Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d6030c72-d137-34d3-8372-1abef2623fce.roa
File:                     d6030c72-d137-34d3-8372-1abef2623fce.roa (raw, json)
Hash identifier:          Ok9sY3uWz1IKe5kJZQmqdNJZ1y6Bg57VrBWUIdi9r4k=
Subject key identifier:   C1:23:23:4D:B0:28:8C:AE:67:A4:4C:1B:B6:BB:C8:67:5F:8E:6A:32
Certificate issuer:       /CN=d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e
Certificate serial:       010D0C9F4328584E50849994E1F313C023CEE580
Authority key identifier: 2D:22:70:71:EA:41:40:16:CE:85:45:3A:86:52:BE:FE:08:5C:C9:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d6030c72-d137-34d3-8372-1abef2623fce.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     26564
IP address blocks:        167.206.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:99:94:e1:f3:13:c0:23:ce:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=d82e8f37-8b37-4fab-bb54-1afe60e932f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c2:76:a5:83:3f:f7:3a:d7:ba:9b:3d:fc:0c:
                    7c:21:0e:bc:9d:dd:b9:5e:8d:26:1e:a8:da:6d:16:
                    c0:d5:99:04:73:88:0c:f8:2e:28:a4:fc:97:61:30:
                    9b:43:c8:ab:ff:dd:96:cb:ca:d5:be:84:95:8a:ff:
                    5e:31:de:9f:f6:49:08:e2:39:80:03:5b:e3:90:15:
                    41:28:86:a6:8b:c3:bc:90:b6:0a:8a:a9:7e:22:81:
                    4f:2e:f1:74:a3:a7:f7:8a:db:5c:aa:ef:aa:53:9c:
                    50:6e:61:3d:e3:83:a2:6f:a2:9f:db:f0:92:e0:fa:
                    64:2f:1f:c3:ff:31:f0:55:be:17:03:ca:1d:ae:ab:
                    b5:51:45:28:bf:9d:ca:e4:4a:71:24:a5:f0:e4:2e:
                    06:68:49:76:30:80:11:1a:fd:98:2e:e9:c8:f0:ac:
                    3d:ad:ad:d7:6f:8e:59:46:17:4b:fe:ed:2a:f9:2c:
                    8d:7b:41:c4:ca:76:b7:51:d6:17:18:83:29:97:c4:
                    52:b2:87:7a:6e:f3:e9:15:b9:76:64:f8:a0:0a:33:
                    ff:93:fd:76:82:c7:ca:f5:4b:84:78:c9:b5:0c:f8:
                    0c:60:95:5e:a0:5c:ae:ae:95:17:66:52:a5:6d:15:
                    37:dc:1b:63:fe:06:ef:fc:39:50:33:47:80:cb:90:
                    3e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:23:23:4D:B0:28:8C:AE:67:A4:4C:1B:B6:BB:C8:67:5F:8E:6A:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d6030c72-d137-34d3-8372-1abef2623fce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.crl

            X509v3 Authority Key Identifier:
                keyid:2D:22:70:71:EA:41:40:16:CE:85:45:3A:86:52:BE:FE:08:5C:C9:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.206.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:27:20:c7:d3:53:88:6f:9d:ae:0c:c2:6f:a8:87:2b:d0:58:
         eb:b7:26:31:7e:2d:7e:22:1d:c1:8d:b5:2c:7a:f2:1e:ee:42:
         f2:57:e9:88:82:6c:6a:6c:17:68:b7:5d:c6:4c:a8:52:0c:60:
         e6:8b:cb:17:b7:ac:52:79:9f:9e:b1:1e:a6:9c:69:49:3f:3b:
         6e:54:16:a2:fb:cc:f1:d3:35:ec:01:c3:aa:f3:b5:76:30:08:
         b8:be:5f:6d:da:91:f8:b2:87:d2:0f:be:73:0b:51:71:5b:e3:
         ba:5e:c7:a2:ed:b1:b9:84:5b:21:09:a0:c2:41:33:0d:d8:d5:
         f4:7b:a9:bb:54:e6:93:c0:9a:37:66:ad:1a:6b:ee:16:e8:e0:
         d8:5a:de:6a:45:0f:9f:0f:48:5c:a9:a9:45:87:8a:f0:da:c3:
         df:2e:ba:33:51:65:b8:00:fb:6c:12:14:8c:81:58:b6:ed:84:
         3a:de:3c:46:35:ef:3e:28:de:32:00:b6:2f:1e:e0:e7:7d:e9:
         a9:3b:99:a6:29:02:76:6e:2b:81:fd:03:a6:59:ef:19:5e:3b:
         d1:88:7d:4a:22:44:37:d3:c0:a5:1e:5f:18:96:b4:e9:54:4f:
         5f:c0:da:5f:7f:bc:36:8a:be:73:0c:c2:cd:f1:b6:64:7e:ab:
         b8:0c:cb:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:32:07 2026 by rpki-client