Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/28e22024-7be4-34d4-8d4f-0dcccfa3b962.roa
File:                     28e22024-7be4-34d4-8d4f-0dcccfa3b962.roa (raw, json)
Hash identifier:          KKW/aFdNaCbm850wQuZ+0+4O2JppbHb20PKkKCd5IaM=
Subject key identifier:   DF:5B:C8:FE:59:B0:73:3F:2A:F6:5B:E6:BF:14:1A:77:26:D1:23:A0
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584D19B4C736E8B856C02CE9E900
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/28e22024-7be4-34d4-8d4f-0dcccfa3b962.roa
Signing time:             Sun 08 Mar 2026 13:00:40 +0000
ROA not before:           Sun 08 Mar 2026 13:00:40 +0000
ROA not after:            Sat 06 Jun 2026 13:00:40 +0000
asID:                     376
IP address blocks:        206.167.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:19:b4:c7:36:e8:b8:56:c0:2c:e9:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Mar  8 13:00:40 2026 GMT
            Not After : Jun  6 13:00:40 2026 GMT
        Subject: CN=41dc3f29-c6e6-4643-9e01-6b25a6cdf8d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b8:66:9e:4c:f8:44:a0:e0:83:9f:be:96:ca:
                    80:80:f3:85:a5:e3:ff:de:c9:d8:27:12:d3:12:c2:
                    86:35:8f:f2:f5:42:05:25:4b:35:2a:e1:92:cc:12:
                    92:b9:54:c4:a6:28:03:87:76:7e:ab:94:8b:3f:ec:
                    2d:f4:9b:4d:85:8e:f7:23:86:0f:7e:b6:73:fe:59:
                    b9:1f:2e:c2:e9:cb:6b:6d:9b:da:d0:41:37:c2:56:
                    0a:3a:2d:12:44:3d:2c:20:ea:98:a9:79:0f:b9:31:
                    be:c3:2c:ba:bb:66:3f:61:62:45:3b:c8:89:71:d1:
                    f9:1c:54:9d:a6:06:90:b4:39:8f:1f:8d:c4:f6:f3:
                    c4:06:75:2c:f6:99:af:d1:0d:52:2d:2c:1b:55:fd:
                    5a:12:ba:fd:11:73:86:11:68:02:8d:22:6c:53:c1:
                    e3:50:e0:2f:70:ec:09:09:b9:c0:e3:ac:fd:8d:54:
                    23:5c:57:9b:7f:d9:f5:2c:a7:9f:58:03:3c:8a:a7:
                    02:a0:e8:99:36:a1:2f:dc:85:78:30:52:29:2b:1a:
                    02:44:ce:3d:cd:64:25:71:50:f2:95:3d:60:23:fa:
                    0c:a3:1d:7a:e9:db:29:86:16:55:2f:5a:bf:38:59:
                    03:96:30:0d:54:7c:6b:40:3a:a8:f5:ee:4d:82:a1:
                    d6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:5B:C8:FE:59:B0:73:3F:2A:F6:5B:E6:BF:14:1A:77:26:D1:23:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/28e22024-7be4-34d4-8d4f-0dcccfa3b962.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:51:21:01:eb:3a:ce:76:34:a7:f7:b8:c3:7c:eb:54:b8:11:
         20:2a:bd:a4:f2:f1:51:05:50:f6:d2:22:e7:16:da:45:2f:f2:
         a7:74:87:62:68:9c:ca:2a:f6:9a:7b:90:04:44:c9:8f:42:52:
         cd:eb:f5:4a:d9:4b:73:b1:48:f0:56:ef:5f:7a:63:4f:94:76:
         b6:cd:1f:c6:e3:17:d4:80:66:32:55:71:fe:75:78:3b:08:14:
         61:c1:8c:02:fe:97:d2:75:bd:ae:16:a5:cd:ea:b0:ef:99:06:
         e2:58:7a:b4:2c:86:b8:b7:fc:36:77:79:fb:e8:b3:e7:73:8b:
         2b:96:a0:e1:58:9c:3c:2a:c3:82:d3:8b:36:64:6f:d8:1d:5d:
         cc:38:7c:41:4b:87:cd:2d:58:88:9d:66:cd:83:58:08:60:ff:
         c6:16:6a:e1:4d:0f:26:d0:27:65:07:45:8c:ec:57:a1:b0:08:
         e0:17:e8:f8:06:be:dd:42:20:c1:fb:73:4a:97:b5:7c:89:50:
         be:6d:62:60:02:e1:7c:b0:fa:1d:06:f7:58:69:56:ad:38:8b:
         ef:20:32:43:98:b9:b7:ce:bc:6c:ed:71:1e:94:3c:79:79:3b:
         b0:09:ee:5f:d7:91:55:eb:2c:09:97:c2:ee:e0:18:64:2d:e8:
         ea:0f:31:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:08:03 2026 by rpki-client