Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f/0f423575-11f9-3728-ae9b-8c70332062e1.roa
File:                     0f423575-11f9-3728-ae9b-8c70332062e1.roa (raw, json)
Hash identifier:          us6NaKqi+GCFqpVQpwJ7XPLgrAuUxR/J6eyROIfu6UY=
Subject key identifier:   D5:77:1A:23:DD:9A:BE:37:9E:2B:DB:C2:17:1C:AD:59:43:43:9B:1B
Certificate issuer:       /CN=dcf7f6fb-0bae-4c21-bcf2-2f998541db3f
Certificate serial:       010D0C9F4328584E7BCA2D72882DB0030698A700
Authority key identifier: CC:2F:9D:6D:CC:B6:1C:CE:1E:E3:50:39:63:91:EA:63:D1:8F:B8:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f/0f423575-11f9-3728-ae9b-8c70332062e1.roa
Signing time:             Mon 13 Jul 2026 09:00:12 +0000
ROA not before:           Mon 13 Jul 2026 09:00:12 +0000
ROA not after:            Sun 11 Oct 2026 09:00:12 +0000
asID:                     400701
IP address blocks:        206.168.140.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7b:ca:2d:72:88:2d:b0:03:06:98:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf7f6fb-0bae-4c21-bcf2-2f998541db3f
        Validity
            Not Before: Jul 13 09:00:12 2026 GMT
            Not After : Oct 11 09:00:12 2026 GMT
        Subject: CN=c4080ea4-3c2c-4f00-b102-2f55d839e0fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6a:2e:30:34:6b:b4:b5:ec:cf:42:09:2d:6c:
                    06:01:b6:91:2d:da:3c:64:db:20:6b:ea:df:ce:f4:
                    1d:1a:20:31:a4:e9:82:99:6b:ab:48:82:8e:29:14:
                    63:64:48:52:a3:0d:cf:1e:c5:2a:5a:df:df:c1:41:
                    76:77:46:b9:15:f1:86:7e:c9:35:e4:d7:60:4c:31:
                    28:2d:38:ad:54:bc:28:21:44:cd:10:14:36:19:46:
                    4e:2f:c4:26:9e:bb:68:8f:ad:18:40:4c:bc:94:87:
                    24:4f:70:7f:01:7c:73:83:a4:4f:7e:74:0f:25:4a:
                    d1:c2:38:2a:0d:52:f6:33:19:88:20:8c:d9:17:a8:
                    cc:ad:dc:e6:68:02:4e:29:c6:5b:e4:0a:f9:6b:ae:
                    a8:5f:29:8a:16:4d:b1:00:ec:d7:48:ef:31:71:01:
                    4b:b7:cb:bf:a4:f1:f2:d8:a8:23:99:67:4b:89:1f:
                    0b:3b:e2:e3:97:47:66:20:79:db:ff:f3:87:a5:70:
                    05:54:05:ff:4c:8e:84:da:08:d0:1a:f2:48:aa:ef:
                    93:1b:ba:a8:51:26:05:fb:58:68:69:9d:a2:8a:bc:
                    64:36:b8:d3:11:b0:a5:6a:77:2e:94:0b:53:94:ba:
                    a2:cf:a4:c1:57:4e:06:b3:d0:f7:fc:b3:12:62:29:
                    15:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:77:1A:23:DD:9A:BE:37:9E:2B:DB:C2:17:1C:AD:59:43:43:9B:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f/0f423575-11f9-3728-ae9b-8c70332062e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f.crl

            X509v3 Authority Key Identifier:
                keyid:CC:2F:9D:6D:CC:B6:1C:CE:1E:E3:50:39:63:91:EA:63:D1:8F:B8:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.140.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:75:06:18:cc:3c:f6:f6:e3:3a:f1:ff:df:10:c5:2d:e4:a3:
         87:bb:e9:07:2d:aa:03:e0:d6:3c:92:ed:4b:96:9c:fa:b7:d3:
         01:2a:56:59:37:a3:eb:d5:03:00:f1:d3:52:27:b9:5b:45:66:
         af:84:99:bd:0b:f2:0b:a7:86:56:83:d8:9d:e3:0f:24:30:35:
         72:61:e9:03:02:96:c0:5b:4d:fe:16:6b:19:1b:b1:b0:f6:2b:
         90:74:c6:9c:a5:b1:e0:84:ab:d0:35:32:08:06:16:0f:5b:ed:
         95:e1:fb:15:c8:2b:94:32:30:94:aa:15:ae:d6:e0:c7:b2:ab:
         13:32:4d:a3:27:dc:2e:47:d8:fb:2f:d5:27:0d:ca:dd:7e:db:
         c6:09:7a:e9:c7:ef:77:53:b5:f7:02:70:9f:67:7c:38:ca:a0:
         78:77:c4:c7:b9:8c:d9:35:12:e1:bb:84:12:e3:d9:da:79:c0:
         6b:08:dd:28:00:5e:24:48:14:b0:c4:8a:d8:7b:8a:06:3a:0b:
         1f:f3:0d:df:8c:f9:b7:3f:7d:9e:c6:7c:d6:35:f3:a1:57:52:
         50:27:d2:c9:78:0d:62:a1:90:eb:24:5f:ba:41:f8:a0:7f:b4:
         d3:17:9b:2e:63:3b:65:9e:42:7d:e6:17:4c:d3:6e:c6:27:7b:
         99:26:1e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:05:23 2026 by rpki-client