Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/be682f24-2196-33fe-b841-d4aebf1eeb64.roa
File:                     be682f24-2196-33fe-b841-d4aebf1eeb64.roa (raw, json)
Hash identifier:          oT3MWLSNTB2HwfIrLw+vsa/A7gjNrUuXk9Yg7qR5qM4=
Subject key identifier:   5E:58:FE:6F:D6:A2:79:39:B8:A2:0B:4D:D1:9F:3C:6C:0F:BB:32:AA
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584E709F718E0499E89A9F0197C0
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/be682f24-2196-33fe-b841-d4aebf1eeb64.roa
Signing time:             Thu 09 Jul 2026 09:00:13 +0000
ROA not before:           Thu 09 Jul 2026 09:00:13 +0000
ROA not after:            Wed 07 Oct 2026 09:00:13 +0000
asID:                     3561
IP address blocks:        206.154.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:70:9f:71:8e:04:99:e8:9a:9f:01:97:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Jul  9 09:00:13 2026 GMT
            Not After : Oct  7 09:00:13 2026 GMT
        Subject: CN=90ce821b-2bbb-417c-ad5e-272b4bea3562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:37:02:83:ab:64:3b:08:38:d2:c3:ee:42:42:
                    c3:cf:1b:6c:c8:42:5e:71:be:34:99:04:9c:18:87:
                    a8:4f:40:b9:e8:31:80:b9:bd:fc:e0:d3:c5:98:f0:
                    23:ef:07:08:ca:81:ed:28:c9:10:00:24:a4:d8:72:
                    93:0d:53:11:cc:2b:9e:fa:f3:ec:34:f5:19:9a:64:
                    f5:97:0e:29:24:62:51:74:61:00:5e:ac:78:bb:cb:
                    11:86:28:64:3d:10:16:1e:0f:59:cd:28:69:c6:f7:
                    57:95:36:2e:f6:b1:68:ba:e4:b2:5c:82:15:d7:d6:
                    eb:56:d1:35:28:c0:1b:3c:59:bd:c1:3d:9b:93:6b:
                    7f:de:10:19:2a:59:79:33:ac:e5:52:01:71:5b:88:
                    51:ad:a1:e5:e9:30:16:c5:6f:20:63:b3:92:07:37:
                    48:ce:1f:e0:f5:f2:e7:f4:b4:3d:e2:5d:0d:0f:8c:
                    a9:56:9d:79:64:ad:f6:07:fc:d1:ef:a7:8c:dd:9d:
                    fb:d6:3c:db:69:d0:34:b2:fa:06:90:d1:29:e5:81:
                    c2:4b:2e:fe:cc:12:35:f4:3d:6c:d6:ec:fb:b5:00:
                    c4:fb:4f:aa:59:ec:b1:54:ed:b0:8b:e8:5c:fa:38:
                    00:db:f7:b0:ff:52:83:d7:57:b2:a8:88:e0:c9:f4:
                    d5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:58:FE:6F:D6:A2:79:39:B8:A2:0B:4D:D1:9F:3C:6C:0F:BB:32:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/be682f24-2196-33fe-b841-d4aebf1eeb64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.154.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:b9:7a:da:3f:3d:12:cd:08:91:20:20:46:ab:b1:0f:21:7a:
         d6:a6:05:25:9a:20:6f:1e:94:27:bc:5e:cd:00:ff:ca:b0:71:
         76:7c:56:c7:7d:c8:da:d7:59:e3:4a:1b:6a:8f:c7:c4:19:90:
         bc:16:67:fd:95:db:f2:d0:52:87:37:50:5e:25:26:e0:92:1d:
         f3:80:fe:ae:42:fb:8c:f8:c2:d0:ed:dc:0b:2a:33:c0:7c:a5:
         9c:78:75:36:34:16:3f:16:9d:ab:dc:62:6b:44:e0:51:53:8d:
         52:a2:63:0c:8e:ac:0e:ad:33:21:3a:2c:23:8f:03:5f:1a:6c:
         77:df:2d:7f:94:32:88:d6:9e:da:79:6a:0d:8d:1f:dd:dc:9d:
         ba:87:93:59:4a:b2:30:38:b5:f3:4b:ac:91:79:4e:53:8a:d5:
         df:db:3b:5f:cb:94:f9:0f:2e:dd:5d:66:15:2c:b3:18:66:ba:
         59:6c:9b:21:11:5b:98:c8:5b:54:a0:c3:c0:89:65:05:7a:1c:
         83:77:a6:d6:e8:82:66:45:96:ac:f9:df:c8:9f:eb:e8:d5:a1:
         1a:25:26:6e:08:8b:d0:17:ea:6f:00:d9:dd:c1:19:a0:77:1c:
         e9:bb:4c:52:28:ec:70:e5:b5:2f:39:cd:a9:76:f0:7e:e1:af:
         a0:14:33:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 14:08:52 2026 by rpki-client