Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/a348add7-76bd-3889-a8e1-e53f45bbfc1a.roa
File:                     a348add7-76bd-3889-a8e1-e53f45bbfc1a.roa (raw, json)
Hash identifier:          cBX4dcqPr2JohGf7YvP2sCITm4yYBmP+1bHPbo0Lgxo=
Subject key identifier:   D2:9E:0F:0B:10:8A:9D:47:1F:41:39:B9:BE:A1:33:C3:19:F7:A1:FB
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F4328584E2AD4502993DCBC19B962EE40
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/a348add7-76bd-3889-a8e1-e53f45bbfc1a.roa
Signing time:             Sun 14 Jun 2026 09:00:11 +0000
ROA not before:           Sun 14 Jun 2026 09:00:11 +0000
ROA not after:            Sat 12 Sep 2026 09:00:11 +0000
asID:                     42
IP address blocks:        206.223.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Jun 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2a:d4:50:29:93:dc:bc:19:b9:62:ee:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: Jun 14 09:00:11 2026 GMT
            Not After : Sep 12 09:00:11 2026 GMT
        Subject: CN=80d055e7-676e-420f-b94b-4b77d3d51282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:83:6c:a0:b9:3d:76:f4:46:e6:03:21:38:52:
                    51:bb:7e:0b:c9:a1:67:00:30:7e:bc:31:55:f0:b7:
                    4c:99:32:28:ea:df:0c:77:74:3c:51:3c:26:58:db:
                    bf:5b:9a:65:8b:6c:48:58:7d:76:78:c1:ca:80:2c:
                    96:6d:7b:e6:0b:ea:9b:5c:4a:b1:3a:3d:99:d4:d2:
                    7f:66:50:7f:48:c2:e7:c6:83:19:49:02:21:a9:ca:
                    23:02:08:78:ac:f7:e0:28:24:ef:6f:3d:e5:13:d6:
                    83:27:4d:0c:82:21:79:f9:21:70:ae:9d:70:ba:37:
                    5f:63:72:d4:cb:da:49:b5:89:e6:26:3c:7f:98:49:
                    f9:14:8d:73:d3:1a:76:5f:a2:51:02:46:d5:e4:85:
                    07:80:a4:de:20:bf:eb:9c:2b:97:31:72:d5:81:80:
                    a7:29:48:40:ea:a3:c0:6e:a7:69:cb:f8:19:fa:48:
                    23:02:aa:a2:9a:58:bc:61:d9:77:90:07:6a:39:64:
                    97:4d:dc:bf:96:83:11:24:b2:66:e6:2d:7a:dc:38:
                    a0:4d:ca:3e:12:bc:d0:49:34:83:c9:e9:7d:72:47:
                    8c:39:1d:c0:ef:74:1a:21:c1:3d:70:c4:d5:fe:9c:
                    8c:47:39:49:ae:45:2b:86:34:f1:2e:ca:75:c7:9d:
                    2e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:9E:0F:0B:10:8A:9D:47:1F:41:39:B9:BE:A1:33:C3:19:F7:A1:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/a348add7-76bd-3889-a8e1-e53f45bbfc1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.223.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:be:83:72:a5:cc:d2:c7:b2:f4:6b:5b:a9:81:55:60:47:cb:
         ef:87:46:ef:57:42:ed:26:93:0d:3d:6d:9b:b2:7d:7a:f3:8b:
         8c:5a:1f:22:71:0e:3d:54:bf:8a:1b:09:6e:54:d3:0b:d6:f0:
         1b:b2:92:b5:c5:61:a5:38:2d:8e:1a:37:1f:84:be:6d:81:ce:
         3d:00:0e:49:47:c9:0e:55:8e:29:73:f6:11:f7:e3:7f:72:cf:
         0c:00:ac:fb:3b:38:5d:c8:c8:19:43:c0:c8:c0:e3:9f:c6:07:
         8a:40:d3:8f:76:f5:86:d9:f5:47:20:c5:d9:74:a7:7a:59:80:
         0e:5d:06:81:68:94:6c:42:75:a1:4a:bc:86:87:42:cf:20:c9:
         5d:c8:a3:70:68:75:66:9e:0f:6d:a4:ae:c8:f1:ba:ba:37:23:
         85:fa:6e:aa:b1:2f:33:b5:36:b4:d7:95:ec:90:88:e4:c0:c9:
         ff:c9:7e:43:05:cf:c5:86:86:38:5d:30:81:fc:1c:d2:82:5b:
         41:2f:09:2b:03:c1:7f:11:0f:12:04:c1:ff:4f:ed:48:4a:b3:
         67:c9:c4:73:4c:dd:4c:76:d4:e6:8d:78:ee:0a:73:62:7e:c3:
         9f:54:e3:e0:5a:5a:10:09:b1:b4:a2:c5:67:b1:d7:c8:31:f4:
         c6:8d:17:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 04:16:35 2026 by rpki-client