Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6ac4c133-e191-3432-811d-3cbebd06e3db.roa
File:                     6ac4c133-e191-3432-811d-3cbebd06e3db.roa (raw, json)
Hash identifier:          Gp5SpISAfDGXt7W4JT1uUdhWwu7weINm5c8sg7NI4SE=
Subject key identifier:   D9:5C:B8:A4:75:31:D0:92:77:AF:1F:ED:AB:E7:40:A8:22:48:35:83
Certificate issuer:       /CN=6eb3f683-5247-4c55-a10b-2184f26c4f84
Certificate serial:       010D0C9F4328584F06722DD1C51801E2AA30EC80
Authority key identifier: 67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6ac4c133-e191-3432-811d-3cbebd06e3db.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     36445
IP address blocks:        208.81.206.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:2d:d1:c5:18:01:e2:aa:30:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eb3f683-5247-4c55-a10b-2184f26c4f84
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=498edfc4-6e21-4663-90b6-e5b782698f9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:09:65:24:18:4a:79:d4:01:48:03:b5:27:69:
                    a5:89:89:24:bd:f9:ef:9a:bc:1b:38:d5:27:da:1e:
                    ed:82:d6:db:d6:0b:5e:e7:34:10:fa:65:29:75:8a:
                    0d:4c:78:4a:77:d6:01:76:e7:99:e8:10:8e:ee:ae:
                    21:76:28:23:e6:99:6b:da:26:aa:29:19:89:f6:9e:
                    0a:40:64:12:58:a0:fc:0d:f5:ff:34:7b:be:82:5f:
                    27:96:4c:79:8e:bd:9c:24:27:ad:da:15:86:84:b6:
                    68:0a:e9:91:36:54:77:f2:00:30:28:8d:ec:7a:d5:
                    b0:c7:c4:92:3f:74:c3:c1:2d:56:32:29:af:d9:44:
                    ed:2d:6a:03:ca:e9:db:26:20:9c:ee:85:8e:ad:1a:
                    c8:3e:2d:ad:26:45:57:78:25:cd:b3:84:84:df:c1:
                    7a:d5:11:e0:54:98:0a:21:3f:a7:1e:bc:9c:19:46:
                    cf:50:2a:2e:73:35:10:61:1a:d2:a9:02:95:ab:1a:
                    c5:45:33:fd:98:c3:79:e3:d7:d0:57:55:82:3c:76:
                    52:c5:3a:19:f9:58:0b:5f:7b:82:62:80:33:c2:f2:
                    8d:85:3d:c8:a5:98:ca:9d:34:0f:75:b2:e8:8b:a9:
                    14:ae:ce:28:26:fe:ed:b9:de:a7:5d:3d:75:00:42:
                    02:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:5C:B8:A4:75:31:D0:92:77:AF:1F:ED:AB:E7:40:A8:22:48:35:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6ac4c133-e191-3432-811d-3cbebd06e3db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl

            X509v3 Authority Key Identifier:
                keyid:67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.81.206.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:a6:ad:37:8c:53:66:e3:62:88:96:35:15:5d:3c:03:2f:1d:
         f3:b9:f0:ed:ee:bb:3d:ac:be:1f:6e:f7:03:44:37:b9:c3:95:
         45:7c:3c:ec:e3:63:d9:62:21:53:7e:ab:ca:58:9d:77:00:5c:
         94:91:78:ab:c7:00:e0:12:99:b6:0a:76:f8:05:46:1e:10:e0:
         bb:fb:58:01:ab:37:5d:f7:24:a0:db:c4:6c:3d:3f:f4:22:76:
         60:9f:4e:17:ae:e1:97:fd:1d:6f:3c:a6:f0:00:1c:71:76:ac:
         25:c6:db:66:46:aa:8e:87:0f:04:f4:c4:f0:15:2f:f4:43:55:
         4a:6c:2e:0e:bb:73:5c:64:b4:fa:32:f0:05:e3:72:d8:02:ea:
         eb:ac:83:7a:b3:96:66:0e:b8:5d:b3:5d:27:e2:88:29:60:13:
         6d:45:15:c1:c9:4d:d7:ff:d9:38:55:de:c0:b6:e7:41:c7:05:
         9c:83:5a:8e:af:e7:9d:af:d8:86:54:f4:1a:fd:20:95:eb:1e:
         fa:85:1b:a6:36:18:00:c6:7b:9f:19:cb:a5:75:fa:48:63:95:
         50:cc:91:32:80:0a:9a:63:c6:6f:a4:7e:08:30:1b:0f:f8:3b:
         91:87:a5:78:98:20:0a:77:a5:6d:1a:cd:15:03:7f:6c:cd:d8:
         79:db:e0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:42:26 2026 by rpki-client