Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/b51042c4-fb3c-3517-8dff-e5dc6fb11a8a.roa
File:                     b51042c4-fb3c-3517-8dff-e5dc6fb11a8a.roa (raw, json)
Hash identifier:          XCLJI8bZyfjV0BEeh2W/QmxVmG3s4529rzT45KU0Mjg=
Subject key identifier:   52:D9:D2:64:0A:79:FE:3E:67:B7:F6:30:5E:62:FE:2D:90:AE:B1:DC
Certificate issuer:       /CN=22d4b872-8325-44d1-958d-897bd254f68b
Certificate serial:       010D0C9F4328584D3DFFB53D00449CAEDCDC04C0
Authority key identifier: A1:EB:27:37:68:9F:C8:9B:9E:E2:30:E3:C8:05:C7:E2:EE:8D:8E:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/b51042c4-fb3c-3517-8dff-e5dc6fb11a8a.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     7018
IP address blocks:        206.251.194.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/22d4b872-8325-44d1-958d-897bd254f68b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/22d4b872-8325-44d1-958d-897bd254f68b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:b5:3d:00:44:9c:ae:dc:dc:04:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d4b872-8325-44d1-958d-897bd254f68b
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=102565af-b6c1-4696-a9cd-a74e5dd0d5ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:30:71:65:c7:5a:06:90:88:6f:34:c1:8e:31:
                    12:b8:1b:d3:7d:6f:9e:7b:57:48:a4:00:f4:83:04:
                    cc:c0:ca:20:d7:4a:47:19:fd:f5:41:3a:6b:93:1b:
                    38:62:e4:a5:93:8d:9b:c0:a3:40:84:5e:08:14:96:
                    84:e7:e7:c0:30:6c:eb:d6:a9:75:17:1d:d8:2d:bf:
                    b0:b9:26:64:73:a3:d2:1d:f6:b1:30:30:ee:9c:41:
                    3d:c5:03:39:96:98:3b:c9:f3:9c:68:25:73:fa:e5:
                    15:75:2e:f2:e1:37:d7:6e:db:1a:03:ce:2e:00:26:
                    29:95:23:9a:cc:71:db:51:2c:41:b6:31:ef:dc:2f:
                    9f:6b:75:5e:5b:5d:67:49:be:75:09:f1:ab:a5:19:
                    0c:0d:b3:c6:10:25:96:6c:06:cd:a3:88:dc:96:58:
                    69:02:5c:e1:86:8b:f6:91:1d:53:c4:14:01:79:de:
                    d7:f8:7f:4f:b4:93:37:13:e8:28:fb:c2:1d:3a:c5:
                    d3:9f:aa:10:f4:3f:28:a2:75:bc:ca:26:f5:8d:f6:
                    8b:89:f3:07:4c:56:ac:fd:b1:65:34:0b:41:a6:28:
                    37:85:62:a1:32:98:f3:5d:67:f5:03:5a:60:98:02:
                    a2:fd:b6:14:49:c0:02:d1:5c:b5:bb:80:a3:25:bf:
                    88:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D9:D2:64:0A:79:FE:3E:67:B7:F6:30:5E:62:FE:2D:90:AE:B1:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/b51042c4-fb3c-3517-8dff-e5dc6fb11a8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/22d4b872-8325-44d1-958d-897bd254f68b.crl

            X509v3 Authority Key Identifier:
                keyid:A1:EB:27:37:68:9F:C8:9B:9E:E2:30:E3:C8:05:C7:E2:EE:8D:8E:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.251.194.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:ca:8f:6d:e9:b0:50:af:db:b1:2b:78:f2:2e:f1:45:0a:93:
         60:22:4e:2c:d6:a0:23:c4:7b:11:0c:2b:d9:92:03:9b:6f:b3:
         19:b9:33:0c:b2:cc:f4:53:5a:81:18:6a:cd:25:7b:de:b2:d1:
         03:d2:a8:13:f4:5b:ff:e0:54:c3:ba:ca:40:da:64:c8:55:83:
         fa:7a:45:1e:be:a5:68:4d:66:08:5c:fa:27:8c:a3:46:64:1d:
         22:84:5a:4a:9c:75:27:37:49:b5:3b:c0:e4:d1:72:2c:6c:c4:
         1d:7b:04:14:76:7f:36:4b:5d:e4:02:00:74:48:e9:30:9e:9e:
         41:2d:9b:21:64:49:db:9f:1c:e3:75:73:36:be:00:f3:e7:0f:
         32:90:32:c7:97:d9:6b:95:b7:ab:b4:6c:9c:e0:4a:1b:35:71:
         db:62:4b:65:b3:64:a7:65:df:39:7f:cc:78:60:ff:e7:e8:21:
         bc:06:51:08:9f:fa:c0:b6:c5:c9:e4:83:8e:04:c0:8c:91:34:
         5f:77:7a:a3:85:23:cb:b5:20:15:fc:18:aa:b9:52:c5:f0:41:
         9d:03:16:02:9f:b3:51:af:91:5f:ad:88:8a:64:43:97:63:13:
         c8:f6:c7:c0:62:5b:79:c0:fc:9b:da:2e:9b:f5:6a:a6:d0:21:
         80:b7:eb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:26:01 2026 by rpki-client