Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/75f1dea7-8d30-3854-be8c-05334c3ae86c.roa
File:                     75f1dea7-8d30-3854-be8c-05334c3ae86c.roa (raw, json)
Hash identifier:          AqZNbYfZBWF/USjIEHUO0d7Q3BOpv0fLcQKD6fi/D6M=
Subject key identifier:   08:F0:1A:CB:88:39:92:3A:9A:CE:7E:38:20:49:11:56:46:40:72:67
Certificate issuer:       /CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df
Certificate serial:       010D0C9F4328584EB2B1BB78F6F2EFD0593ED240
Authority key identifier: 97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/75f1dea7-8d30-3854-be8c-05334c3ae86c.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     14618
IP address blocks:        206.225.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:bb:78:f6:f2:ef:d0:59:3e:d2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=4feff003-57f7-49a7-8775-3a896120b25c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:42:0c:2b:cc:f1:f5:db:89:53:e4:53:76:ec:
                    6a:08:8c:85:30:7d:90:59:c3:2f:a9:78:fa:0c:f0:
                    10:9c:4e:a1:ea:84:51:ec:5a:a8:4c:a7:58:a5:fd:
                    f1:f1:2a:3c:38:a2:51:a2:7f:67:a6:e3:25:9b:b4:
                    1b:a5:15:5e:46:7f:11:b6:d3:c3:8d:c0:b1:13:40:
                    e2:4f:9c:bf:e8:4e:fc:f1:22:63:d7:c5:15:72:8e:
                    0e:d1:5b:80:4c:04:0a:bb:d5:5d:b0:9e:05:f7:42:
                    93:2b:d7:d4:3a:4c:29:4c:46:cf:a5:5b:3b:e2:b6:
                    50:c2:6d:a0:46:54:0a:fa:29:6d:fd:b8:0f:4f:14:
                    ba:78:54:1b:95:8d:e5:78:50:92:8d:25:d3:54:f4:
                    42:11:ca:02:2c:e2:3a:20:79:c5:5f:ef:d9:9f:69:
                    b1:8f:ce:72:72:c4:67:d1:3c:b2:9a:ba:15:a7:bc:
                    5c:c1:09:0e:74:8f:bf:09:09:37:20:83:d5:38:38:
                    32:6f:14:03:a4:62:69:29:2a:f9:34:8f:08:61:fe:
                    59:cc:09:7d:cb:32:8d:35:c9:77:1d:ee:0a:0f:56:
                    1e:dc:83:24:53:87:d6:9a:d0:44:f9:37:ad:56:3a:
                    56:0a:33:f0:b5:ef:eb:a4:a8:c2:ce:89:dd:32:ba:
                    bf:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F0:1A:CB:88:39:92:3A:9A:CE:7E:38:20:49:11:56:46:40:72:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/75f1dea7-8d30-3854-be8c-05334c3ae86c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl

            X509v3 Authority Key Identifier:
                keyid:97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.225.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:98:81:ce:35:94:eb:aa:e2:f6:e8:31:f6:57:a1:27:46:e0:
         82:cd:48:db:76:b5:90:7c:00:fb:da:15:c9:96:b3:97:fa:ac:
         62:38:03:be:9f:48:cf:9b:58:b2:33:f9:c6:3c:58:bb:c7:f3:
         b0:74:d0:76:8a:bb:63:0b:52:b2:03:c7:fd:65:1e:7e:6b:76:
         36:ae:5c:af:4c:d3:f3:21:69:3f:d0:39:6d:59:fe:6a:88:9e:
         ae:40:21:20:50:47:bb:65:6f:e6:10:c9:5c:ef:f5:62:9b:e8:
         67:0f:ec:96:6b:54:04:e2:aa:67:e6:01:3b:4b:c3:04:6d:51:
         5f:de:fb:8f:e6:4e:81:19:5d:c1:6d:a7:7a:4d:d1:2e:2a:46:
         39:92:55:b3:9b:99:9a:1c:7b:9b:42:76:ba:16:85:eb:ec:3f:
         72:8f:91:e1:b5:28:bd:06:78:23:b8:63:15:cc:a1:bb:47:bd:
         51:1a:d7:74:4f:da:55:d6:20:cc:19:76:3c:1e:ca:01:c2:fb:
         0b:b4:04:90:0f:dd:cc:3d:a9:92:4a:b2:76:be:82:64:f1:8d:
         0d:a6:e5:46:7e:f8:de:5f:74:29:39:9c:dd:90:b5:9d:24:9d:
         1a:d8:45:03:da:aa:1d:db:44:0e:f7:61:92:fb:1b:8c:bb:10:
         c3:f2:35:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:57:43 2026 by rpki-client