Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/037ec282-bdd2-3ab5-a8c8-ad2f8e7e7ad0.roa
File:                     037ec282-bdd2-3ab5-a8c8-ad2f8e7e7ad0.roa (raw, json)
Hash identifier:          qGImy2Pgf/4noywCRdjgImMpUfWwWAZUkxBzken3F/8=
Subject key identifier:   F2:48:DC:3C:C3:1D:B6:10:5E:06:3F:30:33:1D:1B:F2:54:6C:DF:3D
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E376487CF2767041D99453C00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/037ec282-bdd2-3ab5-a8c8-ad2f8e7e7ad0.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     273170
IP address blocks:        206.85.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:87:cf:27:67:04:1d:99:45:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=3b1931c0-b822-4e49-b0bd-4922f06b3ea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:84:31:57:e7:6a:43:8c:74:69:fb:4b:07:3f:
                    f5:8a:4b:c6:35:25:95:51:cf:c4:bd:8c:bc:35:a8:
                    43:0b:f0:e4:af:52:35:9a:a1:1f:8b:f3:f2:a8:76:
                    03:3c:a2:8f:5e:03:62:cd:ef:ad:30:9e:2d:12:92:
                    d0:4a:05:b9:b7:82:f7:e9:df:60:a0:8c:bc:8b:0c:
                    1b:61:80:45:39:d7:c7:b0:06:ed:d7:ff:f1:ba:e9:
                    0c:2f:9e:e2:5e:a1:ad:cf:84:c7:7e:c9:c8:f7:24:
                    a7:40:a0:c3:a7:df:34:ac:20:64:ce:63:ae:56:4a:
                    d3:56:fb:90:02:32:bb:ee:ce:3c:8a:d6:60:7b:ef:
                    bb:d5:04:fb:69:13:1f:7b:10:1d:5a:fb:fe:db:d9:
                    05:e5:41:eb:dd:5b:4a:f7:8e:0d:69:ea:df:1b:d2:
                    1d:ae:30:17:68:bb:40:6e:6c:93:cc:af:a3:3a:81:
                    19:71:17:d6:ac:7c:0c:b8:63:ab:1c:88:f4:2b:43:
                    1b:c9:99:3e:43:29:ca:13:76:3b:ce:ba:18:2b:75:
                    18:dd:a9:94:2b:74:66:c5:08:56:b6:02:c8:11:b9:
                    ad:5f:db:c1:10:b6:85:a2:eb:34:8c:f2:ae:39:7f:
                    bb:36:6e:0c:3b:2c:17:fa:3d:51:26:6d:04:4e:0c:
                    bd:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:48:DC:3C:C3:1D:B6:10:5E:06:3F:30:33:1D:1B:F2:54:6C:DF:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/037ec282-bdd2-3ab5-a8c8-ad2f8e7e7ad0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.85.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:60:d7:d2:33:b9:16:1c:7a:d7:10:18:ad:fa:bd:61:de:13:
         f5:73:1b:a9:41:7e:55:17:c8:0f:6b:31:09:f7:36:a7:1e:64:
         bf:37:42:fe:8b:2e:81:cb:94:42:4d:04:e5:df:28:a1:bc:0b:
         9e:e8:45:0b:8d:92:b4:66:40:ab:8f:47:54:dc:f2:37:85:c0:
         18:3e:10:c5:ff:41:fe:e1:d4:05:9b:b6:16:de:be:b6:00:dd:
         2e:47:77:0b:fe:f2:ab:af:2e:7d:01:44:41:a5:c7:8a:37:b8:
         c3:b7:87:b9:d1:61:76:c0:2c:ce:91:34:02:d3:60:a0:1a:ab:
         4f:7e:1e:59:0b:64:17:a4:8f:72:7d:c8:3b:19:9b:b0:40:7d:
         6b:27:94:dc:6a:ef:cc:17:ec:1a:8c:83:27:a9:06:5a:fb:67:
         b8:a3:a4:d8:dd:55:cf:61:f8:93:28:a0:97:28:02:b4:0c:71:
         30:90:e4:52:73:78:89:12:d9:27:46:67:88:5a:ca:a4:7c:60:
         56:23:ab:39:47:f6:b8:d9:02:1c:7f:00:14:98:32:6a:b2:85:
         be:d3:23:7c:9b:a6:9a:7b:c0:1d:5e:8c:48:c4:39:08:08:b9:
         74:00:b1:87:a5:52:81:98:52:91:45:01:08:e2:a1:ab:91:eb:
         52:49:0b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:19:46 2026 by rpki-client