Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/314e46f6-a31c-31d1-8df5-73c260b076b2.roa
File:                     314e46f6-a31c-31d1-8df5-73c260b076b2.roa (raw, json)
Hash identifier:          ubjpKd/mghqQ9xyhZkuklTSym9b6DOdTbDxE5Vylu/s=
Subject key identifier:   50:10:D2:F6:E2:59:FE:51:B5:9A:6F:14:68:E1:26:1A:00:E1:F3:DC
Certificate issuer:       /CN=0ea67b9e-1c99-4b1c-8c50-055c10d4d55d
Certificate serial:       010D0C9F4328584E7E94E1682492E3A5A3DC9600
Authority key identifier: 8F:F9:BD:64:62:6F:68:AD:4F:51:81:74:78:57:9D:54:4A:A0:29:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/314e46f6-a31c-31d1-8df5-73c260b076b2.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     546
IP address blocks:        206.219.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:e1:68:24:92:e3:a5:a3:dc:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ea67b9e-1c99-4b1c-8c50-055c10d4d55d
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=d3f965f3-dd20-4cae-8916-e2fe30db916d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ad:a1:6b:90:e0:43:8a:c1:a3:6c:ad:a1:41:
                    08:cc:c8:48:17:9d:a9:1a:c7:ba:9a:7c:bc:f5:20:
                    68:47:45:65:5f:0c:7d:7c:8b:47:db:59:c5:a8:db:
                    dc:27:00:bf:39:f5:cc:c4:b4:2e:5e:6a:2b:11:84:
                    c7:95:db:cf:87:47:1e:8b:55:a7:03:65:16:75:42:
                    10:87:4d:e5:c5:d7:83:c4:da:dd:b0:d3:72:a0:93:
                    0a:45:35:70:d8:48:bf:c8:a9:7d:de:b0:69:be:ff:
                    ac:40:4f:5e:44:0b:8c:d2:77:fd:fc:34:78:cb:ac:
                    57:80:5e:7c:6b:71:99:5d:bb:2e:34:54:58:fa:5d:
                    06:ca:5c:7d:19:77:b5:d7:13:6d:ef:d3:d0:dd:89:
                    74:e3:58:0b:ae:9f:08:ab:9a:51:d1:be:18:76:97:
                    d2:14:e5:d5:7d:a8:13:57:55:4e:a2:64:a5:27:ce:
                    4e:9a:32:1d:f3:52:b7:74:5f:5b:aa:61:44:36:8a:
                    91:b8:9c:48:8a:69:18:2d:94:32:0c:8a:9b:f0:b2:
                    b9:38:b6:ff:b1:bd:00:64:60:e0:6f:00:ef:c4:cc:
                    20:e6:60:e5:08:e8:6f:d0:10:ee:84:84:c3:b5:4d:
                    53:29:15:c9:22:b5:56:37:59:67:f0:c6:1b:cb:63:
                    f0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:10:D2:F6:E2:59:FE:51:B5:9A:6F:14:68:E1:26:1A:00:E1:F3:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/314e46f6-a31c-31d1-8df5-73c260b076b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.crl

            X509v3 Authority Key Identifier:
                keyid:8F:F9:BD:64:62:6F:68:AD:4F:51:81:74:78:57:9D:54:4A:A0:29:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.219.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:37:e4:80:61:e4:da:53:b8:86:5f:f9:78:be:d0:fe:de:36:
         c6:a8:b4:4d:5c:5c:1b:72:13:09:0e:d4:87:a2:e6:c2:8b:18:
         97:60:fc:75:d7:79:66:64:59:eb:f6:ca:52:0d:da:b8:88:b3:
         f4:e8:2a:fa:f8:94:da:1c:25:c5:4e:62:32:d7:0f:44:1d:35:
         a3:40:27:da:d7:ad:61:6c:b0:7e:a2:9f:82:3a:b7:9c:d6:7a:
         d7:73:84:e5:8b:f5:6d:25:c8:aa:98:9e:fd:0a:b7:97:d6:1d:
         f6:d8:5d:94:39:70:4a:16:d1:cf:77:4a:0c:56:aa:78:2f:4a:
         d3:e2:10:67:17:22:54:10:80:21:df:62:fb:a9:66:72:80:10:
         f2:89:90:b8:7c:1f:38:37:7d:1b:67:e1:c4:60:7e:b5:32:0a:
         13:d1:17:7c:ce:6c:00:b3:aa:20:a0:ed:bd:f6:40:fc:45:da:
         42:80:c8:b4:53:46:9c:b3:6f:d6:f4:33:ca:29:a1:cd:27:e8:
         4f:80:c6:f2:d1:9e:e5:65:73:05:2c:0e:26:73:1f:48:08:66:
         cf:87:96:76:e4:89:06:70:1d:80:e3:0c:0f:9a:68:b2:26:17:
         f2:62:eb:2d:12:85:36:a9:c2:80:7d:d0:f6:16:48:3c:89:99:
         90:44:78:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:28:40 2026 by rpki-client