Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/cf4e6afc-2ae5-31ba-b7de-b4aabbd3a06f.roa
File:                     cf4e6afc-2ae5-31ba-b7de-b4aabbd3a06f.roa (raw, json)
Hash identifier:          1KqKMIk2OVaT7+iFf5/Z7csf/zyaBCui7a3HxYniu+U=
Subject key identifier:   D6:7F:DC:29:79:0B:8B:50:5D:3E:2B:C2:B0:B0:E4:24:98:4D:96:B3
Certificate issuer:       /CN=226a13a2-fbfb-49ed-89c3-233c745ffa52
Certificate serial:       010D0C9F4328584E6DD4D76C65CEAC480C4D5A80
Authority key identifier: 37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/cf4e6afc-2ae5-31ba-b7de-b4aabbd3a06f.roa
Signing time:             Wed 08 Jul 2026 09:00:12 +0000
ROA not before:           Wed 08 Jul 2026 09:00:12 +0000
ROA not after:            Tue 06 Oct 2026 09:00:12 +0000
asID:                     834
IP address blocks:        206.162.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6d:d4:d7:6c:65:ce:ac:48:0c:4d:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226a13a2-fbfb-49ed-89c3-233c745ffa52
        Validity
            Not Before: Jul  8 09:00:12 2026 GMT
            Not After : Oct  6 09:00:12 2026 GMT
        Subject: CN=2b6ca079-2dbd-4892-8890-e904a055bca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e1:0c:20:4b:ce:e8:5b:d8:1f:46:8f:c9:aa:
                    c1:be:0e:f1:b8:90:1a:36:5d:08:14:29:b7:86:6f:
                    f3:83:c0:04:6f:d5:fe:1c:d3:8e:ec:55:1a:ae:1f:
                    44:43:22:b4:32:62:be:44:68:0f:48:0a:d0:42:be:
                    1e:4d:95:5c:50:0f:a3:47:c3:61:71:1b:aa:1b:6a:
                    9e:5a:d5:a7:2d:9a:59:23:2f:d8:74:90:02:e1:eb:
                    a6:32:a0:97:7d:eb:ff:2c:6e:40:7d:08:20:65:16:
                    81:e9:4a:10:ab:bc:e0:ce:f3:de:f5:bc:97:5c:28:
                    de:c0:b2:f9:8d:f7:71:2d:3f:f8:46:7d:31:c2:8f:
                    e6:41:cb:71:16:a0:6f:e6:45:42:4d:52:0f:c9:80:
                    b5:e9:67:33:3a:21:43:01:cf:8a:0b:8e:39:15:e1:
                    00:cb:1b:c6:49:c5:8c:ab:15:f0:ec:58:bc:57:e8:
                    ad:27:95:60:66:0b:ef:e4:4d:49:15:2d:9e:10:97:
                    62:8b:96:4e:b2:a4:05:02:1b:23:5d:fc:17:81:80:
                    28:c2:8e:03:4f:16:11:bc:7b:65:2f:e2:10:44:08:
                    49:88:86:f9:65:1e:5f:90:17:01:b2:e5:c7:65:a8:
                    49:e6:cc:c3:50:7b:68:75:16:f9:9a:79:51:ae:2a:
                    00:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:7F:DC:29:79:0B:8B:50:5D:3E:2B:C2:B0:B0:E4:24:98:4D:96:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/cf4e6afc-2ae5-31ba-b7de-b4aabbd3a06f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.crl

            X509v3 Authority Key Identifier:
                keyid:37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.162.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:88:42:19:45:4c:60:04:fa:04:cb:d4:69:86:76:02:a8:d3:
         43:fc:4e:42:e9:9f:eb:52:07:67:16:d3:b9:0b:07:51:e8:9f:
         0d:ad:c4:72:92:fe:29:dc:15:7a:b6:56:92:27:a1:55:0d:7c:
         6b:6b:6c:43:6c:d3:28:a2:60:61:bc:d7:5f:84:cb:ec:46:58:
         a2:0e:9c:90:1a:1f:2a:21:b5:e9:8d:f3:01:10:18:b7:97:5a:
         46:26:e6:3d:09:2e:47:e0:d3:20:1b:44:6e:5a:61:0d:9b:ef:
         4e:fc:08:4c:d3:64:02:01:d6:45:29:f1:af:a5:d2:e2:fd:c0:
         8c:22:44:6b:1c:b4:fa:17:82:91:34:8c:03:17:e0:3c:78:ee:
         58:23:e8:ab:ff:80:1b:ad:d7:5b:4c:e6:71:e2:79:60:8c:03:
         5d:88:52:b8:41:48:69:2a:a3:16:d0:98:e4:6a:ab:2d:e3:8d:
         0c:b3:40:03:7c:32:fa:ba:de:da:f8:bf:11:9b:4c:88:c6:cc:
         c4:3f:67:9a:2d:47:a1:ec:71:76:be:77:73:5f:59:86:d5:9d:
         21:a9:21:2b:04:e9:db:2b:ed:b1:49:28:c8:db:74:35:0d:b6:
         ec:46:a6:90:76:cd:02:dc:8c:15:8b:bf:91:da:a8:53:91:55:
         12:7f:be:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:13:13 2026 by rpki-client