Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/432afd84-753d-46d9-b6a6-2bf399dcd25a/e1d9360c-6a2f-3e9c-b9ad-567587e88984.roa
File:                     e1d9360c-6a2f-3e9c-b9ad-567587e88984.roa (raw, json)
Hash identifier:          WofD+qf8q3fXnBnJBp8xZZIpNDja0mQJ5w5Jgri2WSM=
Subject key identifier:   68:83:38:64:B0:63:98:ED:DC:4B:B4:3A:B4:2C:FE:89:86:95:54:FB
Certificate issuer:       /CN=432afd84-753d-46d9-b6a6-2bf399dcd25a
Certificate serial:       010D0C9F4328584DA6B034B8D1454F79E41ABD80
Authority key identifier: A4:2B:C4:1D:8C:07:AA:C1:65:C2:A4:21:2F:66:D0:07:E3:95:4B:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/432afd84-753d-46d9-b6a6-2bf399dcd25a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/432afd84-753d-46d9-b6a6-2bf399dcd25a/e1d9360c-6a2f-3e9c-b9ad-567587e88984.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     46746
IP address blocks:        206.208.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/432afd84-753d-46d9-b6a6-2bf399dcd25a/432afd84-753d-46d9-b6a6-2bf399dcd25a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/432afd84-753d-46d9-b6a6-2bf399dcd25a/432afd84-753d-46d9-b6a6-2bf399dcd25a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/432afd84-753d-46d9-b6a6-2bf399dcd25a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:34:b8:d1:45:4f:79:e4:1a:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=432afd84-753d-46d9-b6a6-2bf399dcd25a
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=090a2110-bc95-4c54-b560-c7376fa4f12b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:64:49:79:20:01:b1:82:58:e7:af:a5:0f:d6:
                    e1:86:5a:72:6b:90:0b:05:09:a4:15:c7:34:01:cb:
                    d5:53:4c:79:94:dc:b4:4f:52:20:a7:6a:7f:58:ed:
                    f9:d0:5a:ed:66:0e:ce:21:c7:ba:c6:a6:e8:9e:39:
                    40:2f:59:bd:47:a4:56:64:66:55:44:d2:ee:59:79:
                    c6:8a:c5:33:36:1e:10:33:ef:12:db:cb:ab:4a:81:
                    24:d6:a6:fd:17:52:e1:52:60:aa:50:53:69:0f:44:
                    1c:77:ea:ab:c3:f4:88:cc:c3:6c:fc:5a:da:f9:16:
                    13:c7:b4:cb:bf:eb:9b:6b:17:1b:f5:a6:e9:47:e1:
                    9c:fa:c9:42:1e:f6:a0:5c:77:a1:38:93:5c:4e:33:
                    43:d5:61:61:fa:81:bc:41:18:38:66:ac:5a:74:d6:
                    b2:b7:22:c0:40:bf:17:ca:aa:5a:e6:cb:e8:85:96:
                    1a:bb:68:79:f5:2f:bc:58:6b:bd:3e:c0:10:76:66:
                    30:c7:b1:9d:95:22:a0:92:6e:69:33:af:07:1b:eb:
                    47:88:c4:df:df:79:0c:85:95:df:18:a9:dd:fb:0e:
                    0d:cd:af:22:56:8b:fd:53:38:03:bb:81:56:7a:88:
                    44:1e:d7:1a:47:c2:a4:6f:4d:db:69:2f:23:81:98:
                    d5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:83:38:64:B0:63:98:ED:DC:4B:B4:3A:B4:2C:FE:89:86:95:54:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/432afd84-753d-46d9-b6a6-2bf399dcd25a/e1d9360c-6a2f-3e9c-b9ad-567587e88984.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/432afd84-753d-46d9-b6a6-2bf399dcd25a/432afd84-753d-46d9-b6a6-2bf399dcd25a.crl

            X509v3 Authority Key Identifier:
                keyid:A4:2B:C4:1D:8C:07:AA:C1:65:C2:A4:21:2F:66:D0:07:E3:95:4B:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/432afd84-753d-46d9-b6a6-2bf399dcd25a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.208.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:e8:fe:f6:8b:13:13:02:6e:f2:70:1d:e5:c4:f9:10:e8:75:
         57:b3:73:33:c3:68:ff:c0:40:4d:9d:8b:b3:30:c5:e3:1f:43:
         cd:bf:29:06:26:aa:33:26:81:d7:a0:55:b7:42:1d:9e:1e:7a:
         44:e0:76:97:85:19:25:51:38:9a:92:e6:a9:a2:a1:b0:b6:87:
         9a:5a:8e:7c:fa:58:6c:8f:4c:8e:1b:79:2b:01:d7:22:3a:fb:
         98:78:26:60:14:70:bf:e6:4b:f8:8f:6b:77:8a:b8:87:dd:06:
         08:93:0f:9d:5d:6a:f3:81:77:e7:de:d0:ed:90:3f:ba:8b:ef:
         ad:ae:c9:68:09:6a:ea:fb:aa:1e:e5:68:08:ed:00:3f:eb:a0:
         0a:da:05:ce:6b:60:da:4e:66:18:d6:3a:30:22:4c:3d:c9:87:
         af:61:20:1c:86:3e:32:22:99:4f:da:45:95:73:6d:94:3e:ed:
         32:2f:cf:ee:dd:29:fa:29:ec:6c:f0:3b:c1:8d:67:8b:a4:fe:
         7b:70:31:ae:d6:0a:47:be:25:51:24:d0:96:49:f7:f6:30:b7:
         36:76:80:6f:21:3f:60:23:96:b2:e2:b6:36:1b:36:9b:48:2c:
         43:0c:2e:aa:b5:92:4c:0f:b3:a1:9c:84:00:b9:98:08:38:8a:
         a2:87:65:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:09:15 2026 by rpki-client