Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/56a7c5e6-c7d2-3f3d-afc8-4d8279d80de8.roa
File:                     56a7c5e6-c7d2-3f3d-afc8-4d8279d80de8.roa (raw, json)
Hash identifier:          LxHsh+9+sSSnsgHMN9QpYtkZNW+Vt0qG7Gdh/JmUquI=
Subject key identifier:   A2:C3:8E:6F:00:16:A0:B4:FD:DC:36:82:0D:72:A5:9E:E7:65:61:47
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584DC29AEDAAF88664FDC47C7784
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/56a7c5e6-c7d2-3f3d-afc8-4d8279d80de8.roa
Signing time:             Fri 08 May 2026 01:00:24 +0000
ROA not before:           Fri 08 May 2026 01:00:24 +0000
ROA not after:            Thu 06 Aug 2026 01:00:24 +0000
asID:                     393249
IP address blocks:        206.87.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c2:9a:ed:aa:f8:86:64:fd:c4:7c:77:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: May  8 01:00:24 2026 GMT
            Not After : Aug  6 01:00:24 2026 GMT
        Subject: CN=12430c48-c8d0-4b5c-95ac-f7abb91a2ea6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9b:5d:59:53:4e:f9:b1:f8:a4:44:52:8f:e8:
                    ab:42:fa:b9:a0:04:76:c0:63:d0:19:f3:88:17:fd:
                    d6:56:5b:f4:3e:f3:06:87:40:e6:ad:0e:22:7f:77:
                    58:6d:46:9b:2e:9e:01:b6:5b:05:50:e4:38:51:9f:
                    40:39:54:6c:7e:17:f0:f3:5e:8e:f1:cc:7b:3f:ea:
                    4c:62:56:55:51:56:44:f1:f0:34:44:07:7b:8f:92:
                    57:b0:3a:83:33:5e:f0:a1:00:e4:09:65:64:16:f2:
                    db:95:d6:d2:39:ca:4a:82:17:37:fe:9c:3f:87:b8:
                    bd:eb:a7:16:42:31:d2:c5:26:7d:db:43:db:f8:99:
                    05:0c:0d:b7:76:07:6e:9a:f9:7d:83:90:ad:0a:2d:
                    61:3c:2a:c2:2d:d0:d2:65:35:f3:db:40:f6:60:4b:
                    83:66:68:5c:db:fa:15:5e:92:94:9a:f4:ef:5f:e8:
                    c6:76:e9:f4:4b:6d:b0:2e:09:0b:c7:ef:82:49:8f:
                    be:be:6b:38:95:3a:95:5a:a4:04:1e:82:f4:d8:8c:
                    5a:9b:7a:00:6a:83:bc:23:ca:51:41:e5:ac:e0:e1:
                    0a:ec:3d:24:d5:f0:eb:ea:fd:56:5a:96:dd:9a:9f:
                    9b:22:47:5e:c2:b0:51:64:60:44:cd:6e:bd:0a:6d:
                    3b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:C3:8E:6F:00:16:A0:B4:FD:DC:36:82:0D:72:A5:9E:E7:65:61:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/56a7c5e6-c7d2-3f3d-afc8-4d8279d80de8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.87.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:dc:99:b9:89:fb:3e:9b:e0:5d:cc:34:be:2c:a4:3d:33:5e:
         48:03:43:dd:88:62:2f:a0:66:82:8b:45:8d:45:ea:1b:0d:c1:
         75:41:06:d7:0b:3f:09:ed:22:b8:82:aa:43:2d:a3:45:ea:1a:
         8b:1e:40:0b:59:aa:2a:27:59:94:41:66:3c:d6:8a:dd:6a:67:
         b1:61:9a:9c:0a:8b:fd:2f:9b:89:85:19:8b:dd:96:98:7e:e0:
         36:e3:e8:37:55:95:4c:36:f7:a5:38:fd:ad:05:da:b1:62:4f:
         70:01:4d:43:be:c2:fd:75:64:79:d4:4b:25:27:e6:79:54:50:
         db:bc:83:ac:12:76:61:da:65:7a:ec:56:1c:f7:ff:ac:b9:68:
         d7:9c:c2:d5:b3:5c:de:15:0f:ba:05:67:80:a5:78:80:4a:e7:
         11:4a:7f:39:7c:f4:99:c3:98:85:c5:61:dc:34:43:f3:dc:c2:
         d3:d4:36:c8:0d:7a:c3:f3:00:78:e3:ec:51:a6:9a:66:a4:6c:
         40:a7:fd:57:41:87:52:4e:bd:25:6a:52:90:df:8e:cc:0d:b4:
         53:f6:64:ef:b2:42:b0:d1:fc:8e:28:98:98:8e:34:87:91:be:
         4e:8c:90:f0:17:f5:24:bb:76:f3:cd:5f:25:a9:bb:97:c0:35:
         cb:99:e1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:15:46 2026 by rpki-client