Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/821e279e-176c-4b5d-ad30-b8c9c2340ee0/1f87c226-2475-3227-b5f0-d1168a1ed52a.roa
File:                     1f87c226-2475-3227-b5f0-d1168a1ed52a.roa (raw, json)
Hash identifier:          8FVsAcCzQf3BkyTviPQA5WGSA+M+SVX6pfbAv1ELo0E=
Subject key identifier:   43:FD:D1:6D:42:EB:C7:31:79:97:DF:49:6E:FC:71:27:47:AC:53:89
Certificate issuer:       /CN=821e279e-176c-4b5d-ad30-b8c9c2340ee0
Certificate serial:       010D0C9F4328584E8F54F2979D0DA2B11F6F8C00
Authority key identifier: F4:7B:F8:5A:79:A4:A5:58:90:6D:8A:80:83:7F:56:8C:AA:89:A9:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/821e279e-176c-4b5d-ad30-b8c9c2340ee0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/821e279e-176c-4b5d-ad30-b8c9c2340ee0/1f87c226-2475-3227-b5f0-d1168a1ed52a.roa
Signing time:             Mon 20 Jul 2026 09:00:11 +0000
ROA not before:           Mon 20 Jul 2026 09:00:11 +0000
ROA not after:            Sun 18 Oct 2026 09:00:11 +0000
asID:                     398816
IP address blocks:        206.109.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/821e279e-176c-4b5d-ad30-b8c9c2340ee0/821e279e-176c-4b5d-ad30-b8c9c2340ee0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/821e279e-176c-4b5d-ad30-b8c9c2340ee0/821e279e-176c-4b5d-ad30-b8c9c2340ee0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/821e279e-176c-4b5d-ad30-b8c9c2340ee0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8f:54:f2:97:9d:0d:a2:b1:1f:6f:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821e279e-176c-4b5d-ad30-b8c9c2340ee0
        Validity
            Not Before: Jul 20 09:00:11 2026 GMT
            Not After : Oct 18 09:00:11 2026 GMT
        Subject: CN=0c313427-64d1-4c6e-9e54-dbb9085dd3dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b5:19:14:1c:6b:f8:55:24:84:f7:49:90:d0:
                    9d:04:24:63:8b:52:29:37:91:3f:cd:24:47:5a:77:
                    18:4a:2c:05:33:4b:0d:70:2c:f0:55:78:2b:89:ad:
                    37:fc:3b:07:c3:ee:0b:ac:08:5a:2f:a2:f9:4c:04:
                    8e:03:1c:45:84:41:b1:25:5c:13:04:dc:9d:34:04:
                    e7:77:7b:f8:8b:d6:58:f2:b4:81:48:a0:76:44:78:
                    8a:15:d7:26:b8:9b:18:a4:75:84:f3:b1:7f:0c:b5:
                    f6:17:82:d7:9a:b2:34:ce:e7:7d:11:b1:c0:9c:0e:
                    1e:8d:15:9c:a8:7c:a2:6b:51:e2:81:9d:07:61:0a:
                    02:47:b3:14:e2:e9:95:c3:29:a0:22:83:cb:e0:24:
                    1f:82:1b:25:7b:7e:a9:ed:8d:f0:dc:a6:34:02:fa:
                    72:b9:82:ca:3f:25:bd:81:43:79:1f:21:94:2b:2c:
                    0b:a0:cb:2d:53:3f:9e:c3:c7:9d:8a:14:9a:ea:4e:
                    c2:38:ac:12:b6:34:5e:3f:76:d3:5c:f8:9f:a4:f4:
                    f9:07:81:bf:29:c7:87:cd:ad:e2:b0:dc:aa:c4:c5:
                    95:3b:cc:bb:b4:01:05:77:8c:70:66:f4:2a:96:cc:
                    68:f7:0b:55:68:86:7b:06:70:02:92:14:c1:8d:d0:
                    8f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:FD:D1:6D:42:EB:C7:31:79:97:DF:49:6E:FC:71:27:47:AC:53:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/821e279e-176c-4b5d-ad30-b8c9c2340ee0/1f87c226-2475-3227-b5f0-d1168a1ed52a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/821e279e-176c-4b5d-ad30-b8c9c2340ee0/821e279e-176c-4b5d-ad30-b8c9c2340ee0.crl

            X509v3 Authority Key Identifier:
                keyid:F4:7B:F8:5A:79:A4:A5:58:90:6D:8A:80:83:7F:56:8C:AA:89:A9:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/821e279e-176c-4b5d-ad30-b8c9c2340ee0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.109.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:49:a4:80:d0:2b:e7:35:84:47:93:be:15:ac:71:9f:48:88:
         c0:5a:d8:37:e4:70:dc:56:02:48:ac:45:4e:af:37:31:50:27:
         15:41:da:c2:00:a0:48:58:a3:77:0a:d0:8a:2b:a9:ab:a8:aa:
         22:a6:38:81:10:44:11:23:45:bb:fe:44:6f:83:03:e8:82:1c:
         77:9f:03:3f:18:d2:9a:93:59:b1:87:88:76:46:be:ee:1c:16:
         14:1e:f8:01:14:f4:53:26:4c:ca:ae:a8:fc:14:62:98:3e:d3:
         aa:5a:46:ef:c0:41:50:cd:0f:a8:39:56:df:61:90:9c:1e:d5:
         81:4e:71:0b:9e:35:78:a3:84:bc:ac:1b:b1:43:65:0b:8c:a7:
         46:84:61:54:44:a5:94:ea:69:74:12:c8:e6:71:01:76:be:2b:
         3d:8b:b8:6e:ef:68:3c:a9:6b:df:9b:4f:b9:aa:f6:3b:67:00:
         c3:74:32:f9:2b:f8:b3:91:88:c9:8a:c0:62:2f:f2:b2:88:8a:
         57:7b:21:e5:b3:d2:47:d0:ba:21:63:03:cd:1a:37:b2:1f:c7:
         54:a5:22:e6:7f:89:78:cb:51:f9:bc:5c:eb:79:bb:c2:76:fd:
         7b:7d:bc:c8:15:e7:81:bc:82:a7:d9:b2:cd:1e:2c:29:05:64:
         44:d6:87:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:59:20 2026 by rpki-client