Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/6b928916-b6f7-3e93-aaf9-9be7791af5ec.roa
File:                     6b928916-b6f7-3e93-aaf9-9be7791af5ec.roa (raw, json)
Hash identifier:          yYMwl8mlNPJfFkYPOvX2TbXRm6LpaNYz3r9zh4DLg4w=
Subject key identifier:   30:C6:D5:26:16:70:8B:9E:31:6F:57:7D:8E:7E:22:AC:25:F5:B0:04
Certificate issuer:       /CN=d6b690dc-d325-42b2-9834-06e4a779b209
Certificate serial:       010D0C9F4328584EED521BDE76291F72AC298A40
Authority key identifier: ED:44:13:86:A1:CB:9D:F3:26:B2:37:C2:5B:BF:98:C4:EF:D2:5F:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/6b928916-b6f7-3e93-aaf9-9be7791af5ec.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        204.152.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:1b:de:76:29:1f:72:ac:29:8a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6b690dc-d325-42b2-9834-06e4a779b209
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=850b6887-a5e5-404a-9718-251231914904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c4:2e:06:69:30:8d:e0:ee:60:d5:d4:41:bb:
                    2b:5b:59:ea:aa:6c:38:6e:29:8c:c8:58:57:32:ae:
                    01:24:e6:4f:01:19:4a:85:96:68:a9:71:8f:e3:24:
                    36:4b:d2:eb:fe:fe:bf:d6:8a:21:84:a0:38:cb:ba:
                    9d:79:58:70:89:5e:cd:04:47:43:cd:a2:b0:82:3c:
                    21:0b:1c:43:6e:98:70:24:43:2c:35:4d:93:17:07:
                    72:4f:ec:54:2b:a1:f6:39:c5:b3:be:7c:41:7d:6a:
                    b2:73:ce:8f:4f:70:13:76:91:76:6e:45:60:df:64:
                    1f:30:bd:0f:e7:71:9a:ca:d4:cb:fc:c3:5f:62:a4:
                    eb:e3:68:b2:ab:9c:a1:81:a8:32:f3:3c:c3:7b:07:
                    15:56:5c:e3:a7:7f:3f:5f:6c:e4:4b:df:2c:0a:65:
                    e1:3a:db:18:a8:28:9c:1b:47:d1:2f:5f:7d:40:03:
                    1b:77:33:3e:1d:c5:1c:ea:92:67:90:8d:39:9d:3c:
                    f0:22:3a:4a:16:c4:8c:3d:e2:a0:95:89:bc:ea:93:
                    ba:dd:b1:2d:f1:64:46:14:74:ed:7e:c8:08:95:4e:
                    d2:4a:26:e8:b1:ce:d7:6d:93:b4:40:d7:a9:5b:ed:
                    a9:dc:aa:8c:60:82:33:b8:6f:1b:8d:18:a2:98:19:
                    9a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C6:D5:26:16:70:8B:9E:31:6F:57:7D:8E:7E:22:AC:25:F5:B0:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/6b928916-b6f7-3e93-aaf9-9be7791af5ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.crl

            X509v3 Authority Key Identifier:
                keyid:ED:44:13:86:A1:CB:9D:F3:26:B2:37:C2:5B:BF:98:C4:EF:D2:5F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.152.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:ed:b6:8d:e1:84:4c:02:89:7b:7a:29:c8:97:40:72:81:97:
         56:f8:86:49:a8:f4:1b:e0:72:93:57:98:6a:41:8e:6e:14:49:
         9a:cc:c5:42:13:04:8a:81:80:73:27:66:da:dc:55:b1:fb:57:
         f3:e0:69:88:45:c0:ee:d7:cf:bb:7f:e5:48:c6:e6:d2:64:5c:
         86:70:22:f9:bb:09:81:2f:79:d6:6b:9b:53:eb:82:49:40:4f:
         d7:03:f6:3c:cc:4a:e9:4d:f8:bb:6e:4d:65:17:02:a4:4a:52:
         5c:c5:66:e8:94:6e:b2:84:90:6d:f5:0a:41:6f:1c:83:6b:c4:
         bb:5c:8e:be:fc:b3:2d:7b:90:14:bf:88:9c:c1:4e:d0:a9:40:
         4e:0b:79:28:15:29:6d:41:56:dd:2f:f1:05:fb:90:6d:0e:30:
         e2:59:49:fa:90:05:39:72:b2:35:24:15:77:fc:bd:26:14:e4:
         e5:84:58:c2:04:8c:5f:f3:73:47:76:7d:9a:9e:11:29:56:22:
         29:4a:fb:cd:1e:f6:a3:f6:7d:c5:b2:ff:79:a0:d4:52:e0:55:
         1f:aa:6d:67:99:63:e8:13:24:47:61:1e:fe:61:9c:b2:9f:6c:
         08:17:7a:01:06:93:36:57:52:62:7f:57:65:51:89:fd:bc:f5:
         5c:64:dc:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 14:59:07 2026 by rpki-client