Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a/991eca60-b420-37c2-92a4-3a053c9970bb.roa
File:                     991eca60-b420-37c2-92a4-3a053c9970bb.roa (raw, json)
Hash identifier:          HzjxVtIUKcJM7MEQG3ZJxl7b6Fa3BQLtbvl+0lp7qic=
Subject key identifier:   39:24:B8:77:79:71:4E:7E:51:B3:DA:E7:DA:84:CC:D2:B8:25:CC:39
Certificate issuer:       /CN=d06852c4-a6c0-43d5-ba94-22fab637697a
Certificate serial:       010D0C9F4328584D2644A62387E5427FA1390680
Authority key identifier: 30:01:74:AA:E6:45:3E:F4:B4:CD:2F:99:D7:6A:DE:37:8D:43:11:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a/991eca60-b420-37c2-92a4-3a053c9970bb.roa
Signing time:             Fri 13 Mar 2026 01:00:31 +0000
ROA not before:           Fri 13 Mar 2026 01:00:31 +0000
ROA not after:            Thu 11 Jun 2026 01:00:31 +0000
asID:                     7029
IP address blocks:        206.72.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a/d06852c4-a6c0-43d5-ba94-22fab637697a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a/d06852c4-a6c0-43d5-ba94-22fab637697a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:26:44:a6:23:87:e5:42:7f:a1:39:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d06852c4-a6c0-43d5-ba94-22fab637697a
        Validity
            Not Before: Mar 13 01:00:31 2026 GMT
            Not After : Jun 11 01:00:31 2026 GMT
        Subject: CN=c310bd21-ad10-4265-905c-baff9cdb78dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c3:b4:b7:6f:43:c0:db:72:ce:33:9b:61:81:
                    1c:ac:dc:21:0c:cb:39:15:45:8b:20:0a:4a:63:fc:
                    0c:23:9c:c2:db:df:78:ac:8c:72:aa:29:ce:48:cd:
                    bf:85:76:4b:25:83:ec:71:1b:d9:a0:46:47:6e:0f:
                    2b:f5:58:14:f0:cc:53:6b:99:e4:12:53:fd:ba:ea:
                    92:81:cd:91:dc:61:64:8f:ab:c2:16:62:fa:4b:3d:
                    de:32:bf:3b:fb:6e:bc:a9:ff:14:53:ed:b4:c8:81:
                    dc:65:d4:eb:7b:1e:d7:6d:1d:f0:43:8b:d5:36:f0:
                    36:75:52:ba:fa:e4:a6:42:7f:b5:88:59:49:a7:94:
                    ed:35:84:83:78:09:22:bd:a3:f2:5e:f9:95:68:d3:
                    f6:79:b3:d1:83:74:1d:eb:d9:eb:db:fa:35:dc:b1:
                    47:28:53:c5:6f:12:91:0c:dc:e4:6c:09:38:ac:4f:
                    30:20:b3:80:bc:59:96:76:4e:75:d3:90:97:de:69:
                    78:34:49:2a:05:26:74:f3:64:bf:7d:d8:5a:52:9d:
                    d9:54:63:b6:57:80:31:5a:10:ba:b5:05:6d:1d:37:
                    20:f0:0d:c5:31:a9:4d:7e:7d:fd:13:98:f6:29:92:
                    59:96:25:03:9a:99:19:fe:21:53:84:f2:50:2d:25:
                    63:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:24:B8:77:79:71:4E:7E:51:B3:DA:E7:DA:84:CC:D2:B8:25:CC:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a/991eca60-b420-37c2-92a4-3a053c9970bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a/d06852c4-a6c0-43d5-ba94-22fab637697a.crl

            X509v3 Authority Key Identifier:
                keyid:30:01:74:AA:E6:45:3E:F4:B4:CD:2F:99:D7:6A:DE:37:8D:43:11:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.72.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:32:68:e1:da:62:09:aa:ba:16:15:51:4b:5d:4b:66:3f:fe:
         15:37:f3:ea:3b:72:cb:24:c8:2d:89:2d:d8:1f:6b:cf:f2:4b:
         7a:cf:12:79:e2:d9:fd:b3:5e:5e:6e:10:1e:de:0c:ae:c8:3f:
         22:54:91:6f:d9:bf:86:5c:db:85:5f:cd:31:39:77:66:75:63:
         08:3d:da:c8:70:7f:87:4e:60:9f:21:6f:26:4b:69:19:11:bb:
         8b:d1:ae:b8:cd:27:0b:4e:02:e1:d0:61:4d:a5:8b:97:b6:20:
         8e:1b:de:ca:ca:c3:d6:8e:59:8e:1f:5b:cf:d3:7d:dc:13:8c:
         87:7a:e4:b0:2d:a0:2d:76:48:71:0a:9c:1b:07:e0:b4:ae:50:
         1e:e2:f5:00:a3:b3:87:a1:67:fa:a8:df:a3:e4:1e:fe:a8:b7:
         26:61:2f:45:0c:ba:cc:6b:0d:dc:97:e6:47:8d:6b:54:ec:75:
         f1:fb:2a:5f:9a:de:01:b9:16:ea:f3:59:f7:40:01:f1:5c:6b:
         85:83:c7:ed:21:b7:a1:e5:b9:34:4c:bb:f8:7c:b4:43:35:39:
         fc:ea:31:87:b3:8c:9b:ae:88:42:fb:8b:d6:5e:3b:cc:b8:ac:
         8b:ad:64:81:df:b3:46:e3:ea:18:29:3f:d8:86:24:60:81:fe:
         e4:2b:b9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:25:14 2026 by rpki-client