Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/2ce9bbe9-c02b-3c51-b987-c9188c40f0f5.roa
File:                     2ce9bbe9-c02b-3c51-b987-c9188c40f0f5.roa (raw, json)
Hash identifier:          9KA7xaqQVbWzH68ADAtMGftw9KkEvHkm5P14VPE82zs=
Subject key identifier:   92:EE:C8:E3:F5:49:6A:38:72:A9:E7:C4:DE:43:7C:1A:7E:ED:8E:21
Certificate issuer:       /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial:       010D0C9F4328584D24E131E1EFF85D94E34E67C0
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/2ce9bbe9-c02b-3c51-b987-c9188c40f0f5.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     9304
IP address blocks:        206.212.241.0/24 maxlen: 24
                          206.212.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e1:31:e1:ef:f8:5d:94:e3:4e:67:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=fc1e2d5f-15db-4702-8a9a-539831c7a1d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b9:c8:3a:93:2b:b8:ba:50:5a:bc:a8:91:8a:
                    51:16:a5:71:3a:37:50:28:5f:6c:64:44:7b:3d:66:
                    a2:a7:9a:4a:82:7d:0f:20:f2:54:b5:cc:ec:ad:cd:
                    11:4b:ad:48:58:8c:81:25:b5:f4:4a:af:92:08:f0:
                    e1:e7:68:29:b5:6f:0c:da:2b:95:b8:28:86:be:1f:
                    94:56:5f:23:0c:37:2d:53:07:e3:c9:30:55:5e:ce:
                    70:d4:07:4e:59:93:c6:b3:42:22:06:4c:43:25:81:
                    39:07:ef:06:fb:e7:b6:13:11:bb:6e:77:cc:94:df:
                    dc:f2:c9:be:0f:55:3c:c2:26:48:c3:70:45:25:2a:
                    79:60:1e:33:7f:ab:d1:17:de:17:78:c4:65:55:14:
                    db:53:8b:50:b4:1c:cc:af:7d:46:d4:69:8c:81:51:
                    f9:69:dd:a5:2b:84:18:ad:d6:57:56:3e:6e:5f:3c:
                    64:95:2f:ef:bb:05:27:3d:47:16:19:57:7f:2e:65:
                    57:ad:a1:65:f3:9e:99:f7:3d:98:83:9b:fe:c5:b1:
                    b4:aa:b9:bf:0a:03:03:1a:e8:84:94:cc:ec:34:c3:
                    cb:cf:8c:08:61:a6:4e:83:53:c8:34:75:c9:67:4e:
                    d0:7a:c2:65:f8:32:f5:bf:c7:aa:ef:e5:13:25:aa:
                    c6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:EE:C8:E3:F5:49:6A:38:72:A9:E7:C4:DE:43:7C:1A:7E:ED:8E:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/2ce9bbe9-c02b-3c51-b987-c9188c40f0f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl

            X509v3 Authority Key Identifier:
                keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.212.241.0/24
                  206.212.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:f7:14:61:29:f6:5a:fb:b6:aa:40:86:3f:95:8f:61:da:81:
         8e:ae:4c:9d:7d:12:a6:e8:ae:fc:52:29:1b:40:51:cb:28:55:
         7b:db:33:ec:01:33:7b:53:4b:80:00:19:aa:e0:c2:51:40:ce:
         b6:ef:85:59:97:87:3e:9b:ac:f4:0c:f5:e5:89:40:54:f5:cd:
         f6:6d:14:d7:36:a6:ff:3d:7d:2a:2d:96:39:9b:c4:18:d5:58:
         08:55:a7:98:19:35:5f:d8:ad:d3:e5:8f:39:c4:34:82:1a:ce:
         83:86:3f:62:5b:fd:6a:30:f7:c6:19:49:52:88:00:79:a7:a2:
         b5:3b:1e:6d:c5:0b:cf:2f:c6:90:72:19:12:d0:ca:53:d7:95:
         dd:14:61:90:19:17:5d:6c:f3:75:96:c5:b5:1f:43:e1:16:47:
         18:5a:24:db:2f:de:d9:dd:cd:63:10:e0:0d:8f:dd:fb:d6:91:
         87:48:be:50:85:97:b8:8f:1f:12:08:74:8f:20:68:ba:15:e9:
         54:70:31:c4:18:24:49:8b:c0:2c:52:43:c5:9a:64:46:ea:22:
         51:87:69:34:cc:67:9a:62:69:ec:1f:e5:7f:d0:05:f1:15:c9:
         0a:70:23:93:33:24:73:d6:7b:18:93:b2:a5:4f:4b:e9:51:4c:
         fd:d4:96:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:57:51 2026 by rpki-client