Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/cd12c9f6-b706-38e9-8960-b80c7ea6215e.roa
File:                     cd12c9f6-b706-38e9-8960-b80c7ea6215e.roa (raw, json)
Hash identifier:          G8IHmBgAd3IfM2n1TAgPz+W1E87ib84fXvamEvn/MNI=
Subject key identifier:   64:48:1C:41:18:E9:9F:9D:1A:AF:4B:17:A6:28:4B:32:2C:CC:38:E5
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584DC135BE8FD8185FD231A9BA00
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/cd12c9f6-b706-38e9-8960-b80c7ea6215e.roa
Signing time:             Thu 07 May 2026 13:00:31 +0000
ROA not before:           Thu 07 May 2026 13:00:31 +0000
ROA not after:            Wed 05 Aug 2026 13:00:31 +0000
asID:                     3561
IP address blocks:        206.156.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c1:35:be:8f:d8:18:5f:d2:31:a9:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: May  7 13:00:31 2026 GMT
            Not After : Aug  5 13:00:31 2026 GMT
        Subject: CN=a75d0b16-1aea-4d06-82ff-355bd278df98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:19:ad:6e:f8:c2:48:2c:a0:de:ed:a7:c2:55:
                    73:8b:33:78:90:be:b7:4d:0f:57:a4:d6:db:ba:9b:
                    20:e5:86:d1:80:f6:64:15:05:15:69:91:6d:77:1e:
                    50:0e:a6:fd:f7:fb:35:40:ce:f3:4f:57:b5:fb:cf:
                    80:10:aa:4a:55:7b:63:ac:48:91:ca:b8:06:e8:4e:
                    24:59:4c:93:b9:62:0a:1e:9f:2e:42:cd:68:1b:b9:
                    18:63:14:e5:21:65:34:e7:95:5e:3a:6c:6d:3e:e7:
                    32:c5:43:96:7f:e3:e6:f3:89:1f:d0:cb:d0:50:91:
                    f9:14:d4:d3:b2:91:be:10:37:d2:85:3e:6a:26:bf:
                    a2:d9:44:ab:5f:d0:b2:54:77:60:fc:8f:12:32:ae:
                    ca:91:55:9c:12:b1:82:d8:33:52:22:55:c5:cf:e1:
                    33:eb:2d:92:20:03:33:6e:8c:87:51:d4:89:66:94:
                    da:c6:cf:96:28:de:42:85:f1:0d:81:f0:cb:34:67:
                    6d:20:2a:3b:61:32:ea:bd:ee:57:b2:7e:71:09:4a:
                    ba:b7:02:3f:67:8e:03:18:fd:3a:ad:f7:24:2b:dd:
                    2e:a7:7d:3c:36:c1:be:e3:2b:18:ad:8e:63:16:ca:
                    b5:c5:aa:e2:4d:cb:9d:74:ee:89:18:c1:e3:9a:db:
                    cb:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:48:1C:41:18:E9:9F:9D:1A:AF:4B:17:A6:28:4B:32:2C:CC:38:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/cd12c9f6-b706-38e9-8960-b80c7ea6215e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.156.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:6b:0b:61:9b:40:41:b5:b2:ca:ce:47:c8:85:36:22:72:3a:
         af:83:cc:03:a0:3b:4c:5c:56:9e:bd:50:91:3e:8d:7f:a2:e0:
         b9:9f:fa:14:78:07:3a:5d:eb:b6:10:c2:74:d1:2c:a6:81:3b:
         2b:fe:c5:05:f2:bd:59:43:75:17:0f:3d:37:cd:59:b0:01:85:
         7d:ce:ad:87:b4:82:4e:11:75:0d:76:6c:8d:e5:2e:eb:ba:38:
         f6:41:35:b8:1e:93:d5:05:2c:16:2a:c2:26:e0:0d:39:6e:9b:
         3d:7e:db:e9:ba:a6:05:8c:50:88:c6:e5:34:dd:8d:64:0b:f2:
         cd:3c:b8:02:8d:74:93:70:92:47:ed:a1:6f:17:4f:0d:87:02:
         56:e0:f6:7a:f0:d9:d5:7b:4f:8f:78:29:b6:73:20:0a:f1:3d:
         90:de:e2:fa:31:8e:15:54:c5:3c:e6:42:67:fc:79:d6:84:88:
         38:cd:26:83:6e:b9:d0:3b:dd:f8:8f:f7:15:8a:c6:73:d8:69:
         1d:c3:ad:bd:8d:9b:97:82:e4:03:7f:7c:7f:e1:78:c8:be:71:
         e4:50:55:99:13:9a:b6:50:8d:e3:4c:5a:73:b9:fd:42:d4:96:
         92:99:74:70:0e:fa:dd:c3:29:b3:75:66:7d:00:6b:e2:bd:45:
         02:ae:16:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:46:38 2026 by rpki-client