Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/d764610e-a629-3c75-bb09-1542bb2fe71b.roa
File:                     d764610e-a629-3c75-bb09-1542bb2fe71b.roa (raw, json)
Hash identifier:          qenW01uWmZ2bG4U5Xzj/WMMYt5m85iXRNJ1m5pD0JgY=
Subject key identifier:   0B:21:4A:A3:CA:C9:41:B6:29:67:E6:0C:79:6F:BE:D2:7E:FC:CB:A4
Certificate issuer:       /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Certificate serial:       010D0C9F4328584DC4004A0A196F5B87B5E7DEE0
Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/d764610e-a629-3c75-bb09-1542bb2fe71b.roa
Signing time:             Fri 08 May 2026 13:00:30 +0000
ROA not before:           Fri 08 May 2026 13:00:30 +0000
ROA not after:            Thu 06 Aug 2026 13:00:30 +0000
asID:                     6922
IP address blocks:        206.254.232.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c4:00:4a:0a:19:6f:5b:87:b5:e7:de:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
        Validity
            Not Before: May  8 13:00:30 2026 GMT
            Not After : Aug  6 13:00:30 2026 GMT
        Subject: CN=fa64c019-394f-4c30-89e6-97914bd0b686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:77:c3:0f:c8:b4:00:f4:a2:d3:42:b4:22:8a:
                    78:ce:11:ed:d0:81:54:da:3c:69:ca:ee:18:e5:27:
                    14:3f:53:f4:26:d3:d3:00:cb:71:c1:37:1d:69:0c:
                    25:3d:db:76:15:fc:46:e2:d1:db:2e:0a:df:ae:4c:
                    2e:05:de:c7:94:9e:0f:16:3a:8c:2e:12:48:d1:af:
                    92:96:ac:c2:26:e4:0a:14:76:0a:28:f5:f3:34:6d:
                    30:9e:7f:f0:23:c0:f9:9e:1f:2c:82:41:49:b9:86:
                    41:42:ae:ec:c6:c2:c7:ff:16:fc:64:4e:c4:9e:7f:
                    9e:4b:82:bc:f2:80:d4:b3:42:8f:92:b7:87:1e:36:
                    cc:05:8a:e8:09:ad:3c:c7:b7:b6:4d:7a:85:53:f5:
                    46:57:19:31:5e:d6:de:42:29:98:9c:aa:a7:0a:cd:
                    5f:27:10:6e:16:ff:6e:b0:8c:55:0e:6e:cc:47:47:
                    c9:ab:9f:c6:6d:1f:03:f2:b3:9c:a5:cc:07:d4:49:
                    a2:53:03:9f:0c:12:8c:f7:10:12:6d:06:c7:9d:ad:
                    54:3a:72:34:e1:1c:c2:7a:ef:02:17:da:d9:99:d2:
                    9e:82:c6:95:5b:c6:3b:d9:7b:96:8a:34:99:b5:19:
                    96:6c:8a:a1:f8:b6:ac:40:ee:92:4d:70:f7:e4:3a:
                    01:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:21:4A:A3:CA:C9:41:B6:29:67:E6:0C:79:6F:BE:D2:7E:FC:CB:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/d764610e-a629-3c75-bb09-1542bb2fe71b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl

            X509v3 Authority Key Identifier:
                keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.254.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:6d:bb:9e:95:4f:ad:01:5e:8a:00:53:2f:90:70:63:39:32:
         e8:c2:c2:6d:2b:00:f2:b8:ae:a4:d5:71:5c:a4:24:d6:f5:ab:
         88:f0:7e:e7:e1:7c:21:36:74:2b:1c:2d:a1:f5:85:f6:db:11:
         71:8e:89:eb:09:b3:a8:74:af:19:94:99:30:73:de:98:61:37:
         74:5f:b6:32:ac:a6:fa:0f:73:42:d0:d1:6e:0e:dd:f9:07:c8:
         ac:41:3e:0e:13:2a:f7:e2:db:9d:3c:fc:16:58:a9:97:80:65:
         f8:5c:ed:8a:65:45:fb:2a:a1:8d:92:bf:32:1e:fc:45:0b:05:
         22:ac:bb:18:a6:1a:c2:ef:c0:f0:fd:cc:eb:dd:6d:13:c8:2a:
         53:50:31:2f:be:ea:b4:0a:90:76:2d:ae:3a:9d:8e:86:97:99:
         94:21:de:45:77:f7:56:e9:7b:7f:e1:0c:0f:88:4c:fd:7f:a8:
         6e:f8:d7:48:1b:4b:39:47:10:93:00:5c:0c:e6:cb:b5:39:f9:
         ba:d7:15:6f:5c:ff:e9:e0:70:db:35:34:db:13:3f:26:01:00:
         0c:be:7c:e2:d9:ac:5c:0b:7f:ca:cb:bd:0e:86:ff:00:0a:bd:
         f2:09:e2:75:27:6b:a9:b0:53:12:29:7e:bd:39:a9:e7:23:b6:
         2d:c3:a2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:28:29 2026 by rpki-client