Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7d799140-1852-3a1d-b8ad-4c2e73ecd8f3.roa
File:                     7d799140-1852-3a1d-b8ad-4c2e73ecd8f3.roa (raw, json)
Hash identifier:          bElz7FAk7MbR++nMyTZUJibXwYk7IgMPqX6N8qahxmI=
Subject key identifier:   A7:55:C0:F8:47:FF:8F:0F:8B:87:96:F3:CC:28:0D:66:F1:57:4E:36
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F1CC7C819967A1E40123CBD00
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7d799140-1852-3a1d-b8ad-4c2e73ecd8f3.roa
Signing time:             Wed 09 Sep 2026 01:00:11 +0000
ROA not before:           Wed 09 Sep 2026 01:00:11 +0000
ROA not after:            Tue 08 Dec 2026 02:00:11 +0000
asID:                     62904
IP address blocks:        206.214.80.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:c7:c8:19:96:7a:1e:40:12:3c:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep  9 01:00:11 2026 GMT
            Not After : Dec  8 02:00:11 2026 GMT
        Subject: CN=dfd9c07b-f0f6-4d92-86db-201885e6c37f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ac:d3:c9:be:23:ed:d8:73:d1:a8:32:79:0f:
                    b4:c3:27:ae:c3:ae:d7:8b:69:66:99:30:38:f0:c7:
                    85:50:d5:77:38:93:d6:f6:b8:56:dd:1b:41:30:0c:
                    bc:2f:b1:10:35:70:44:82:dd:55:91:70:49:c4:cf:
                    a6:70:72:90:b3:ec:98:04:a3:93:db:91:be:7d:f4:
                    8b:7b:c6:bc:b7:75:3b:6c:8c:ae:da:cf:3b:c5:fb:
                    54:9f:4d:35:4d:e8:86:58:9f:65:19:af:95:0e:80:
                    74:e9:ce:f4:72:51:58:f2:62:5d:4d:fa:43:e2:a8:
                    8b:67:0d:d4:65:74:37:1c:1f:13:73:4b:e9:60:36:
                    d6:2f:34:e3:6d:0a:1d:45:6d:01:97:11:a3:37:b5:
                    59:b4:f9:db:3f:52:c7:4f:b7:2d:c1:82:d0:db:91:
                    16:fc:d8:a8:db:0b:f7:1d:80:55:ca:ff:ea:35:1a:
                    63:55:e7:3f:fc:e4:21:66:9e:cc:9a:1b:f8:a0:81:
                    16:07:03:bd:8d:de:07:3d:67:88:d7:34:fe:bd:e3:
                    ca:54:61:50:b1:dd:3c:da:47:dc:66:d7:ad:88:99:
                    17:d2:dd:65:63:08:ff:7e:ec:fc:30:7a:3a:a1:1e:
                    6b:af:c2:6b:b4:ea:d5:bb:62:27:80:0f:e5:24:39:
                    59:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:55:C0:F8:47:FF:8F:0F:8B:87:96:F3:CC:28:0D:66:F1:57:4E:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7d799140-1852-3a1d-b8ad-4c2e73ecd8f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.214.80.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:3c:1a:be:14:ff:86:af:f2:48:cb:ee:0d:d7:c9:d8:d3:16:
         21:ea:82:1f:be:26:53:39:39:ac:8c:95:36:1c:74:a4:d9:75:
         5b:75:f3:9c:70:f0:a9:46:af:66:9c:5a:3b:6c:c8:02:a7:34:
         54:46:ef:48:e2:00:16:f6:4b:40:d0:38:e6:4b:8f:2f:8a:99:
         28:34:cf:21:91:0c:97:49:2b:cd:95:44:9e:74:53:87:b7:b0:
         12:13:2f:69:a1:e9:34:49:86:50:b6:6a:0e:81:77:0b:d5:d2:
         05:43:a1:2c:e6:c9:6a:e0:27:ad:81:2e:a1:7f:1c:47:e7:a1:
         ff:06:de:0f:e4:3d:63:3b:8a:f7:e1:10:50:5a:44:58:a3:94:
         22:e6:49:6e:e1:ef:9f:01:26:19:8b:db:d3:33:5a:a9:76:8b:
         52:90:ea:15:9d:fc:14:3a:5e:22:40:84:07:4f:fb:2f:f2:ca:
         4b:54:03:84:62:a5:6a:1c:0d:1e:05:f3:bd:d7:35:93:46:99:
         17:4b:13:99:0f:0a:07:38:6f:29:b8:f9:44:43:1f:e0:3d:56:
         e0:12:34:00:f2:82:47:9a:06:93:2e:3d:fa:89:8c:35:59:78:
         e7:71:d3:88:80:33:29:bb:a9:25:0f:1a:d8:83:3b:87:01:34:
         26:18:b0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:33:04 2026 by rpki-client