Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/ced6341d-e795-328e-9371-e1a1f59d7ca0.roa
File:                     ced6341d-e795-328e-9371-e1a1f59d7ca0.roa (raw, json)
Hash identifier:          W0JU1nyfZGZZCYHQE5ekTD5SaJwoxxoCpeC/qmlJ6Hk=
Subject key identifier:   20:A4:58:BB:97:94:E9:2C:02:0B:D0:3C:77:EB:B5:C9:A3:F6:ED:E2
Certificate issuer:       /CN=8a2695b7-e823-4f74-93b8-98dbbf775bcf
Certificate serial:       010D0C9F4328584E3A2F402D71C78DE09D787A00
Authority key identifier: 43:0A:58:EE:F9:9E:78:C5:3B:DC:25:A2:B4:83:93:81:46:69:C4:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/ced6341d-e795-328e-9371-e1a1f59d7ca0.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     397493
IP address blocks:        206.197.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/8a2695b7-e823-4f74-93b8-98dbbf775bcf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/8a2695b7-e823-4f74-93b8-98dbbf775bcf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:40:2d:71:c7:8d:e0:9d:78:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2695b7-e823-4f74-93b8-98dbbf775bcf
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=0c032337-97a1-44df-a859-cc066bfdbd38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:01:8f:be:14:09:9d:02:f9:8f:80:f9:19:e7:
                    52:74:05:45:34:55:2d:60:21:02:97:14:15:dd:09:
                    76:a3:31:18:2c:cc:9e:be:5c:8b:06:76:9f:c5:8e:
                    13:e4:d6:79:4c:34:b7:b6:d0:bf:46:5e:d8:47:09:
                    d3:d5:7b:1c:e5:7e:05:b8:21:e9:4e:61:16:44:08:
                    3a:13:8e:e7:24:3c:ac:b6:9a:ef:91:88:3b:36:a9:
                    36:f2:50:4f:69:23:b8:4c:7e:13:c5:f2:dc:9c:82:
                    93:05:70:ba:60:d4:05:55:60:e8:5c:cd:c1:75:9a:
                    a1:a9:29:a4:2d:c5:76:e5:28:ec:a8:bb:3e:fa:5a:
                    fa:a3:50:e1:c1:56:94:c2:75:35:1d:bb:d3:cb:6a:
                    aa:5a:52:90:19:be:19:c2:cd:58:22:a7:d9:34:05:
                    88:88:31:49:75:d7:a2:4a:6f:ae:69:63:c9:9d:fd:
                    09:ad:37:d2:cf:e5:0a:d0:19:3c:46:dc:47:56:3d:
                    d7:a0:a0:62:96:7c:52:bc:cd:47:0a:79:24:5a:00:
                    b1:f2:11:58:dd:69:36:52:c4:a3:a1:b0:34:ed:ac:
                    c1:0a:05:e2:ed:db:d1:e1:b2:d9:86:fc:59:44:f3:
                    91:e5:42:e5:04:c8:2e:e5:d1:79:cb:17:8f:e5:b2:
                    84:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:A4:58:BB:97:94:E9:2C:02:0B:D0:3C:77:EB:B5:C9:A3:F6:ED:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/ced6341d-e795-328e-9371-e1a1f59d7ca0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/8a2695b7-e823-4f74-93b8-98dbbf775bcf.crl

            X509v3 Authority Key Identifier:
                keyid:43:0A:58:EE:F9:9E:78:C5:3B:DC:25:A2:B4:83:93:81:46:69:C4:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.197.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:fb:fc:0d:c0:4f:3f:1d:f2:02:0c:bc:6a:ba:96:7f:d8:36:
         fc:93:9d:b6:d7:7c:dd:29:5d:3c:05:c0:97:a4:7f:22:45:8e:
         86:3d:51:44:4d:af:c0:e0:9d:98:f7:20:98:c0:dc:93:b9:80:
         80:4a:16:cb:54:30:51:36:61:99:98:d5:24:bb:d5:d0:16:aa:
         d4:2f:da:00:00:07:84:25:ee:e4:08:06:4a:ff:03:a8:84:0b:
         8b:b1:f9:22:0c:ee:9a:e3:71:a3:25:26:aa:0c:ee:77:7b:64:
         40:08:0f:a3:32:24:39:58:a8:29:0f:0a:47:54:83:0c:42:1e:
         38:97:16:b6:29:ac:d6:21:2b:5d:c1:cf:a8:fb:4c:5c:d2:a5:
         99:74:87:d4:77:bc:4b:ec:17:cd:03:ae:71:ac:3f:83:43:cf:
         b3:e2:3a:7b:94:c3:fd:a4:38:fd:86:84:54:53:12:d3:58:9e:
         0d:8a:92:c2:ba:de:65:b9:94:c9:94:88:e1:51:19:f9:c6:fa:
         e9:af:2d:37:64:ef:fe:b6:ff:12:1d:e6:4e:05:07:6f:76:17:
         ea:9d:78:63:2e:ba:f7:a5:2c:ab:bd:63:bc:88:49:77:73:6a:
         1e:4b:64:b4:40:a7:85:5a:07:31:12:3b:d7:42:7e:a5:f1:ac:
         ee:58:bd:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:18:37 2026 by rpki-client