Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4c00d91f-7eba-3809-bf3f-f8aa74ae9e82.roa
File:                     4c00d91f-7eba-3809-bf3f-f8aa74ae9e82.roa (raw, json)
Hash identifier:          uQPTbYf4vQ0MuXKoa+gezh5de0CHqAozRWfk/X+dPX0=
Subject key identifier:   9F:D0:50:76:3F:CA:53:AB:FF:AF:44:A5:F5:BE:32:D0:1C:51:33:0D
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584EBB11BA0CD4865CD06A9ECA80
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4c00d91f-7eba-3809-bf3f-f8aa74ae9e82.roa
Signing time:             Wed 05 Aug 2026 01:00:12 +0000
ROA not before:           Wed 05 Aug 2026 01:00:12 +0000
ROA not after:            Tue 03 Nov 2026 02:00:12 +0000
asID:                     26842
IP address blocks:        206.132.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bb:11:ba:0c:d4:86:5c:d0:6a:9e:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Aug  5 01:00:12 2026 GMT
            Not After : Nov  3 02:00:12 2026 GMT
        Subject: CN=81375c06-d709-4b6f-87b4-6582118080d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3f:b5:8d:f6:ed:63:a6:51:b8:a9:02:47:88:
                    3d:91:89:e8:6b:5a:3d:42:3a:61:5f:4a:29:6e:83:
                    11:de:67:b0:74:01:96:6e:73:ba:c5:53:d2:76:74:
                    f1:5d:29:ba:fb:fa:79:d8:11:19:42:e6:3f:94:5a:
                    37:9f:07:f5:a0:b3:5a:17:b0:f8:c0:c3:5b:73:d5:
                    be:68:80:c6:69:77:bc:85:7e:b4:fb:dc:ac:22:9f:
                    e4:b3:6c:b2:90:c4:d8:9b:5a:0b:b0:65:33:0d:49:
                    a5:9d:b7:3c:22:2c:71:20:95:c5:bb:1a:74:27:da:
                    58:c0:29:86:32:e8:96:c4:99:ee:fb:cd:e2:01:31:
                    38:d4:d2:67:da:0f:d0:ed:3c:b5:e6:e4:83:33:b1:
                    ce:29:08:64:70:2e:6b:0b:28:29:4a:09:99:cf:fb:
                    a7:45:99:35:88:cf:6c:83:59:34:cc:13:94:99:61:
                    c3:bc:a8:3d:a0:2d:aa:79:56:c7:5c:88:90:20:78:
                    bd:da:e4:66:11:65:26:fb:38:89:7c:92:fd:ab:71:
                    37:bb:6d:99:6c:b7:c7:1d:76:96:dd:d8:77:a9:fa:
                    29:7b:08:bd:da:de:6c:5e:c5:90:1c:02:70:3f:46:
                    ef:81:8c:d3:02:9f:26:20:1e:1c:c8:0c:51:5d:a2:
                    f4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:D0:50:76:3F:CA:53:AB:FF:AF:44:A5:F5:BE:32:D0:1C:51:33:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4c00d91f-7eba-3809-bf3f-f8aa74ae9e82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.132.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:21:75:a5:e4:ad:0a:7d:2c:52:e3:77:f2:e6:fd:f3:1d:a7:
         80:8a:82:3a:05:b5:b8:0c:53:4e:96:fd:f5:4e:74:1b:ca:ed:
         8f:50:f7:27:39:eb:77:b1:f0:af:d7:f2:61:a1:40:63:8b:a8:
         61:ba:e7:08:ae:eb:d9:3b:fb:1f:05:1c:83:ae:58:2b:6c:6c:
         f6:a5:4d:e9:ac:e6:10:13:54:60:cf:b2:0b:29:b8:27:0b:a8:
         91:78:fd:de:c1:b7:a2:11:8e:29:4e:a4:60:b0:36:11:f1:10:
         80:73:01:d8:f2:69:f1:d8:45:c4:3d:21:d8:bd:13:78:6a:87:
         de:e6:39:dc:e6:87:94:4b:2d:25:4c:49:8d:a4:f8:73:e0:33:
         b4:71:a8:31:5b:0f:d0:af:04:ee:e9:36:d1:60:f3:e6:5c:58:
         1a:ab:12:91:e5:75:75:b5:20:a6:48:ef:34:3f:7a:6e:e4:f4:
         81:4a:00:5f:6b:33:25:a9:7e:3e:bf:aa:e5:e3:98:c5:3e:28:
         1d:56:b8:39:10:0e:85:cc:fd:20:4f:1c:35:a4:6d:d6:0b:86:
         8d:26:b4:e5:1d:0e:75:9b:e7:51:9c:d9:d6:f9:b2:7e:bf:50:
         87:2b:9c:b4:1e:69:df:9a:f3:40:30:d9:fd:d2:3e:77:ac:c8:
         21:3e:cf:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:34:01 2026 by rpki-client