Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/a921e491-09cc-3788-809c-fb266e3431cc.roa
File:                     a921e491-09cc-3788-809c-fb266e3431cc.roa (raw, json)
Hash identifier:          XkeIBq5gGMy5X1XIhUkpQH01Kzt0+TKYXi48CTILDG4=
Subject key identifier:   68:AF:17:94:5F:39:6C:C6:41:AF:B4:CF:A9:FC:2C:DD:E6:B4:81:05
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584E6F3A3A46582D786AC57E1100
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/a921e491-09cc-3788-809c-fb266e3431cc.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     26744
IP address blocks:        206.180.156.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:3a:46:58:2d:78:6a:c5:7e:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=23a157c5-9d99-40b1-9335-758aa81bac96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ce:29:4a:bb:cf:43:ae:96:34:61:da:f4:9c:
                    93:f0:82:3e:15:48:01:38:fa:d5:3c:74:87:75:6e:
                    c2:24:1c:b8:c9:02:f2:c6:e1:d5:6d:3f:0c:16:18:
                    7c:4e:b9:b8:25:10:9e:93:ee:a0:6d:0c:6a:b7:fa:
                    c9:cb:90:34:87:0b:07:cc:d2:30:43:bc:5a:3a:4e:
                    22:9a:0c:00:a8:40:6b:82:e4:da:ed:ed:fd:c8:e0:
                    67:4e:15:27:a1:9a:4c:ea:a9:0a:1d:fe:0d:d9:9c:
                    4f:5c:0d:96:b1:67:2e:f0:8b:e4:5b:c9:bd:81:fa:
                    19:88:56:25:a6:33:9a:3c:16:6e:37:ee:40:e4:87:
                    23:f2:43:81:af:d2:b8:8a:49:26:a5:07:3f:69:7e:
                    1c:b2:3f:ab:a1:fd:5e:44:ae:12:b2:79:62:6a:38:
                    7b:04:42:67:c7:93:33:a5:be:42:78:22:56:ca:54:
                    31:e5:0d:e0:c3:da:01:eb:5b:a0:e1:77:66:e0:89:
                    80:c7:84:50:ff:cd:4c:8d:97:98:d3:d3:29:33:d4:
                    76:27:e1:5a:bc:d0:27:8d:0f:e4:c9:61:f9:7f:f6:
                    05:0f:00:84:29:eb:bd:0a:71:a1:07:01:cf:b6:64:
                    88:26:3f:b6:75:c1:d5:60:16:00:43:30:be:64:5f:
                    48:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:AF:17:94:5F:39:6C:C6:41:AF:B4:CF:A9:FC:2C:DD:E6:B4:81:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/a921e491-09cc-3788-809c-fb266e3431cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.180.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:4d:64:f0:3a:e8:95:a1:03:9a:d2:2f:50:be:e4:75:f9:74:
         1f:42:38:12:4c:c4:3d:e3:bb:7b:1d:57:8e:d1:9d:0d:63:a4:
         69:9f:35:fd:04:76:06:8d:0f:35:10:70:18:84:6f:06:61:62:
         c1:3e:22:1e:24:60:3f:2e:d5:66:37:bf:e1:a7:34:4d:cb:d4:
         65:e2:eb:29:cc:59:41:b9:e9:ea:7b:89:78:0c:a2:e6:50:16:
         da:ff:cf:cb:e3:a5:c6:27:cb:d1:53:26:af:ae:b1:52:95:ef:
         11:37:cb:e1:c4:fc:29:9d:a9:c7:52:03:a3:ab:6c:5b:35:71:
         67:b4:a6:c2:bd:91:77:fb:d4:bd:64:36:58:95:6e:68:18:d7:
         ec:01:f8:83:dd:b3:99:4b:c1:8d:66:20:bd:13:ef:35:07:cd:
         10:f2:08:9c:f1:a5:ff:e0:38:75:6e:2e:ed:00:af:d9:22:c6:
         ca:88:25:19:65:6a:5c:e7:a8:11:34:bd:d5:b5:6d:fd:fb:fb:
         3d:04:a6:2d:56:da:67:69:0c:ce:eb:7f:57:a8:c2:e8:9d:b5:
         56:1f:7f:de:3b:f8:3b:ea:64:6d:c8:ab:c6:ed:8a:1a:a6:a0:
         8c:5e:09:74:2a:d0:e5:90:2c:64:91:ec:ed:76:02:9d:40:6b:
         81:dd:0d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:59:16 2026 by rpki-client