Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/313136e8-e459-33b5-9e2f-d24a15f5902c.roa
File:                     313136e8-e459-33b5-9e2f-d24a15f5902c.roa (raw, json)
Hash identifier:          70n09zj/bXyV0Nu8Nz532mZe8DzBkuxF4BtpEfwKmD8=
Subject key identifier:   43:A4:EA:C2:58:60:6C:57:5B:74:C9:D8:33:BB:06:67:E2:F7:9C:C3
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F4C3DE51086DC85BE623B9980
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/313136e8-e459-33b5-9e2f-d24a15f5902c.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     267470
IP address blocks:        206.62.114.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:e5:10:86:dc:85:be:62:3b:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=a2f25c20-b591-406d-8916-f13e9439e483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a2:8a:99:70:69:70:04:1b:27:db:fc:2f:29:
                    2a:61:5a:ff:44:1d:8b:9a:ac:5f:85:60:c7:f7:e1:
                    b0:e4:c0:6d:cb:76:e2:b0:6b:74:f6:87:ef:b2:54:
                    2b:45:03:a4:cf:67:e4:de:f0:6b:cf:6d:4b:f5:31:
                    2a:86:63:27:1b:33:99:b2:ed:10:8a:c4:fe:a9:a6:
                    05:e0:23:3b:56:ce:bc:90:f4:d8:58:61:de:ee:93:
                    ab:fa:fb:15:4a:a6:5c:30:90:2e:2d:76:2a:e3:41:
                    8f:c5:06:d4:00:b9:f6:16:3d:66:3b:ef:e0:4e:af:
                    0a:af:19:ab:6e:d6:f0:06:73:9c:4b:23:cb:b7:01:
                    2d:75:0e:ba:5b:90:d8:e3:04:c8:b8:d5:0a:69:de:
                    6c:4a:23:12:47:60:1b:b3:19:64:85:8f:3e:34:c1:
                    07:8c:d0:00:16:80:fa:7c:15:85:7c:1a:43:d9:a9:
                    2c:b7:1e:4d:68:6a:b2:da:64:75:7f:db:ff:3e:38:
                    b8:b1:df:93:ee:c3:84:45:f4:86:10:a5:d7:63:f7:
                    e0:94:02:0e:2f:b8:03:e8:34:0c:2b:f0:ae:e3:42:
                    81:99:a8:b8:c6:a0:94:d0:b1:f7:58:b8:a3:46:dc:
                    0b:31:d5:d9:09:ed:46:5a:75:89:43:a2:fb:84:87:
                    37:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:A4:EA:C2:58:60:6C:57:5B:74:C9:D8:33:BB:06:67:E2:F7:9C:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/313136e8-e459-33b5-9e2f-d24a15f5902c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.62.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:e4:1c:68:96:99:dd:9f:31:b6:ff:b6:bb:99:d8:6c:c4:39:
         7d:b2:2f:fb:f9:7c:b4:7e:bc:75:51:f5:82:b5:4e:8f:97:c5:
         97:74:d0:2d:e1:08:43:21:92:33:22:fb:20:61:08:c9:d0:a3:
         69:a3:e1:fc:04:04:2c:45:72:a5:6c:a2:21:71:6c:7b:d1:8f:
         21:d7:d9:65:a6:71:3e:b3:bd:42:46:fe:28:bb:20:ea:4d:a7:
         34:4d:31:ef:bf:be:16:93:c8:a4:bd:89:47:f9:97:a6:09:d2:
         cc:f2:9b:dc:cb:0d:1e:82:08:b4:73:93:a6:66:4a:ad:2f:5d:
         34:aa:a1:7f:48:3d:bb:72:1b:81:b1:30:ae:62:6c:7e:98:e6:
         a3:c6:1d:75:3a:5c:62:1a:a1:83:ba:f7:a9:e3:0c:49:05:66:
         16:bd:55:65:28:ae:e4:b1:9a:40:b6:dc:43:3c:15:60:78:2d:
         de:89:c3:af:b4:7d:78:9d:86:b8:91:33:76:fd:63:68:d2:0a:
         7f:e6:95:19:c2:ce:6c:a6:f0:65:90:8d:b3:8e:fd:9f:37:23:
         b1:5c:d0:eb:fd:26:87:90:ad:c6:c5:04:5c:78:73:54:00:06:
         a7:1f:a3:3c:ba:aa:77:4c:9e:4f:db:27:16:a0:c4:b4:42:67:
         eb:f0:fa:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 19:02:54 2026 by rpki-client