Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1267bb22-3264-3c39-abfa-3daf2c978143.roa
File:                     1267bb22-3264-3c39-abfa-3daf2c978143.roa (raw, json)
Hash identifier:          pZNU1gvbnA2uLPefygNwYkz+AzNhaZwU3JPI56136SY=
Subject key identifier:   9A:83:12:3F:5B:5A:21:C9:F5:96:7D:AA:3F:67:5F:BB:71:CD:F4:F2
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584D3DFF80A18F753BF88ABFD80C
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1267bb22-3264-3c39-abfa-3daf2c978143.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     9009
IP address blocks:        206.123.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:80:a1:8f:75:3b:f8:8a:bf:d8:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=624b4886-d3c5-4b97-95c4-0f590f1964f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:3a:7c:c9:6c:70:ee:88:f4:27:97:61:9d:f6:
                    09:0d:d2:dc:16:88:0b:f6:77:bf:7e:fb:1d:ac:75:
                    da:83:69:e8:18:22:08:55:f2:00:29:b2:81:d4:fa:
                    3c:af:d0:d2:ae:e2:29:71:a0:f9:fd:1d:fc:81:b7:
                    36:17:57:b8:18:49:e2:a9:b7:72:a2:73:bb:79:1f:
                    36:49:a2:0c:2f:d8:24:49:5e:ce:71:e9:03:d8:31:
                    c7:d0:3e:d8:65:18:2f:19:f5:ad:55:ad:9f:bd:29:
                    04:1a:38:59:0a:20:4a:48:eb:96:62:3d:cb:f3:e1:
                    ed:24:2c:b4:1d:3d:c2:a0:08:cd:87:2b:fb:4a:95:
                    72:7e:b7:75:8f:13:ea:1c:2d:9d:30:b3:8d:66:ad:
                    53:31:50:a2:e2:15:c6:f9:1b:76:e5:05:c8:ae:50:
                    f2:1d:62:0a:4d:cb:de:45:1c:24:d1:89:76:65:ec:
                    3d:11:dc:74:c5:92:f6:08:67:01:00:fd:c4:66:c9:
                    78:12:e8:22:dc:9e:91:1f:2c:f8:df:ef:a8:37:e7:
                    74:8e:f7:55:69:fe:63:4e:c8:88:3a:93:24:7d:4d:
                    c7:63:35:d0:fb:48:15:ef:9a:24:89:4e:d5:4d:04:
                    34:c9:1b:b4:c1:8e:7d:98:3b:d8:17:a4:62:03:88:
                    15:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:83:12:3F:5B:5A:21:C9:F5:96:7D:AA:3F:67:5F:BB:71:CD:F4:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1267bb22-3264-3c39-abfa-3daf2c978143.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.123.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:50:70:db:9f:56:64:30:87:d9:b0:ce:4c:5e:35:df:d6:79:
         2e:1b:a2:62:c4:f3:84:58:81:50:98:bc:7f:90:0a:07:c2:b0:
         24:c7:5e:5a:69:f0:16:4a:25:41:02:04:95:3d:48:ee:55:cd:
         ce:00:0d:76:0f:c7:8a:cb:d1:d8:90:8f:c8:c1:43:7c:1e:d4:
         b0:e9:e6:21:26:d6:2d:c2:b0:de:27:06:8c:6e:b9:53:0b:28:
         6b:c8:d5:1f:05:a5:23:a4:2a:58:d0:11:7c:25:29:63:df:6e:
         6c:ae:74:bd:44:4c:6a:1a:d3:1d:58:28:b3:ad:56:21:58:91:
         20:33:a4:86:4c:c2:28:53:98:0b:44:92:6f:40:79:36:9c:90:
         0b:08:39:d4:a2:22:ad:e7:93:f2:5e:98:ba:b0:6e:a6:1b:66:
         3f:fc:83:cb:56:1d:27:36:68:b4:c5:f1:b5:9d:fd:31:f1:95:
         68:11:3b:be:42:44:a3:dd:a8:70:da:c6:cc:34:57:33:b3:55:
         01:71:0c:59:f7:9b:1a:10:70:f9:1f:15:d6:c1:85:5c:b4:8c:
         f6:52:49:a0:77:b7:98:1b:89:65:2c:b7:a0:ef:ca:c6:5a:93:
         00:cb:d5:ee:9d:70:ca:d3:ec:6e:72:84:11:3a:4a:98:03:cd:
         dc:52:ae:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:22:21 2026 by rpki-client