Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5791cb0d-5211-4c45-8605-8ac3cb96d9dd/0f52e602-fcfa-3a29-b47a-02aa8b3dbb0b.roa
File:                     0f52e602-fcfa-3a29-b47a-02aa8b3dbb0b.roa (raw, json)
Hash identifier:          bHy+qDgdwpEPpeuQggyt48zqynh1oMHqdyhurUh31r0=
Subject key identifier:   0E:A6:6C:CA:4A:03:A9:C6:AF:FA:CE:F8:44:E3:55:B6:11:36:8C:AF
Certificate issuer:       /CN=5791cb0d-5211-4c45-8605-8ac3cb96d9dd
Certificate serial:       010D0C9F4328584D359FA9D8E9610316D3674E00
Authority key identifier: 6A:9A:8B:89:A1:9E:F9:CF:DC:BF:AE:67:45:DF:46:3F:C5:F9:3D:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5791cb0d-5211-4c45-8605-8ac3cb96d9dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5791cb0d-5211-4c45-8605-8ac3cb96d9dd/0f52e602-fcfa-3a29-b47a-02aa8b3dbb0b.roa
Signing time:             Wed 18 Mar 2026 13:00:40 +0000
ROA not before:           Wed 18 Mar 2026 13:00:40 +0000
ROA not after:            Tue 16 Jun 2026 13:00:40 +0000
asID:                     18106
IP address blocks:        206.166.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5791cb0d-5211-4c45-8605-8ac3cb96d9dd/5791cb0d-5211-4c45-8605-8ac3cb96d9dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5791cb0d-5211-4c45-8605-8ac3cb96d9dd/5791cb0d-5211-4c45-8605-8ac3cb96d9dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5791cb0d-5211-4c45-8605-8ac3cb96d9dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:9f:a9:d8:e9:61:03:16:d3:67:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5791cb0d-5211-4c45-8605-8ac3cb96d9dd
        Validity
            Not Before: Mar 18 13:00:40 2026 GMT
            Not After : Jun 16 13:00:40 2026 GMT
        Subject: CN=b15908c0-a6d6-4559-93fd-87c28d9800c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bd:37:6c:fc:e3:75:2d:d6:87:e3:f3:76:16:
                    92:da:f3:5e:49:9d:86:38:1c:f1:10:ca:d1:53:ea:
                    b4:90:bb:22:df:2c:67:13:c6:3f:31:c6:ab:7a:e5:
                    5f:06:37:ac:6b:a6:4d:d7:a0:db:b2:1f:a6:e5:00:
                    98:c8:b0:5a:f7:56:17:f4:28:c9:80:0f:74:85:fc:
                    8d:17:b4:17:0b:75:7c:be:9e:f1:96:17:ca:52:a8:
                    ff:55:78:d2:6e:1e:76:e2:dc:34:49:fb:d0:f1:28:
                    53:f7:e0:48:83:12:df:38:bb:a5:e7:7e:f0:ca:be:
                    59:a8:38:38:79:6a:ea:47:58:b5:41:b1:a3:e9:a3:
                    e2:ee:b3:cf:5b:3a:f0:30:51:f4:ee:cd:ed:47:c0:
                    be:70:fe:87:be:57:74:6e:39:3b:9f:df:1d:87:22:
                    36:6f:d1:9b:9a:f1:1d:ec:0d:5c:96:ae:e9:cf:e9:
                    82:1d:f9:43:6b:cf:af:28:bc:04:0a:45:eb:e4:e2:
                    96:cb:ed:22:4c:d2:1a:63:20:8a:8e:44:18:a7:fb:
                    b9:17:ca:53:25:d9:7d:c2:a9:18:06:fc:53:9f:53:
                    73:e2:61:3f:71:3c:ea:de:7a:99:eb:54:f5:41:cf:
                    24:61:9d:b8:de:12:41:32:50:83:ad:07:31:34:39:
                    62:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A6:6C:CA:4A:03:A9:C6:AF:FA:CE:F8:44:E3:55:B6:11:36:8C:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5791cb0d-5211-4c45-8605-8ac3cb96d9dd/0f52e602-fcfa-3a29-b47a-02aa8b3dbb0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5791cb0d-5211-4c45-8605-8ac3cb96d9dd/5791cb0d-5211-4c45-8605-8ac3cb96d9dd.crl

            X509v3 Authority Key Identifier:
                keyid:6A:9A:8B:89:A1:9E:F9:CF:DC:BF:AE:67:45:DF:46:3F:C5:F9:3D:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5791cb0d-5211-4c45-8605-8ac3cb96d9dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.166.202.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:ee:d4:42:cc:71:c2:17:38:f1:36:01:9b:2c:53:b3:79:21:
         53:25:40:d4:77:89:2d:1a:fc:c2:43:a6:7f:d1:f6:6c:1c:e9:
         56:d7:e9:cc:05:ca:22:da:86:d1:1c:e0:d4:d7:f1:21:e3:74:
         01:a8:28:27:48:c0:13:1b:ad:17:95:46:5c:f9:d5:01:53:eb:
         70:d4:cb:6a:31:f2:92:4b:ff:b7:e2:0c:be:38:d3:2a:80:94:
         ef:2a:70:64:af:84:88:22:c6:00:93:5f:00:11:eb:be:44:19:
         d4:aa:96:20:d0:bc:da:d0:eb:cf:da:eb:fa:2c:42:33:ca:0e:
         b4:c2:dc:6f:35:3f:69:3f:0b:fd:ff:d0:0c:fe:f7:a4:ae:4e:
         5d:74:34:0c:9a:73:ed:87:df:fe:c5:82:76:3e:74:71:82:6b:
         b2:5f:29:07:d6:dc:de:2a:1a:ac:7b:38:52:e7:26:a0:d5:ee:
         e8:32:20:a2:58:7c:bf:1b:d0:6f:53:9a:66:2e:20:7f:7c:a2:
         c1:6b:c4:58:07:11:cb:57:d1:4d:2b:62:bd:e4:7d:bf:57:f0:
         d2:03:c3:49:07:f5:97:d6:a6:85:16:b0:62:8f:56:b3:3f:ce:
         df:fb:5c:ae:ad:72:ce:32:22:6c:84:7a:cc:8f:ca:8e:cf:ca:
         c9:d9:b7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:41:19 2026 by rpki-client