Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c4147360-87bc-49de-9f1c-3c020bc4f1ee/0e7d721a-8234-33e7-8827-d38683af20a1.roa
File:                     0e7d721a-8234-33e7-8827-d38683af20a1.roa (raw, json)
Hash identifier:          TwXIEBUwJQ6aJRiPYQjL2iwQw/oOOu7Q8lz6+sozSrc=
Subject key identifier:   62:A0:D3:51:AC:E1:14:3C:21:90:2C:75:30:E0:9C:B5:5B:3E:B7:44
Certificate issuer:       /CN=c4147360-87bc-49de-9f1c-3c020bc4f1ee
Certificate serial:       010D0C9F4328584D9B85632F7E685483D0683740
Authority key identifier: 99:BC:B1:E3:04:DA:A9:29:0F:BA:75:31:F2:6E:85:53:FD:C3:CA:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c4147360-87bc-49de-9f1c-3c020bc4f1ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c4147360-87bc-49de-9f1c-3c020bc4f1ee/0e7d721a-8234-33e7-8827-d38683af20a1.roa
Signing time:             Fri 24 Apr 2026 01:00:23 +0000
ROA not before:           Fri 24 Apr 2026 01:00:23 +0000
ROA not after:            Thu 23 Jul 2026 01:00:23 +0000
asID:                     20210
IP address blocks:        206.109.104.0/23 maxlen: 23
                          206.109.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c4147360-87bc-49de-9f1c-3c020bc4f1ee/c4147360-87bc-49de-9f1c-3c020bc4f1ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c4147360-87bc-49de-9f1c-3c020bc4f1ee/c4147360-87bc-49de-9f1c-3c020bc4f1ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c4147360-87bc-49de-9f1c-3c020bc4f1ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9b:85:63:2f:7e:68:54:83:d0:68:37:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4147360-87bc-49de-9f1c-3c020bc4f1ee
        Validity
            Not Before: Apr 24 01:00:23 2026 GMT
            Not After : Jul 23 01:00:23 2026 GMT
        Subject: CN=486d5893-d63f-462d-894d-80c428335df3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b0:41:c4:cc:f3:f6:b0:87:43:3a:0d:cd:1d:
                    2d:76:22:2d:66:32:24:95:a1:11:65:a3:c7:55:39:
                    75:9a:31:50:f3:de:01:a3:4d:a3:6d:20:2e:41:54:
                    d3:2e:e7:69:19:8b:aa:f7:37:52:5f:7e:d1:d3:0f:
                    af:3e:53:1b:61:0f:d8:21:27:2d:59:8e:77:98:00:
                    fe:ed:7a:34:3a:98:ce:62:65:11:43:37:10:02:aa:
                    74:60:7d:f6:bf:50:3e:a4:d2:53:c1:21:a0:d9:46:
                    74:80:b2:86:95:24:f0:27:ee:42:f7:04:eb:00:cb:
                    ed:1a:02:6d:d8:4d:95:00:16:03:1c:7e:60:c3:20:
                    aa:9d:94:ba:f2:11:2c:1b:8f:36:34:3e:f1:d0:2c:
                    98:d5:d6:22:1e:5b:7c:da:9a:65:9e:e6:09:01:e5:
                    78:e0:f0:e6:98:2a:a3:90:6f:b1:14:c2:b1:67:ec:
                    5b:27:ec:1c:86:67:32:5e:9d:54:7d:f1:a0:ce:a8:
                    e7:e0:4d:7a:3b:4e:2c:fd:ee:0a:62:74:c7:12:9d:
                    b6:bf:8d:47:c3:0a:7f:b3:48:39:19:a6:1b:af:34:
                    c5:6e:84:21:b2:81:a1:f9:72:9e:44:62:86:ef:1f:
                    cf:be:27:11:24:95:12:c8:3a:e9:2b:a9:ed:3a:5f:
                    f4:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A0:D3:51:AC:E1:14:3C:21:90:2C:75:30:E0:9C:B5:5B:3E:B7:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c4147360-87bc-49de-9f1c-3c020bc4f1ee/0e7d721a-8234-33e7-8827-d38683af20a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c4147360-87bc-49de-9f1c-3c020bc4f1ee/c4147360-87bc-49de-9f1c-3c020bc4f1ee.crl

            X509v3 Authority Key Identifier:
                keyid:99:BC:B1:E3:04:DA:A9:29:0F:BA:75:31:F2:6E:85:53:FD:C3:CA:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c4147360-87bc-49de-9f1c-3c020bc4f1ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.109.104.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:41:82:ac:dc:7e:8a:8c:1b:65:d6:3c:18:dc:1f:63:00:c7:
         d5:3c:bd:78:d3:d9:be:93:83:68:99:6c:6b:b6:d5:fc:a9:57:
         42:e4:fd:b9:1f:cb:29:22:e5:13:d2:e8:30:ac:34:9a:4b:8a:
         fb:85:98:0b:22:99:3a:99:d8:67:d8:96:87:54:2e:68:11:51:
         82:b5:5e:f2:4d:ba:f0:50:b8:71:91:88:78:d4:88:c2:ed:87:
         cd:10:76:30:98:52:99:6e:56:dd:11:50:49:9d:3b:03:31:33:
         18:8f:2b:7e:fd:ee:c4:fe:c3:c4:10:ab:e5:fc:25:ef:1a:ab:
         ea:6c:68:78:b7:4a:2e:7b:68:8a:f1:59:aa:8d:4e:1b:63:1b:
         29:8e:0b:1b:0b:32:28:3b:39:52:ad:e7:d0:d4:4d:b9:f3:c4:
         fe:4b:10:d9:0d:b3:0a:98:33:fc:4a:d3:5c:ed:43:f3:04:75:
         4c:7d:a1:0c:53:1f:07:5d:be:da:c8:19:25:c3:36:ee:5d:5a:
         2d:52:19:da:a7:d3:cc:37:87:4c:94:07:9a:8f:55:e7:f8:0e:
         b2:f3:26:5d:8d:17:73:cb:d3:1f:41:b0:60:54:6c:6f:68:bd:
         e4:33:ac:c8:cf:82:16:39:03:91:6a:a0:57:7b:3a:9b:19:d7:
         56:d4:1f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:02:05 2026 by rpki-client