Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ffa2885-cbaa-44e8-babb-180936652b5c/59de2d00-0639-3e99-91c7-22b2c69b6a0f.roa
File:                     59de2d00-0639-3e99-91c7-22b2c69b6a0f.roa (raw, json)
Hash identifier:          bGR6KRd+r4evPyZM0qVtYr0OOOiakurlW4LKob/ghAE=
Subject key identifier:   8C:4B:96:A1:6D:B9:34:92:BE:9B:99:78:87:6D:90:CF:FB:4E:66:94
Certificate issuer:       /CN=9ffa2885-cbaa-44e8-babb-180936652b5c
Certificate serial:       010D0C9F4328584DBE6B2726C8C0C3E1C764AA00
Authority key identifier: 1B:4F:10:EB:F9:FE:83:F4:AB:C9:86:D0:8E:57:63:BD:71:C6:0D:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ffa2885-cbaa-44e8-babb-180936652b5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ffa2885-cbaa-44e8-babb-180936652b5c/59de2d00-0639-3e99-91c7-22b2c69b6a0f.roa
Signing time:             Wed 06 May 2026 13:00:30 +0000
ROA not before:           Wed 06 May 2026 13:00:30 +0000
ROA not after:            Tue 04 Aug 2026 13:00:30 +0000
asID:                     400410
IP address blocks:        206.168.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ffa2885-cbaa-44e8-babb-180936652b5c/9ffa2885-cbaa-44e8-babb-180936652b5c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ffa2885-cbaa-44e8-babb-180936652b5c/9ffa2885-cbaa-44e8-babb-180936652b5c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ffa2885-cbaa-44e8-babb-180936652b5c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:be:6b:27:26:c8:c0:c3:e1:c7:64:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ffa2885-cbaa-44e8-babb-180936652b5c
        Validity
            Not Before: May  6 13:00:30 2026 GMT
            Not After : Aug  4 13:00:30 2026 GMT
        Subject: CN=14e9d3f6-c4ed-4218-b7e3-a603addbc1a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8e:c0:46:33:7e:d6:24:8e:4c:cd:30:b2:a3:
                    ab:1e:51:aa:73:61:75:07:8c:79:80:1e:a1:c0:08:
                    a0:9b:e9:54:dd:04:5e:85:dd:f0:18:f0:13:1c:ca:
                    42:ac:31:ca:5d:f6:6f:c3:12:25:6d:bc:0a:81:4e:
                    70:bf:bf:3b:da:fd:fa:45:ff:16:99:f9:da:53:ba:
                    91:5c:6b:49:1b:ed:f9:58:b9:d9:be:c3:ac:12:81:
                    ee:b9:50:e9:87:7e:e3:1c:b4:a2:9a:2a:64:1c:7e:
                    52:31:e6:4a:38:61:0a:f3:7d:48:32:a2:c7:e4:81:
                    8b:ee:c2:16:5d:0c:52:37:43:d4:29:4b:36:45:1c:
                    73:23:db:b5:12:17:38:39:b4:d7:fd:05:74:26:2e:
                    5e:10:6f:60:47:30:55:f2:c5:71:3b:65:ca:76:bf:
                    cb:d5:3a:ba:88:82:e7:9f:a0:1e:74:d9:54:67:88:
                    5d:14:8a:8e:7d:3c:bc:f1:bb:17:6e:de:5c:db:73:
                    d8:77:af:a6:37:72:14:e4:a7:c7:a4:56:29:a0:ba:
                    c1:46:9b:96:a5:93:08:63:df:46:ba:ef:ef:32:91:
                    1f:71:5b:35:bb:0d:3d:81:80:08:7a:0b:e0:4c:c7:
                    b7:65:92:24:e2:13:da:de:b0:9e:74:53:5d:5d:13:
                    dd:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:4B:96:A1:6D:B9:34:92:BE:9B:99:78:87:6D:90:CF:FB:4E:66:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ffa2885-cbaa-44e8-babb-180936652b5c/59de2d00-0639-3e99-91c7-22b2c69b6a0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ffa2885-cbaa-44e8-babb-180936652b5c/9ffa2885-cbaa-44e8-babb-180936652b5c.crl

            X509v3 Authority Key Identifier:
                keyid:1B:4F:10:EB:F9:FE:83:F4:AB:C9:86:D0:8E:57:63:BD:71:C6:0D:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ffa2885-cbaa-44e8-babb-180936652b5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:d9:4d:22:c8:13:77:eb:7e:51:02:53:3b:0f:3a:25:05:86:
         dd:b2:d0:f4:c1:f3:41:e3:8a:7f:80:c7:20:81:8d:9e:af:23:
         c7:da:97:c4:d0:f3:42:15:54:35:6a:31:09:1c:b3:7b:3e:ea:
         10:b8:fc:83:f5:d5:94:b4:fc:ec:e4:f0:fc:dd:67:cb:ab:5a:
         c5:82:ac:d3:6c:e4:4a:20:12:21:6b:78:8a:4d:cf:51:56:28:
         cc:c7:6a:79:f9:d8:d9:16:2b:d3:5a:14:a5:7b:fb:5b:b6:3f:
         a4:91:8d:90:d8:a6:f0:9c:25:6f:ff:d0:d8:90:8b:75:bb:6b:
         72:fa:e1:9d:96:a8:cf:24:73:6c:c5:c1:84:87:45:e2:78:09:
         6d:a9:94:58:91:5e:1d:88:42:9c:0c:f7:bc:e2:ed:70:84:34:
         87:4c:63:ed:28:04:b2:9d:2c:98:cb:05:c3:1c:01:ba:77:a1:
         dd:79:44:a3:43:8a:3b:31:e0:d5:b5:5e:3c:75:34:de:e0:cc:
         fa:5f:39:32:51:92:67:bf:9f:2c:ef:bb:e4:73:9e:e4:2f:d1:
         86:a7:b5:ae:b4:59:c1:19:b4:f8:9b:f6:10:b5:ba:49:4c:1a:
         a5:5a:88:33:36:17:d7:86:dc:b6:f8:53:6d:e3:e1:39:0c:b3:
         84:db:49:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:25:25 2026 by rpki-client