Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/03f0fa2f-ffdf-386b-a164-9e29718071ae.roa
File:                     03f0fa2f-ffdf-386b-a164-9e29718071ae.roa (raw, json)
Hash identifier:          zb2ZUitknxm4uLNSsuHiZVi2aGKPL3bU8QUlowUG2Gc=
Subject key identifier:   5E:E3:99:5C:96:DD:DC:B5:CA:DF:36:00:1E:FD:4E:6C:09:88:05:69
Certificate issuer:       /CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Certificate serial:       010D0C9F4328584F093CD812F28F09A1AC8C3880
Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/03f0fa2f-ffdf-386b-a164-9e29718071ae.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     51964
IP address blocks:        206.48.0.0/16 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:d8:12:f2:8f:09:a1:ac:8c:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=387ab240-9c3b-4958-8cb5-613a724eda25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7d:db:8c:f4:2a:1b:eb:39:7a:3e:88:1d:6e:
                    ae:e9:f9:78:f8:e4:27:14:4e:24:69:5d:0d:89:7b:
                    2b:99:73:b6:ed:c3:c9:48:2a:9d:f2:b1:02:19:22:
                    30:c9:d3:3b:38:e3:c8:f0:4a:5f:f7:1f:ad:e5:81:
                    ee:70:6f:55:fb:97:91:8e:eb:47:6c:7e:ad:99:10:
                    0c:29:52:60:f8:61:e1:69:d4:9a:55:b4:b8:7d:4e:
                    6e:78:90:79:8d:ef:ac:87:62:39:77:e3:16:c2:ef:
                    c4:c7:99:a3:28:73:e1:d1:af:42:b1:00:52:3e:05:
                    2f:49:3a:3e:2a:c7:07:39:39:2f:71:ac:41:19:d7:
                    11:50:b5:d2:3e:58:3b:a8:ec:cf:2b:42:1e:24:3c:
                    e9:d4:3b:e0:0f:90:6d:77:d8:a1:56:79:7f:c4:8c:
                    90:5e:58:bc:26:7d:13:57:dc:e4:88:73:46:9e:62:
                    a7:59:fa:0e:0a:a3:2a:82:27:28:4d:1e:ba:e3:24:
                    48:84:29:d0:e4:0a:f2:28:6d:96:de:61:28:ac:35:
                    d0:60:0b:2d:f2:cb:d7:a4:1e:1c:51:61:0e:24:db:
                    de:db:72:07:55:e1:80:d2:6c:f6:92:ec:4b:f1:f4:
                    70:b7:60:e8:7a:40:b5:d0:78:ee:96:51:8d:9e:40:
                    43:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E3:99:5C:96:DD:DC:B5:CA:DF:36:00:1E:FD:4E:6C:09:88:05:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/03f0fa2f-ffdf-386b-a164-9e29718071ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl

            X509v3 Authority Key Identifier:
                keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.48.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:c0:23:11:d4:55:c4:50:c1:c9:57:4e:d2:ed:47:ea:18:c8:
         01:3c:b3:8f:56:8f:a1:1b:74:9c:fe:e2:b5:41:f7:97:1b:d4:
         50:13:71:7e:ba:f0:bc:d1:83:d5:41:96:32:24:57:2a:3f:89:
         0f:d3:f7:88:78:05:7d:f8:e3:6c:a8:cf:83:cc:99:b7:dc:b4:
         22:a1:c6:7b:b6:c3:1c:15:21:f3:8e:aa:01:dc:bf:99:0a:ce:
         17:ed:2f:94:6c:e5:a5:4f:26:32:37:75:3e:b4:e1:68:36:c2:
         84:20:61:d3:a2:32:2d:1b:54:41:25:d5:d0:f3:f0:fc:4e:7b:
         0b:82:32:97:4a:ba:2d:d7:34:88:78:d5:d3:d6:0e:5d:45:79:
         32:61:c4:8f:02:48:94:d6:fb:18:5f:5d:03:cf:32:16:4a:18:
         cf:8e:ed:1f:3c:9f:4c:c7:63:9e:42:20:77:27:8c:83:93:f9:
         ac:86:a8:d1:ad:6f:b5:b2:43:38:8a:dc:86:b1:c4:10:0b:23:
         a8:51:3e:e5:f1:40:8b:8a:0f:2f:0d:a5:d4:8b:97:e3:8a:e9:
         11:84:5c:64:56:b3:97:a2:df:8a:fa:b6:04:c3:95:1f:ce:ac:
         38:01:4d:8d:f2:dd:ae:b5:f7:32:9a:fd:70:17:ce:85:2e:d2:
         91:53:10:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:41:38 2026 by rpki-client