Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/d6ce81f6-1f83-3c06-865b-0cd8d0bca45b.roa
File:                     d6ce81f6-1f83-3c06-865b-0cd8d0bca45b.roa (raw, json)
Hash identifier:          mQmVjXZXsHiH1CCTGUcBm/DBz6YaNhwnA4q1GVODc3s=
Subject key identifier:   DC:D7:67:4D:7C:C4:1D:CB:4A:CC:53:C2:07:22:D9:06:FE:4A:54:02
Certificate issuer:       /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Certificate serial:       010D0C9F4328584E640FCA67CFD59EB07545F880
Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/d6ce81f6-1f83-3c06-865b-0cd8d0bca45b.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     6922
IP address blocks:        206.76.128.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:ca:67:cf:d5:9e:b0:75:45:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=c80ba529-8a47-4643-8026-98cf039595a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1b:0d:81:52:9d:28:02:6b:96:d0:c5:74:6b:
                    dc:07:51:85:b0:75:66:cd:86:25:c9:bb:b5:08:f5:
                    9d:be:d9:b9:e0:ac:a7:e3:37:39:29:49:af:95:08:
                    f0:fe:a6:16:70:96:25:8d:34:1f:48:c1:a3:3c:8f:
                    61:66:4c:6f:7b:80:07:df:6f:4a:20:59:39:ad:aa:
                    8a:c2:c1:99:83:96:a1:33:f7:e7:e9:3d:22:f5:2a:
                    c3:04:2d:03:25:63:85:f8:24:be:32:30:b4:f4:32:
                    95:a4:ca:00:3b:a7:02:5f:ed:7b:44:b4:28:ea:0b:
                    d9:d0:c0:38:09:6b:b0:67:50:5d:1f:b6:64:bb:cc:
                    a2:ae:6b:ba:bf:38:f5:2b:5b:d3:2f:9c:9c:de:51:
                    9b:d6:c2:da:30:cf:a1:49:6b:75:5f:f3:af:99:01:
                    13:71:af:5a:ef:a4:ed:8c:8e:bf:db:8d:e5:1c:3e:
                    70:6c:af:0c:37:52:a0:1b:b3:f0:3b:ac:33:92:84:
                    5c:87:bd:65:e7:3a:27:24:78:38:22:d1:ab:5c:a8:
                    41:2f:97:e2:e1:18:92:51:f5:84:90:d8:6d:ba:4a:
                    6f:9d:c7:5e:55:32:ee:d2:64:fa:6e:e4:36:e0:3a:
                    f3:60:06:bf:1b:d1:e0:71:4a:cb:d4:25:60:37:5e:
                    0d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:D7:67:4D:7C:C4:1D:CB:4A:CC:53:C2:07:22:D9:06:FE:4A:54:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/d6ce81f6-1f83-3c06-865b-0cd8d0bca45b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl

            X509v3 Authority Key Identifier:
                keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.76.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:a1:a0:cd:cd:d1:44:ea:b3:17:7d:fe:8a:a3:e3:60:db:14:
         8d:d0:26:0e:04:fa:3d:10:f4:ba:98:92:ae:5d:84:33:c9:9a:
         a2:00:88:88:56:17:07:5e:b9:1c:a7:c7:5e:97:08:17:78:39:
         8b:46:60:86:58:c8:bf:ab:23:42:b1:37:66:73:5f:62:af:2c:
         3b:d8:e6:34:13:47:c2:5f:ed:38:fd:9f:aa:87:c8:b9:d9:4b:
         f2:a7:16:ef:f6:20:31:07:d0:59:0c:a7:d5:95:12:9c:d9:68:
         ea:df:28:15:c3:6e:3d:bf:9d:03:7a:95:63:ea:9b:49:8b:c5:
         50:9d:f6:fb:9a:ac:03:09:74:b9:95:79:e5:3f:9f:9c:8e:9d:
         ec:64:0d:ef:55:8d:bc:a1:59:67:53:b3:65:93:87:d0:c5:81:
         eb:49:d7:5c:c9:9a:e8:b7:05:8f:f3:e1:5a:69:55:39:e2:a7:
         96:c8:ba:03:96:11:71:f0:77:e2:94:8a:8e:11:13:2c:d7:47:
         1a:01:c5:9f:4c:26:50:a6:e8:6c:ef:32:52:7d:b3:0c:51:c9:
         4d:eb:ed:9c:83:89:f5:54:58:93:85:e8:f0:eb:fd:a3:95:79:
         f3:cb:d3:ce:9f:70:3c:27:07:5a:dd:70:ab:d0:2e:b6:b9:5d:
         84:38:1c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 19:54:10 2026 by rpki-client