Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25/d56235c3-7112-36eb-91e7-941956b41963.roa
File:                     d56235c3-7112-36eb-91e7-941956b41963.roa (raw, json)
Hash identifier:          ynE3MRlidHVPh1OvEf79rHPgw4s5cMOQqiFFEa4HydQ=
Subject key identifier:   BE:F3:D5:E2:AF:C1:E8:24:3D:64:A4:02:00:59:90:3D:9E:13:51:A4
Certificate issuer:       /CN=fb2256ec-ce11-47ff-92a6-4ba188570a25
Certificate serial:       010D0C9F4328584D4A8FA4748356D21FD0158450
Authority key identifier: 38:F4:1F:2B:B5:40:90:F4:90:62:3B:C6:F4:BD:8D:B3:37:69:0C:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25/d56235c3-7112-36eb-91e7-941956b41963.roa
Signing time:             Thu 26 Mar 2026 01:00:32 +0000
ROA not before:           Thu 26 Mar 2026 01:00:32 +0000
ROA not after:            Wed 24 Jun 2026 01:00:32 +0000
asID:                     19905
IP address blocks:        206.83.176.0/20 maxlen: 24
                          2620:116:f000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25/fb2256ec-ce11-47ff-92a6-4ba188570a25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25/fb2256ec-ce11-47ff-92a6-4ba188570a25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4a:8f:a4:74:83:56:d2:1f:d0:15:84:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb2256ec-ce11-47ff-92a6-4ba188570a25
        Validity
            Not Before: Mar 26 01:00:32 2026 GMT
            Not After : Jun 24 01:00:32 2026 GMT
        Subject: CN=8299b7e3-3736-49db-a0a0-36e258c3e7cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8d:7b:a0:3b:b7:64:c5:7f:3b:87:06:06:49:
                    46:0e:f1:3f:94:17:8b:a7:74:8f:c7:7b:a2:2a:13:
                    2b:d1:a9:08:9f:32:2c:4d:97:da:10:ea:af:58:e1:
                    d1:8b:6f:39:d2:f0:d8:f6:71:d7:73:53:0f:87:3e:
                    6b:d9:f3:d0:68:a0:2e:7c:a8:3a:de:e5:cf:ea:74:
                    0a:6e:84:5e:28:1c:1e:62:b9:74:cb:e8:c2:0d:a7:
                    8a:b1:0f:15:2e:30:c1:f0:e6:8d:e5:72:b9:47:1c:
                    6f:58:63:6d:fc:c5:fd:4e:85:0b:e4:0f:5b:40:63:
                    7d:c0:b5:7f:ab:ad:87:1e:b1:9d:ad:08:d2:b7:6a:
                    dd:09:25:f3:19:e3:c8:de:11:3e:4b:ca:de:9d:a4:
                    8b:70:8b:b1:fd:b0:96:85:cc:e2:d7:8b:d4:a8:cc:
                    ec:d8:c6:ed:52:72:c9:84:97:36:29:6f:33:db:b2:
                    63:fc:9e:11:54:27:8e:33:55:1d:e9:d4:f1:6c:ce:
                    14:e6:50:bd:d9:dc:31:02:4e:04:ad:b5:17:8a:0d:
                    37:db:e3:30:45:ef:a7:58:6a:a0:4c:94:2a:07:11:
                    48:1f:39:04:02:f2:a9:c2:e8:29:fc:da:30:4c:6e:
                    67:3b:40:13:5d:75:04:86:65:53:6f:c7:bd:3e:52:
                    e3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F3:D5:E2:AF:C1:E8:24:3D:64:A4:02:00:59:90:3D:9E:13:51:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25/d56235c3-7112-36eb-91e7-941956b41963.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25/fb2256ec-ce11-47ff-92a6-4ba188570a25.crl

            X509v3 Authority Key Identifier:
                keyid:38:F4:1F:2B:B5:40:90:F4:90:62:3B:C6:F4:BD:8D:B3:37:69:0C:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb2256ec-ce11-47ff-92a6-4ba188570a25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.83.176.0/20
                IPv6:
                  2620:116:f000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:33:4b:96:7d:f3:fd:c6:60:fe:75:ae:87:13:f6:26:d3:77:
         56:44:c4:76:3e:10:21:cc:36:a8:9b:76:7c:49:ba:ac:93:2a:
         dd:64:8e:bf:cb:95:20:a7:5b:5b:36:2a:4b:16:80:06:b9:c5:
         da:0a:bc:26:78:a5:33:f7:6a:de:73:8c:aa:02:49:8a:b5:ed:
         2e:92:f7:be:4f:8d:1f:aa:50:53:e7:32:4f:ea:25:d2:02:01:
         f0:12:a9:e9:dc:ba:2e:1c:46:9b:32:c9:07:61:0e:ba:bd:0d:
         1f:fe:92:72:c6:71:77:bf:7e:9c:64:74:c3:1f:d3:df:af:a6:
         52:e4:dc:19:ee:f9:66:b3:c8:05:b6:03:df:e3:c7:d5:d7:d9:
         64:e9:91:c4:db:43:b1:03:1a:d9:ac:80:3f:51:69:54:c2:54:
         78:89:b2:d4:6f:f7:67:14:ec:7e:48:e6:77:62:fd:72:16:ad:
         8b:57:3f:53:6b:64:69:d8:43:3e:c3:a8:92:ef:83:c9:57:f0:
         5b:d7:ef:2e:00:95:f4:01:52:ec:c8:d5:c9:36:09:ad:37:5d:
         0d:d9:1a:04:65:f0:16:91:8e:5d:60:cd:d9:3d:2c:42:a3:f4:
         54:6b:61:28:a8:94:bd:a6:6d:5b:e6:9d:8e:6c:07:92:07:14:
         8e:c3:17:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:07:54 2026 by rpki-client