Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11/21ccbbc6-e3e3-3be8-bdac-050a5c428c12.roa
File:                     21ccbbc6-e3e3-3be8-bdac-050a5c428c12.roa (raw, json)
Hash identifier:          4KeAhhYV/y94rpH6flV2qIVn14pBt52Ez6+W880nUdo=
Subject key identifier:   C2:68:23:9A:3C:F2:39:F1:AD:A6:FF:0F:C8:F1:33:2B:6C:56:FC:A8
Certificate issuer:       /CN=cf35609e-0e1f-484a-af8f-815006d97f11
Certificate serial:       010D0C9F4328584EDC91EE4856C0F40BBFD23080
Authority key identifier: CE:9A:08:7C:21:06:9C:08:3D:C6:79:BA:DB:B2:28:34:71:1B:2F:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11/21ccbbc6-e3e3-3be8-bdac-050a5c428c12.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     14694
IP address blocks:        206.81.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11/cf35609e-0e1f-484a-af8f-815006d97f11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11/cf35609e-0e1f-484a-af8f-815006d97f11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:91:ee:48:56:c0:f4:0b:bf:d2:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf35609e-0e1f-484a-af8f-815006d97f11
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=eaaba5f3-9653-4398-ad59-75124614531c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:07:94:d5:93:33:96:be:4f:73:a3:7a:17:fc:
                    d5:9d:e7:7b:55:65:79:2b:97:35:ea:d1:51:9e:f3:
                    f0:f8:a1:66:d5:4d:4e:52:d4:18:99:3d:d9:4f:24:
                    b2:aa:92:14:94:d2:f0:de:75:89:4e:8c:f4:3c:9f:
                    6b:5b:5d:bd:99:3e:b0:3a:7d:50:69:c8:ca:ba:41:
                    d2:66:4c:ba:0a:1b:e7:48:00:f3:2a:60:90:98:c1:
                    3e:43:5a:b9:5d:96:bf:b9:a3:c7:54:5d:0b:1e:65:
                    22:7f:1e:15:5b:ac:c2:12:d4:4d:d5:63:9e:58:c6:
                    c2:b6:d3:1d:b4:87:3e:2c:d4:5a:17:03:9a:ab:da:
                    8f:22:5f:db:ab:f5:9d:ac:3e:ad:54:fe:29:13:f7:
                    9b:61:77:b7:4f:be:89:82:e0:de:b2:b6:cd:55:ea:
                    6e:a1:08:bb:52:88:4c:f3:d9:e2:21:07:5a:fe:3f:
                    c9:07:14:12:a9:0f:68:c5:cf:ac:21:0f:b6:5d:72:
                    89:e5:d6:61:c7:5e:ca:35:10:16:97:65:62:b9:05:
                    f7:93:45:06:a2:f4:f6:85:78:07:86:13:4a:7a:c1:
                    6e:67:8d:7f:1d:fd:79:43:c2:5a:8d:10:ab:9f:57:
                    fe:b6:cf:a1:29:d7:78:5e:2a:7e:a9:99:2b:e8:ca:
                    2f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:68:23:9A:3C:F2:39:F1:AD:A6:FF:0F:C8:F1:33:2B:6C:56:FC:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11/21ccbbc6-e3e3-3be8-bdac-050a5c428c12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11/cf35609e-0e1f-484a-af8f-815006d97f11.crl

            X509v3 Authority Key Identifier:
                keyid:CE:9A:08:7C:21:06:9C:08:3D:C6:79:BA:DB:B2:28:34:71:1B:2F:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.81.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:80:f4:21:1a:cc:1b:bb:86:49:44:92:3b:96:bd:03:f1:60:
         6c:43:e4:3c:01:00:4b:c4:05:9a:14:25:55:2e:16:59:b9:8b:
         28:ab:82:59:56:6d:6b:a5:4f:62:eb:6c:9f:32:9a:55:d3:35:
         61:2c:f9:e9:77:90:d8:c0:c9:ee:51:1e:01:b7:3d:97:63:ea:
         31:9a:b7:3e:c4:50:97:e2:69:ad:51:75:cc:97:b6:01:71:d2:
         13:86:5f:50:2d:2e:c2:c0:4f:3c:46:c0:8c:f7:0a:28:18:ae:
         4d:fa:36:7e:f5:db:8b:4a:37:e7:f7:d1:20:00:e5:5b:c8:5e:
         3b:a0:e1:43:c3:f3:ec:37:49:74:25:90:15:50:ca:1a:dd:6c:
         b4:c9:e3:66:2a:c8:01:90:c5:64:04:4e:cd:da:dc:84:4f:cb:
         29:bf:54:63:92:df:7c:c0:9e:59:0e:b2:92:5d:c1:76:37:5b:
         2e:eb:83:3f:49:4b:e3:8b:d6:38:22:85:08:8d:72:14:c4:a4:
         47:d3:0a:6e:d7:3b:0f:9a:10:9f:e2:87:93:68:d4:b8:6f:d3:
         d2:03:40:6d:e9:af:58:5e:2d:da:2a:cc:4b:64:cc:f6:a8:38:
         93:de:d7:ce:94:0a:75:d0:eb:ee:d1:08:84:0a:b6:3b:7b:53:
         3b:e2:de:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:37:23 2026 by rpki-client