Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/69cdef79-d280-3419-8f19-f2ec48165ccc.roa
File:                     69cdef79-d280-3419-8f19-f2ec48165ccc.roa (raw, json)
Hash identifier:          /zSyoRuqHuXV+5nDIVZvDDMnugustPGC0H9EBnAqYVc=
Subject key identifier:   54:BB:91:72:41:57:07:5F:B7:0E:4C:BB:08:FF:1D:E4:CE:2E:A5:46
Certificate issuer:       /CN=8ac31463-974b-4676-9328-200202ae4d6e
Certificate serial:       010D0C9F4328584E5A4A04E6549E1FD4CEEA1880
Authority key identifier: 66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/69cdef79-d280-3419-8f19-f2ec48165ccc.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     33211
IP address blocks:        206.41.112.0/20 maxlen: 20
                          206.41.118.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:4a:04:e6:54:9e:1f:d4:ce:ea:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ac31463-974b-4676-9328-200202ae4d6e
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=616de9b5-85ac-450f-ac18-7a877ac13da5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:dd:75:30:ae:02:f9:94:1b:c5:18:9e:75:fb:
                    66:de:d4:31:18:f8:a9:c3:59:dc:20:ac:6a:93:18:
                    8e:91:0d:3b:c2:e3:b0:f7:fd:fd:fc:b9:af:b4:92:
                    aa:1f:e0:79:33:18:74:be:13:21:01:e3:a8:ca:6f:
                    14:34:da:d4:07:db:4b:63:40:d6:1f:e9:b5:26:79:
                    2f:09:02:1c:34:98:0a:84:ed:74:98:43:aa:88:b2:
                    6b:17:a4:2f:6f:d8:5e:48:12:ad:a3:1b:6b:07:6f:
                    35:bb:31:41:f0:a7:e6:e4:35:78:91:44:5d:b1:7b:
                    f5:e0:2b:5f:2d:d8:b7:4c:6c:c0:42:4d:8d:f8:5d:
                    81:23:69:ce:15:49:0c:4d:9d:7f:2c:5a:50:fb:fc:
                    cb:36:fc:f2:ad:91:eb:07:c0:1f:39:30:10:c4:81:
                    d2:29:f0:02:bd:83:72:1e:78:1c:93:96:50:d9:1e:
                    1f:7d:c9:2a:e7:a3:8b:84:3e:78:9c:db:3b:52:ee:
                    8d:e6:77:8b:e3:b5:3c:62:16:db:bf:eb:f3:b5:c6:
                    3c:f5:a3:94:ec:3a:6b:d0:ab:e0:bd:80:e8:c4:2f:
                    73:01:e7:39:ae:90:86:51:dc:e0:35:38:5c:3b:c3:
                    c5:d6:df:f8:c6:03:dc:6e:59:6f:85:80:55:88:dc:
                    6a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:BB:91:72:41:57:07:5F:B7:0E:4C:BB:08:FF:1D:E4:CE:2E:A5:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/69cdef79-d280-3419-8f19-f2ec48165ccc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl

            X509v3 Authority Key Identifier:
                keyid:66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.41.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:1a:c9:7f:25:19:d3:e7:7b:bc:81:54:f5:79:13:57:41:ea:
         c8:a8:11:37:c7:d5:46:8b:de:e0:29:52:52:33:02:10:cb:5f:
         61:8c:de:d0:5f:77:c0:3c:01:89:63:88:d8:b0:1c:ad:ce:2c:
         aa:95:42:ab:07:34:92:f6:27:cc:f0:ce:7a:a7:b7:02:38:a4:
         7e:dd:9f:b1:3d:a8:81:34:c2:82:25:9d:cb:21:e9:68:c1:87:
         f3:79:17:8c:35:5b:a4:5f:8e:4c:3f:51:4d:d2:bb:f3:cf:13:
         25:d5:af:3b:b9:57:35:b4:ff:3e:c6:2a:00:c4:e0:2d:1b:97:
         72:d1:5e:d8:15:12:4c:2a:79:91:a8:33:c9:0d:9c:62:10:fe:
         fe:e7:8c:b1:42:8e:72:93:89:ef:e2:1f:cb:b1:27:75:9b:22:
         29:bb:ac:11:4b:ae:be:fc:cb:68:fe:f4:da:93:1b:0a:c7:a1:
         6b:2b:b5:9f:4f:1d:4c:7d:9f:11:ad:cb:37:e4:8a:c2:41:86:
         ef:88:1a:c2:91:e1:35:c7:8d:1e:4f:75:98:91:3c:20:5f:d2:
         c4:85:5c:36:b3:72:2c:33:4e:a0:db:5b:31:4e:72:ca:f4:fb:
         44:db:88:6a:f9:d5:ef:37:e2:fa:c6:60:a6:cb:b9:56:71:83:
         7b:7b:56:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:49:15 2026 by rpki-client