Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494/a96f000e-3ea0-3413-9d0e-ef701db4c430.roa
File:                     a96f000e-3ea0-3413-9d0e-ef701db4c430.roa (raw, json)
Hash identifier:          XCitCesrgfGqTVIumLO/1wTOSRb2vAh8VhRJ6zzctEs=
Subject key identifier:   BB:68:E0:68:C3:07:31:11:C4:E5:14:AD:40:44:4D:F2:F6:E4:65:D2
Certificate issuer:       /CN=1c680bf8-5a8c-4dd5-865a-c38a50946494
Certificate serial:       010D0C9F4328584E2D9F2A0984F1F6E22741E1E0
Authority key identifier: 4C:0A:2A:8B:E7:3E:A4:60:D7:F0:66:7C:77:65:34:5A:CA:95:4E:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494/a96f000e-3ea0-3413-9d0e-ef701db4c430.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     40676
IP address blocks:        206.183.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494/1c680bf8-5a8c-4dd5-865a-c38a50946494.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494/1c680bf8-5a8c-4dd5-865a-c38a50946494.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:2a:09:84:f1:f6:e2:27:41:e1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c680bf8-5a8c-4dd5-865a-c38a50946494
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=f60afa1c-9abe-4e3d-9917-e69b2973bc24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a8:55:26:6d:c2:be:78:32:b9:3f:6d:31:92:
                    86:f6:87:28:fe:97:58:d9:b4:3e:e2:e0:35:37:dd:
                    3c:0f:3e:b8:ac:b1:66:7f:ce:d2:9e:7d:95:af:87:
                    51:60:fe:e0:88:e6:2b:4e:57:dd:48:63:c5:2b:b5:
                    b6:c5:89:bc:f6:8b:42:82:d3:0a:7f:e9:10:68:14:
                    47:45:eb:ce:11:26:51:24:5f:2d:b8:31:b2:a0:8b:
                    f9:f7:35:52:ea:62:f8:2e:2c:cc:04:21:9e:56:ff:
                    0d:c7:1d:2a:d8:2d:0c:f2:81:0e:de:68:50:a6:67:
                    7e:fe:8d:ce:2e:e5:97:81:03:69:c4:af:55:2d:23:
                    cc:07:29:f0:f5:67:fb:e8:d8:a2:bd:05:5c:f0:98:
                    4f:88:fc:90:ef:5f:12:af:36:1c:0a:8f:e6:4a:6d:
                    14:88:30:93:da:01:be:3d:d0:d3:de:0d:88:7c:17:
                    23:99:95:8e:11:5b:52:97:b5:81:68:f5:39:cd:97:
                    1f:20:92:81:73:c7:e1:23:fe:65:c7:67:1d:0a:2f:
                    28:86:8f:a8:fd:c8:9f:e5:cd:13:f6:a2:d4:6f:dd:
                    e8:2b:e7:f7:2f:8c:d4:af:bd:09:8c:d7:f5:33:02:
                    22:fa:ea:66:0f:bf:95:d2:e8:02:a1:a1:7d:cc:95:
                    b7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:68:E0:68:C3:07:31:11:C4:E5:14:AD:40:44:4D:F2:F6:E4:65:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494/a96f000e-3ea0-3413-9d0e-ef701db4c430.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494/1c680bf8-5a8c-4dd5-865a-c38a50946494.crl

            X509v3 Authority Key Identifier:
                keyid:4C:0A:2A:8B:E7:3E:A4:60:D7:F0:66:7C:77:65:34:5A:CA:95:4E:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.183.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:70:9d:75:00:6c:7c:45:ac:ef:3c:08:b4:c4:f2:39:fd:e1:
         5e:51:e2:2e:01:7c:35:22:d0:99:81:0a:0e:a8:e7:74:17:b7:
         00:32:aa:4a:fb:fe:11:f3:c4:cd:04:cb:94:a4:54:59:2c:f8:
         51:9e:7a:90:d1:b0:a5:e3:d0:4c:d4:63:ad:64:32:da:23:92:
         aa:6e:81:df:81:9a:f4:d8:aa:31:90:d3:52:fe:0a:03:46:15:
         12:4d:13:52:8d:9c:f7:8e:b3:c4:6d:85:66:ea:b8:cb:ca:96:
         76:5c:90:0b:91:11:ee:3f:6e:e8:f7:e6:31:50:5d:81:c4:1a:
         2d:d8:60:bf:02:72:b6:45:c4:46:43:23:d2:d9:bd:61:c8:4b:
         aa:78:46:24:07:bf:77:ef:07:1a:c7:9f:66:a4:6d:5b:fa:b4:
         6b:fb:89:9c:02:d7:20:b0:c1:57:e9:c4:62:f3:ec:1f:b3:7d:
         b0:fa:c7:cc:8c:9e:89:d0:1e:17:cd:7e:d2:85:8c:fa:20:1e:
         0e:c9:92:77:4e:9f:b7:fa:87:93:54:0a:19:7e:f6:51:51:e2:
         4e:01:80:9b:5f:92:a0:d4:2a:3e:0f:e0:f9:b5:7c:04:a6:29:
         99:88:75:e6:39:da:24:f7:c3:43:8d:10:c8:1e:7b:a9:55:5c:
         73:24:95:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 13:55:42 2026 by rpki-client