Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/f8aa40e5-2040-3785-9652-fe2f3564c313.roa
File:                     f8aa40e5-2040-3785-9652-fe2f3564c313.roa (raw, json)
Hash identifier:          mhBrKcjKCXJsZo3eYz38zzEOJTqBtAujHfMkDc9FCXs=
Subject key identifier:   CF:8D:BC:C8:02:42:9E:F3:3C:70:F1:0B:E6:C9:09:C4:66:84:0E:F6
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584E6F3A486D30A56F1A002320C0
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/f8aa40e5-2040-3785-9652-fe2f3564c313.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     26744
IP address blocks:        206.180.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:48:6d:30:a5:6f:1a:00:23:20:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=bd296107-25d0-4a5b-b091-71d96651ca98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:cf:09:b1:0b:22:69:35:eb:1f:c5:01:b6:3f:
                    de:5a:d5:3f:f9:9b:56:17:17:53:3b:7d:0c:0c:8f:
                    f8:5a:db:c4:ab:b6:53:e4:ad:8d:37:20:a5:01:04:
                    de:bc:c1:fa:bf:31:f8:ec:01:78:5e:76:a1:dd:fa:
                    cc:24:f9:57:ea:5d:51:63:30:e4:e3:79:85:29:b3:
                    5c:1c:8a:5b:00:ea:ac:05:a2:d2:88:72:48:47:3a:
                    be:a2:5a:41:f5:5e:a9:31:52:3d:b1:a1:81:23:43:
                    11:d7:55:df:fa:b5:6c:09:b2:88:c8:2b:98:bd:be:
                    01:e8:fa:60:db:a4:c7:73:10:e1:52:d6:af:4a:4c:
                    2d:65:ae:f1:65:88:05:5a:02:79:6d:31:f9:91:c3:
                    62:63:de:08:37:ff:87:58:dc:2f:c2:08:f8:7a:b2:
                    e9:70:ba:3b:4a:17:d1:9f:09:d2:b0:fa:66:10:10:
                    73:ab:94:25:76:39:1f:f4:74:ad:10:88:92:25:df:
                    af:a7:fa:e7:2a:2a:fd:dd:76:ff:e3:91:d7:f3:d8:
                    6a:69:e7:12:c6:71:9b:26:45:dc:9e:fb:3e:15:71:
                    40:a1:25:d6:65:03:ca:06:72:1b:33:08:e4:8b:88:
                    2c:a8:c5:63:c3:7f:e8:c1:58:6f:3c:4e:b5:26:d6:
                    45:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:8D:BC:C8:02:42:9E:F3:3C:70:F1:0B:E6:C9:09:C4:66:84:0E:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/f8aa40e5-2040-3785-9652-fe2f3564c313.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.180.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:77:d2:81:94:ee:25:91:09:cc:28:d4:48:0a:0c:10:02:f7:
         6a:4f:55:b7:e5:28:d7:e9:95:98:ec:4a:89:7e:bc:30:91:82:
         96:9f:c5:33:70:3f:21:e6:f5:92:ee:71:07:db:57:61:b3:a8:
         46:8d:95:67:f9:ec:2a:77:f6:75:22:c4:a1:8e:04:88:2e:68:
         f5:16:43:a6:47:0d:6d:4a:60:41:a2:62:c3:de:56:ad:46:f2:
         ef:b2:1b:57:1b:00:32:4c:a2:db:0f:97:e9:bf:42:f3:20:be:
         b2:11:8f:6b:c8:11:71:af:57:f6:aa:1f:6d:f9:df:39:8c:a2:
         b1:5b:19:f1:5a:f5:4b:20:a0:08:f1:23:84:7e:a5:37:4a:09:
         81:a2:97:8d:75:73:5c:cb:01:dd:1b:81:ea:e7:cb:02:c2:c5:
         ba:03:1f:fd:12:34:70:8e:07:00:1b:2d:d6:11:48:dc:c4:75:
         3d:ca:78:4c:94:ad:f0:b6:0a:d4:47:37:0b:ce:af:79:f2:dd:
         c6:11:c0:5a:6b:ae:4a:8b:f9:cf:e7:0e:36:c0:42:cf:f2:91:
         1b:57:92:50:5e:f9:5d:61:e7:29:ab:97:69:a3:c2:de:1c:46:
         e3:69:c2:18:7f:6d:f9:34:81:54:c9:1b:f3:00:08:c3:30:5d:
         01:44:45:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:32:04 2026 by rpki-client