Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2daa1835-af36-3b67-b996-075a9eb64186.roa
File:                     2daa1835-af36-3b67-b996-075a9eb64186.roa (raw, json)
Hash identifier:          tCMzxTkq2+NgCkdEnXTQZg56xHa94b+b+Q6gF8T94x4=
Subject key identifier:   AD:BD:3D:33:7B:D2:84:8A:64:FE:2A:AE:A2:39:42:60:94:A5:D9:86
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EE38CAF54C8E5E9B74829BFC0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2daa1835-af36-3b67-b996-075a9eb64186.roa
Signing time:             Wed 19 Aug 2026 13:00:11 +0000
ROA not before:           Wed 19 Aug 2026 13:00:11 +0000
ROA not after:            Tue 17 Nov 2026 14:00:11 +0000
asID:                     30036
IP address blocks:        206.226.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e3:8c:af:54:c8:e5:e9:b7:48:29:bf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug 19 13:00:11 2026 GMT
            Not After : Nov 17 14:00:11 2026 GMT
        Subject: CN=580381c3-625e-4ea8-8785-e944195fb408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c4:02:77:b5:1e:ad:26:a4:73:d1:0b:06:e5:
                    cf:2e:80:64:0a:25:45:4d:17:8b:6c:6a:74:b0:11:
                    a5:5e:63:27:44:86:de:11:0b:c3:0b:25:18:84:25:
                    ea:b8:07:b0:07:18:8f:81:0b:b3:96:3b:a9:b7:cc:
                    a3:ed:9b:83:69:49:0a:b5:08:4c:b2:b8:74:57:52:
                    ee:9b:b5:c6:cd:f6:42:df:db:cc:e6:de:46:7e:6c:
                    40:f1:5d:55:fc:1e:f1:cb:61:27:63:b7:7c:9e:e9:
                    97:4a:10:7e:49:e1:be:fd:fd:a9:47:b5:2b:1c:3e:
                    37:da:bd:a0:bf:d4:0a:46:89:9c:3e:68:75:98:60:
                    10:4c:5a:14:3d:58:06:38:cc:33:b8:83:df:ae:a3:
                    05:5f:cc:a4:f7:39:18:77:a8:d6:21:e9:9f:d4:d3:
                    ac:3d:50:62:2d:da:c6:14:2d:b6:be:ce:ee:6a:eb:
                    c9:fa:6d:c8:eb:b4:a6:53:3a:31:19:ea:fc:0a:c4:
                    cd:35:ee:b4:97:63:c2:db:34:af:d3:cd:1d:cb:1a:
                    f7:ee:c7:bb:37:b4:52:ba:a3:58:cf:3e:49:b2:44:
                    17:85:0e:a7:e1:8b:7e:1e:78:c8:63:65:2f:03:ef:
                    36:da:a3:0b:4d:b8:80:4e:7a:b9:6a:9f:88:5a:dd:
                    52:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:BD:3D:33:7B:D2:84:8A:64:FE:2A:AE:A2:39:42:60:94:A5:D9:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2daa1835-af36-3b67-b996-075a9eb64186.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.226.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:a4:c8:2f:3c:24:06:68:b7:5d:86:54:2b:ab:ba:bc:8d:56:
         01:bb:11:f6:70:c5:84:51:26:a2:76:70:78:8e:17:fb:b9:bd:
         4a:4c:90:e7:0b:1c:1c:d1:b9:75:91:ef:2e:f4:fe:af:6a:2c:
         63:e6:30:4f:7d:1e:2b:35:4f:04:13:5a:0f:53:04:45:57:b0:
         99:3e:d9:d7:7e:f8:29:bd:ee:f9:fd:e1:9f:5f:56:41:b6:b6:
         6b:3a:79:aa:3e:df:65:ec:f7:bf:49:77:61:8d:f9:22:aa:fa:
         50:d7:8a:eb:c2:23:35:8b:26:7a:fb:98:74:18:2a:cf:a0:fb:
         17:db:a9:6f:ee:a7:dc:1c:8a:55:78:e0:59:d0:d6:a4:60:60:
         0c:46:a2:d5:b6:09:f0:9e:a5:8b:4a:60:db:9d:0f:50:e0:48:
         27:6f:e6:33:9f:94:5f:8e:48:9c:d3:7c:73:2f:f8:d2:fc:d7:
         b8:f4:5a:ac:d5:79:da:49:b7:92:a5:2b:6b:85:9d:30:d2:3a:
         fa:ae:55:43:2a:0c:7d:86:89:cd:16:f8:e9:d4:db:7b:8b:96:
         79:88:ba:09:0c:f5:72:55:11:b0:e8:2a:7a:9f:1d:84:b4:c6:
         1b:b9:6f:4c:45:15:ad:73:b6:ad:3a:c7:ea:49:ed:2f:d4:7d:
         1d:79:43:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:09:50 2026 by rpki-client