Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210/bd09a8f2-04b2-3cd9-b6b2-913cc8f95076.roa
File:                     bd09a8f2-04b2-3cd9-b6b2-913cc8f95076.roa (raw, json)
Hash identifier:          7f53BqTs8qKlA/7Ha+SPbCfBjr+vYS1ry+jN+o9o0Fc=
Subject key identifier:   4F:23:C7:04:6C:DE:03:49:21:83:40:CD:22:FB:0D:4A:A6:A0:AA:0E
Certificate issuer:       /CN=f65e9b5c-056e-45d3-89b2-63cb62b84210
Certificate serial:       010D0C9F4328584ECBD1DF851030DB1E57FC0900
Authority key identifier: A3:9A:53:08:DA:4E:E2:85:35:66:F0:EA:8D:B4:BA:18:E7:B4:66:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210/bd09a8f2-04b2-3cd9-b6b2-913cc8f95076.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     30197
IP address blocks:        206.201.168.0/24 maxlen: 24
                          206.201.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210/f65e9b5c-056e-45d3-89b2-63cb62b84210.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210/f65e9b5c-056e-45d3-89b2-63cb62b84210.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:df:85:10:30:db:1e:57:fc:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f65e9b5c-056e-45d3-89b2-63cb62b84210
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=92e9dae2-b889-4526-8a87-822ef7eff5ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:01:64:c9:6c:35:78:f0:e9:4c:e7:78:9f:26:
                    ef:a7:6c:1d:1f:0c:aa:66:e0:48:37:1e:43:f1:a4:
                    0d:da:0e:92:e2:b6:21:0c:fb:5b:99:68:6a:40:ef:
                    cc:24:f9:1b:14:1e:38:1c:4c:46:fc:8a:99:88:19:
                    3d:ef:1c:5b:75:9a:93:3e:3d:cb:97:be:8b:70:48:
                    1a:14:c7:3a:f0:3c:88:a4:ef:e3:d2:23:40:50:78:
                    70:f0:fb:b2:b5:4f:79:97:da:49:03:b3:64:88:a5:
                    25:f2:33:81:5d:98:6d:ea:56:08:4a:bc:bc:f7:ce:
                    1e:59:67:98:fc:8d:01:ff:a9:24:91:52:9a:c2:71:
                    02:25:7e:b9:89:ce:de:f0:32:1b:ab:88:84:05:e9:
                    6a:5f:8b:ba:8b:84:a7:49:96:bc:5c:0d:8a:81:42:
                    65:2b:5c:ef:1a:3a:48:46:9d:ff:43:80:d4:6c:b7:
                    ea:52:5f:1c:27:29:41:a2:b8:de:47:55:f4:bf:79:
                    dd:d7:d4:0b:6a:5f:a5:9c:be:fb:c0:4e:33:57:e8:
                    4c:04:5f:40:32:31:2f:f6:3f:34:89:bc:bb:70:1a:
                    56:22:bb:cb:2d:d7:be:d0:d5:5a:94:4d:3c:66:b6:
                    97:eb:52:2c:e7:cf:6f:e4:55:e8:10:11:0b:63:2a:
                    03:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:23:C7:04:6C:DE:03:49:21:83:40:CD:22:FB:0D:4A:A6:A0:AA:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210/bd09a8f2-04b2-3cd9-b6b2-913cc8f95076.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210/f65e9b5c-056e-45d3-89b2-63cb62b84210.crl

            X509v3 Authority Key Identifier:
                keyid:A3:9A:53:08:DA:4E:E2:85:35:66:F0:EA:8D:B4:BA:18:E7:B4:66:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.201.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:8c:2a:62:19:f6:a1:e2:4e:df:b3:83:34:04:5f:71:84:6b:
         97:ab:69:55:e4:3b:68:23:ba:82:74:6e:f0:28:f8:c4:ac:40:
         48:fb:61:89:45:57:22:10:7e:e7:c9:d6:b6:63:b6:87:e6:10:
         79:41:01:c5:18:ee:25:86:29:ad:be:c1:ab:fc:5f:2c:ee:49:
         bc:72:37:46:b2:90:c2:ad:ef:b0:e2:d8:18:28:90:b4:2f:ac:
         07:89:ec:38:78:0b:7b:02:c0:32:0c:8b:4e:2e:6d:d1:58:93:
         b4:97:7d:d1:6e:7b:a7:c1:b8:2d:bd:42:07:32:b9:bc:97:79:
         cb:58:ab:c5:75:61:2a:63:10:8d:fb:f7:4b:06:cf:b9:25:c5:
         91:8d:18:09:77:d6:6f:3d:ca:81:8c:97:14:32:ac:9b:d7:84:
         60:20:95:ea:0d:2e:f5:71:29:57:7c:37:fd:06:15:65:b1:24:
         fa:17:a9:b3:e2:f6:8a:0a:c0:c8:70:0e:6e:05:91:57:6f:5f:
         60:f6:b9:0f:b8:5b:96:13:f6:ce:b2:da:e9:0a:7d:f9:a2:e4:
         2e:13:6a:38:0e:d6:d1:60:55:b9:e5:7b:42:95:58:7b:7e:3e:
         1c:b2:31:b3:0b:97:38:4c:42:37:e0:60:e0:f3:85:6b:67:b6:
         13:b2:9b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:36:06 2026 by rpki-client