Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/d54ca7c5-5fd3-35a3-ae19-40d230ab7e5c.roa
File:                     d54ca7c5-5fd3-35a3-ae19-40d230ab7e5c.roa (raw, json)
Hash identifier:          wjxB2fKm02EAQLRE/X6AhoMqCWXOAbhnO9NQCfVjD8E=
Subject key identifier:   7F:A2:70:A6:40:D3:0C:9E:BF:F4:AD:29:D6:5E:F0:A3:B7:6F:C9:35
Certificate issuer:       /CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df
Certificate serial:       010D0C9F4328584E2D9F14A39F7B930A130CC300
Authority key identifier: 97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/d54ca7c5-5fd3-35a3-ae19-40d230ab7e5c.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     16509
IP address blocks:        206.225.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:14:a3:9f:7b:93:0a:13:0c:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=117011dd-fc5d-4129-9a77-f905520b1f97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4c:05:30:b0:96:d1:87:50:66:1d:64:a4:2b:
                    9f:34:78:01:ce:12:98:8d:55:54:5b:80:c2:87:00:
                    cd:a9:ff:10:65:da:cd:4e:d1:29:a3:6f:25:75:03:
                    b8:1b:25:9a:05:1b:a4:36:33:3d:86:02:85:70:69:
                    81:5a:88:38:9a:3e:a0:83:60:35:45:c4:5b:bf:4e:
                    36:02:ca:95:34:86:67:6d:ad:ff:cc:1b:5f:59:37:
                    4b:c7:33:3d:e3:5f:90:66:51:05:9b:c7:98:fe:86:
                    01:73:d8:ea:30:f1:d9:24:cd:66:6c:b0:74:17:80:
                    91:6f:17:cc:f2:31:99:32:76:b3:0b:ea:d1:69:ce:
                    6a:5a:d4:19:cf:5a:a2:e7:e6:04:d3:ad:b8:df:39:
                    93:0e:b2:5d:7a:26:60:f7:9f:e1:f9:ff:a9:18:61:
                    d3:cf:12:14:90:1f:87:f7:a9:a6:92:f3:1f:59:04:
                    21:5a:55:20:92:38:2b:8c:ed:d5:94:92:18:9b:a4:
                    10:5b:3e:51:a8:20:4c:b4:23:83:0f:c9:99:b4:03:
                    8b:fd:bc:05:50:d3:4c:44:d3:15:ff:d8:d5:cb:9b:
                    27:90:39:55:17:db:e2:0e:47:2e:ac:cd:ad:76:2c:
                    f3:d8:26:e4:b7:b1:49:6b:ee:1d:8d:b7:e9:54:b8:
                    33:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A2:70:A6:40:D3:0C:9E:BF:F4:AD:29:D6:5E:F0:A3:B7:6F:C9:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/d54ca7c5-5fd3-35a3-ae19-40d230ab7e5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl

            X509v3 Authority Key Identifier:
                keyid:97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.225.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:1a:bc:c3:a9:2b:ac:1f:6b:b1:c1:f2:9f:fb:39:03:4a:84:
         54:6b:34:ce:dd:35:7d:1f:4e:8d:cb:46:54:bc:52:7d:26:66:
         81:ef:9c:55:db:93:66:15:24:7f:66:ab:79:99:c0:a0:34:c7:
         48:9d:30:ed:57:5f:b2:ec:26:95:3d:04:b9:18:6f:89:a7:f9:
         22:c1:bb:85:c6:17:2a:b2:0f:e9:92:b7:c6:63:15:c3:db:82:
         48:21:e0:a9:3e:6b:bf:af:96:2d:6e:27:b5:4b:0d:7f:cc:03:
         81:4d:15:46:a8:89:51:8c:4d:2f:c1:80:a0:1a:2b:ad:9d:ae:
         f6:30:5d:e8:34:db:63:57:b3:9a:d7:e4:ce:fa:72:31:a8:2f:
         fa:ff:29:2b:0c:de:ab:42:53:4c:fa:5a:d1:47:97:16:eb:0e:
         64:92:f2:d2:08:a8:a2:bb:74:70:cf:64:52:18:a1:ec:84:e9:
         0a:24:a7:40:e3:57:1d:09:68:82:5f:1b:ce:d8:45:f9:8b:19:
         15:9f:35:ec:91:dc:20:bb:47:b0:42:3b:ab:49:b2:a8:b6:45:
         d2:bd:70:ea:e7:c0:43:cc:b1:be:53:fc:dc:a7:65:60:15:46:
         22:69:ed:d9:74:9d:47:7b:a3:c3:f0:c3:37:3c:f2:55:93:f3:
         53:93:f6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 22:32:54 2026 by rpki-client