Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494/a96f000e-3ea0-3413-9d0e-ef701db4c430.roa
File:                     a96f000e-3ea0-3413-9d0e-ef701db4c430.roa (raw, json)
Hash identifier:          KGsc0+Qzv8HDIwEWOmFo5Lmc2QidKKMexhZkQjfXEBQ=
Subject key identifier:   93:2F:FD:AC:35:DB:08:3B:6D:3A:B6:05:15:F1:F6:8F:3C:14:14:C1
Certificate issuer:       /CN=1c680bf8-5a8c-4dd5-865a-c38a50946494
Certificate serial:       010D0C9F4328584ED001F7737074CB197275EE00
Authority key identifier: 4C:0A:2A:8B:E7:3E:A4:60:D7:F0:66:7C:77:65:34:5A:CA:95:4E:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494/a96f000e-3ea0-3413-9d0e-ef701db4c430.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     40676
IP address blocks:        206.183.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494/1c680bf8-5a8c-4dd5-865a-c38a50946494.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494/1c680bf8-5a8c-4dd5-865a-c38a50946494.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:f7:73:70:74:cb:19:72:75:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c680bf8-5a8c-4dd5-865a-c38a50946494
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=f9b357bb-a928-4d22-9222-f32615f95db5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7f:f6:44:bb:7a:43:4b:0d:d3:f5:11:95:fe:
                    24:6b:c7:29:b0:06:11:d2:14:36:47:07:d1:10:81:
                    e5:d2:71:33:1f:6a:14:1b:f4:6b:d2:42:ce:c2:9a:
                    77:59:e7:77:de:55:ff:e0:10:60:7c:21:4f:d5:2b:
                    b9:0d:0a:f9:da:1c:3f:64:16:d4:01:34:4a:4f:a8:
                    8b:c7:a8:a7:c2:97:e7:34:9c:f5:1c:cb:7d:50:89:
                    4b:3d:41:66:66:7d:5a:e5:c4:a0:7c:d6:6b:be:a2:
                    62:35:d3:2d:9c:3a:05:67:d8:1a:75:64:fa:c0:4c:
                    39:c2:d3:c3:18:74:89:1d:53:1f:ba:da:76:14:b6:
                    f5:2a:0f:c2:a4:c1:25:db:89:fe:b7:15:46:f2:f7:
                    a9:37:92:3b:ea:da:6a:6d:df:07:22:24:8f:8e:de:
                    be:6c:33:ce:9b:00:cc:b3:c6:9d:7c:50:73:0b:1e:
                    ec:25:4e:57:e7:b9:5c:50:41:03:df:10:38:2f:1a:
                    b0:46:2a:49:0d:66:e3:6a:41:4b:b1:7d:88:61:b4:
                    b6:39:55:87:5c:ec:ac:ef:4f:1c:06:49:c0:30:fc:
                    75:b2:e3:28:8d:b6:dc:52:88:78:f8:85:96:e9:f2:
                    b7:c0:67:3b:cb:00:29:c9:77:3d:fa:e8:bb:f9:66:
                    55:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:2F:FD:AC:35:DB:08:3B:6D:3A:B6:05:15:F1:F6:8F:3C:14:14:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494/a96f000e-3ea0-3413-9d0e-ef701db4c430.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494/1c680bf8-5a8c-4dd5-865a-c38a50946494.crl

            X509v3 Authority Key Identifier:
                keyid:4C:0A:2A:8B:E7:3E:A4:60:D7:F0:66:7C:77:65:34:5A:CA:95:4E:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.183.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:ff:7d:63:93:7a:b7:40:88:27:33:4c:f3:db:02:e8:f9:c9:
         9c:8b:41:d1:03:db:f3:9e:25:c5:d7:4e:48:ab:d1:e6:3b:ff:
         ff:e7:45:fc:e4:39:c0:17:02:3b:39:c3:45:5d:a6:48:7e:ce:
         bc:d1:0b:eb:c5:58:6e:ed:9c:c4:2d:33:23:ee:5e:fc:fc:d6:
         91:bb:c6:9a:62:a8:90:41:0e:66:6e:39:3e:97:52:d8:3c:58:
         0e:03:42:9e:12:c5:b9:9b:1c:f5:85:b5:02:4c:08:ba:0f:d2:
         07:cd:df:30:c4:fb:91:31:b4:7e:75:62:18:46:00:8f:f0:42:
         80:98:f2:5f:f9:f5:49:42:7e:93:11:87:df:0e:c7:44:e0:10:
         00:a8:f3:10:8f:bf:56:97:f3:ed:41:ea:5b:42:04:c4:12:a9:
         6c:5a:99:2c:06:80:ae:bb:31:ae:53:66:39:5b:e7:c9:4e:6d:
         f5:37:1f:79:07:df:c9:81:dd:46:51:2c:38:6b:e6:c2:e1:27:
         72:7d:27:fd:b0:d5:b6:75:47:b2:de:f3:97:80:5a:de:c0:6a:
         49:0f:43:6a:61:36:a9:bb:1d:d9:70:b6:84:74:d5:11:0b:58:
         87:64:f5:cb:3e:7e:a1:76:bc:e8:34:33:79:2e:83:64:39:15:
         25:da:f1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 11:01:42 2026 by rpki-client