:87:d1:3d:b3:2b:a2:e6:a7:08:fc:b9:99:c7:c3:56:d8:e4:
         a4:e5:e4:75:0c:f8:c7:04:a0:d8:96:c5:a6:b9:bb:08:bd:d3:
         d3:12:dc:62:32:ee:57:3a:2c:79:c5:f4:6e:96:ff:a1:23:b9:
         25:10:e0:ae:51:4f:9d:57:b6:c1:65:57:53:dc:7f:db:6e:fe:
         81:5b:c1:6a:b2:49:ee:49:23:39:0e:3e:9e:12:3f:80:a3:c2:
         28:7d:f6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:22:01 2026 by rpki-client