Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/964546bd-d3be-387c-9014-6b3630a3ee7e.roa
File:                     964546bd-d3be-387c-9014-6b3630a3ee7e.roa (raw, json)
Hash identifier:          3jpdepBezMmEaJBBtXVdMb+o3QSBl1/4SmVnA+JOWJ8=
Subject key identifier:   E4:DE:16:85:C0:FD:4A:39:36:04:2D:F5:14:0D:D2:85:29:79:C5:48
Certificate issuer:       /CN=8741ed4f-28ba-4cbf-a4a6-384057567d05
Certificate serial:       010D0C9F4328584D300A4098A399FDFAC98060C0
Authority key identifier: B0:4F:D2:1C:43:38:06:D0:27:8E:BD:98:13:F5:43:C3:B3:48:89:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/964546bd-d3be-387c-9014-6b3630a3ee7e.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     16509
IP address blocks:        206.15.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/8741ed4f-28ba-4cbf-a4a6-384057567d05.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/8741ed4f-28ba-4cbf-a4a6-384057567d05.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:40:98:a3:99:fd:fa:c9:80:60:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8741ed4f-28ba-4cbf-a4a6-384057567d05
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=378b6d6b-4890-40be-ae62-ffc5d5f3a92d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:27:a9:df:cf:c1:43:84:9c:0a:63:ca:18:fc:
                    be:28:2e:2a:2e:65:fd:83:74:ff:f1:79:66:76:b3:
                    77:59:40:69:10:66:ce:11:e7:05:b3:53:5c:0d:17:
                    40:88:4a:87:9d:a9:79:4d:4a:47:9a:40:33:4b:b9:
                    fe:4a:a3:84:41:4a:7d:91:d8:43:1b:51:17:a6:e9:
                    e3:cf:80:80:51:05:93:ee:d3:32:d6:c8:c0:bf:03:
                    8e:cc:15:cd:54:52:8e:41:49:76:a4:a8:ab:89:f7:
                    66:6e:c7:fc:b4:01:4e:18:2b:ea:7f:2b:3e:a7:64:
                    3a:89:37:d7:f6:c0:63:d2:65:4f:8e:4a:a7:6e:10:
                    ac:c0:ec:8c:63:3b:df:24:17:ce:85:4e:f3:7a:df:
                    d4:6f:65:30:e8:2e:95:9d:2a:e1:80:33:35:f3:11:
                    ce:71:28:ce:9f:41:d7:b4:39:38:7a:45:36:38:93:
                    e2:22:89:0c:0e:3f:b8:84:fd:15:94:9e:18:54:a5:
                    90:2e:5d:7c:27:9b:c1:ef:46:6e:47:cb:c3:91:2e:
                    dc:a6:db:d3:86:7d:33:3c:e8:65:f5:f5:f3:bc:f2:
                    eb:63:38:2e:49:50:8b:d2:20:aa:d9:45:b0:e3:8c:
                    b3:41:23:81:6b:6b:db:a4:cb:a6:88:0c:56:4b:fb:
                    27:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:DE:16:85:C0:FD:4A:39:36:04:2D:F5:14:0D:D2:85:29:79:C5:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/964546bd-d3be-387c-9014-6b3630a3ee7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/8741ed4f-28ba-4cbf-a4a6-384057567d05.crl

            X509v3 Authority Key Identifier:
                keyid:B0:4F:D2:1C:43:38:06:D0:27:8E:BD:98:13:F5:43:C3:B3:48:89:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.15.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:6d:b4:f2:9d:2c:b4:4c:97:3b:60:b8:10:67:35:f3:df:20:
         81:97:1b:a6:9e:12:ed:da:bc:77:50:97:92:da:68:f3:7b:89:
         b0:28:4e:66:2f:51:c5:ea:49:25:c7:9e:18:d7:54:f8:94:c8:
         00:10:64:ed:41:4d:0f:b8:3a:29:a5:2e:2e:b7:dd:61:2c:8f:
         0a:f7:3a:1d:f7:ae:27:f0:5d:c3:83:78:1f:28:c2:9d:ed:93:
         7e:d5:45:3f:17:9f:26:92:f2:2d:9b:cb:b7:ff:b7:88:bd:8e:
         1b:be:fa:72:e8:16:21:80:f4:90:4f:8b:2b:cc:b4:86:9d:87:
         7f:cc:3a:1f:33:97:93:6c:ba:5c:57:8a:c1:67:2d:80:fc:f8:
         3c:85:3a:9d:3b:03:ae:10:7c:dd:6f:93:12:c5:f9:fe:23:c1:
         68:56:f2:72:03:da:c0:57:a8:ed:ac:a3:8e:b4:20:41:d1:82:
         3d:3f:65:a5:39:da:bb:9d:8f:43:2b:0f:b9:c4:96:db:19:4e:
         86:d7:a9:b2:c1:a5:03:cb:43:54:5e:60:52:b5:4b:b8:03:22:
         51:24:2b:95:8d:17:e8:af:df:e8:b8:d8:ec:61:f1:7f:a2:f9:
         ed:d1:12:90:44:57:35:ce:53:ee:0f:f7:67:72:0b:30:2d:3a:
         90:b1:d0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:42:12 2026 by rpki-client