Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/fbed65df-d5b1-370f-8847-c8dcedb74792.roa
File:                     fbed65df-d5b1-370f-8847-c8dcedb74792.roa (raw, json)
Hash identifier:          2aqChyLlHW/zy37eylrdwhoh75as/pMJAo+5w18sjkM=
Subject key identifier:   F7:4F:71:C0:BD:03:88:B1:CD:E0:A9:38:74:61:D2:04:9F:4D:FC:70
Certificate issuer:       /CN=7c313e39-91f1-41fc-bc5c-d213a429e287
Certificate serial:       010D0C9F4328584F49766592232E34A621CE6880
Authority key identifier: 7D:97:39:68:D8:16:C7:26:14:7E:9A:B9:25:05:92:E9:5D:3B:14:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/fbed65df-d5b1-370f-8847-c8dcedb74792.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     40401
IP address blocks:        206.190.208.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:65:92:23:2e:34:a6:21:ce:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c313e39-91f1-41fc-bc5c-d213a429e287
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=33421264-6ac4-4c91-9bf9-18793bac8112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:42:82:18:5e:d2:82:5a:91:53:d4:66:46:71:
                    2e:72:2b:f1:e3:6c:84:0a:4c:5a:f7:c4:e7:7b:56:
                    95:b1:bf:4b:26:8c:c5:de:05:ed:27:b2:e2:c5:92:
                    e2:15:0c:36:87:49:e7:83:49:7d:b9:85:d3:4b:9b:
                    d4:4d:cc:eb:a2:e5:d5:98:c2:93:87:1b:e2:89:83:
                    2e:1f:d1:37:4c:ab:21:33:58:cb:cd:88:c0:dc:2b:
                    86:10:72:0c:d8:59:ca:19:ce:16:14:e4:89:14:27:
                    02:ee:e0:a6:af:08:ad:39:62:12:84:6a:ad:2e:8d:
                    5a:01:84:6d:e1:a8:2e:fc:d6:1c:39:00:14:60:10:
                    5b:34:6c:9e:42:00:7b:de:ed:43:9a:89:02:5a:a0:
                    91:50:10:4e:c4:f4:dd:7b:de:4a:9f:67:d2:c8:eb:
                    d7:3d:44:15:78:e0:06:0f:9f:68:84:1d:bb:80:59:
                    8c:42:0a:80:83:aa:ff:c7:11:12:56:11:08:e7:8f:
                    c8:21:aa:60:c7:61:9d:d7:6b:c4:7c:30:99:8b:9e:
                    f3:6c:83:6f:89:42:ec:0b:fd:98:9e:f4:55:76:42:
                    a7:b9:e9:0b:6f:1c:dc:9f:0f:67:a4:a0:65:23:91:
                    18:c6:cd:96:1b:10:c9:21:d2:57:d0:6c:ad:45:45:
                    c2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:4F:71:C0:BD:03:88:B1:CD:E0:A9:38:74:61:D2:04:9F:4D:FC:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/fbed65df-d5b1-370f-8847-c8dcedb74792.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.crl

            X509v3 Authority Key Identifier:
                keyid:7D:97:39:68:D8:16:C7:26:14:7E:9A:B9:25:05:92:E9:5D:3B:14:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.190.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:ac:d8:13:a5:9a:49:01:54:ab:8c:d6:6e:c9:03:63:7f:57:
         f2:b6:69:b8:76:b3:9a:6e:ee:05:86:5e:46:e1:9d:40:b9:fb:
         4c:62:16:a2:e2:f8:a8:71:34:8d:a8:34:ee:40:7f:8f:4e:15:
         69:c2:ed:6c:f9:05:af:23:46:e3:e8:82:fe:b3:55:af:67:90:
         00:42:dc:e3:4e:f5:14:01:f6:5b:a7:98:8b:9e:82:c4:10:67:
         b7:71:7e:7b:29:0b:0d:fc:45:26:60:f2:2b:69:e2:51:8f:b8:
         c5:20:10:d0:c2:ac:af:22:0b:20:31:52:13:a4:f4:c4:ba:70:
         a8:92:e6:eb:64:ac:a9:58:a1:15:0c:ca:20:a3:8f:c5:05:3a:
         c2:59:da:f2:cb:28:dc:dd:ff:28:6b:b6:35:a1:30:71:16:d7:
         7c:4b:aa:b1:8e:e3:3f:24:04:be:49:1b:5c:9e:4d:0a:27:23:
         77:03:fe:46:e0:d3:ac:36:f4:16:23:c5:64:cc:0c:29:e9:11:
         46:7c:a0:f3:4f:fc:6f:bd:36:59:18:06:50:47:bb:b9:b1:bd:
         16:f9:31:4d:1a:d3:37:8b:17:3e:ee:02:62:cc:4c:dc:71:66:
         bf:9d:79:6d:92:1c:2f:1e:25:c1:ff:28:81:b4:e7:42:9f:2f:
         87:b8:39:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:47:02 2026 by rpki-client