Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/debf15ce-d5dd-37c4-9aa6-a5fd30d2ae2b.roa
File:                     debf15ce-d5dd-37c4-9aa6-a5fd30d2ae2b.roa (raw, json)
Hash identifier:          VFjsJkswTRyF2QAwkoYcwdR4b+Zwjyq/HvoqdDuecb8=
Subject key identifier:   04:57:55:FE:49:6A:D8:9F:9F:0B:E8:1C:68:50:2C:99:40:05:E1:A6
Certificate issuer:       /CN=109733f6-670d-4e02-a6e2-403ebf727263
Certificate serial:       010D0C9F4328584EF7176C3F455E55B89EBD2600
Authority key identifier: E9:5C:E4:04:D3:8F:E8:AD:35:EE:F9:60:53:56:92:9D:0E:C1:79:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/debf15ce-d5dd-37c4-9aa6-a5fd30d2ae2b.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     13494
IP address blocks:        206.220.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/109733f6-670d-4e02-a6e2-403ebf727263.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/109733f6-670d-4e02-a6e2-403ebf727263.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:6c:3f:45:5e:55:b8:9e:bd:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=109733f6-670d-4e02-a6e2-403ebf727263
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=cad98113-fdb5-4406-8d90-7acfdabaf6ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:21:5b:1e:6f:ec:9c:b5:fe:f1:1a:02:ae:85:
                    d5:6d:9e:aa:83:5d:33:91:13:d2:d1:e2:dc:27:33:
                    08:0c:dc:25:5a:19:37:2b:00:26:68:65:e6:83:82:
                    95:83:36:5d:50:97:ff:7d:b4:88:fe:91:c4:e6:5f:
                    61:2f:a5:90:05:fc:68:4a:b5:4a:5a:b9:a3:4b:08:
                    4c:8d:76:93:ee:a0:a5:ce:0e:1c:f0:0a:e8:eb:02:
                    ef:59:9e:b6:7b:01:03:d0:d0:36:e1:3c:e7:ff:96:
                    71:6e:0f:ab:e1:36:d9:18:e0:cb:2d:ce:d3:51:6d:
                    9e:9f:78:0d:0f:18:84:28:73:d8:0c:2c:87:55:e6:
                    d1:77:bf:66:23:ff:ee:2c:66:a9:b1:4a:fc:85:a8:
                    75:6f:da:d5:d6:c2:f5:c0:f4:f5:81:41:05:57:26:
                    b9:72:32:cb:d4:33:5c:41:f9:d4:e9:e6:57:ef:84:
                    07:77:04:4d:37:c7:0f:82:84:1b:f6:27:8d:e6:82:
                    e2:e2:72:ea:ce:e1:a4:bc:5e:04:ab:2b:d1:be:56:
                    20:22:f9:35:e8:68:19:74:98:cb:7b:e6:82:e4:be:
                    ec:01:6d:10:69:3c:c5:2f:d5:8b:3b:18:e4:5e:2c:
                    42:7f:27:aa:fc:3e:0d:9c:d5:c4:20:d4:8a:ed:a3:
                    fd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:57:55:FE:49:6A:D8:9F:9F:0B:E8:1C:68:50:2C:99:40:05:E1:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/debf15ce-d5dd-37c4-9aa6-a5fd30d2ae2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/109733f6-670d-4e02-a6e2-403ebf727263.crl

            X509v3 Authority Key Identifier:
                keyid:E9:5C:E4:04:D3:8F:E8:AD:35:EE:F9:60:53:56:92:9D:0E:C1:79:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.220.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:f3:ae:63:85:77:88:34:33:98:ab:79:35:8e:0e:54:5c:33:
         08:01:9b:c5:6e:8b:dc:90:66:d5:83:d8:6b:d1:60:2a:0f:89:
         0a:9b:2b:8a:45:20:eb:88:20:9f:71:a7:97:3e:9a:1e:37:ad:
         3d:f4:f5:c3:ec:30:d4:d0:62:7c:0c:84:11:fc:88:38:5c:b9:
         37:2b:bb:39:14:fd:7d:38:56:c1:19:12:50:68:fb:e3:62:2b:
         63:ed:12:b6:81:cd:b5:b3:fb:63:02:8e:52:e3:ed:ec:f2:51:
         4a:4d:67:58:f9:5c:a1:de:97:c5:d5:15:0e:4a:a1:f8:54:16:
         54:0f:3a:84:59:f5:63:16:fa:1d:b4:02:26:6f:09:e8:3b:4b:
         4b:29:80:93:42:60:2f:da:27:76:00:0b:06:e9:c6:c4:08:ab:
         4f:11:60:dc:eb:85:e4:6c:f0:6c:ec:2f:8d:15:b0:5d:0d:73:
         be:be:78:ca:7e:24:f7:e5:45:6e:ae:b5:bb:1f:c5:0c:a2:89:
         c9:b2:4c:52:17:be:df:bf:66:b5:c2:dc:c0:0f:95:56:60:a8:
         41:7e:30:31:23:0e:9f:96:e9:93:49:83:9a:f9:27:af:0b:b0:
         60:a6:df:d7:c7:42:bb:c9:4d:44:75:f0:28:19:63:ca:29:4c:
         ad:a7:b6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:30:34 2026 by rpki-client