Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6825d990-9e2f-3a42-8825-c78a7683ebd9.roa
File:                     6825d990-9e2f-3a42-8825-c78a7683ebd9.roa (raw, json)
Hash identifier:          igDXmFd0G+ENQcjR+RsMStaZUz+6MMsXViKIisHUgJg=
Subject key identifier:   2B:BD:8D:8C:2E:EA:BB:AE:77:48:22:EC:70:3A:53:83:E2:AC:A9:68
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584D8C2AA051CCEA20FD0336A080
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6825d990-9e2f-3a42-8825-c78a7683ebd9.roa
Signing time:             Sat 18 Apr 2026 13:00:30 +0000
ROA not before:           Sat 18 Apr 2026 13:00:30 +0000
ROA not after:            Fri 17 Jul 2026 13:00:30 +0000
asID:                     137409
IP address blocks:        206.123.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Apr 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8c:2a:a0:51:cc:ea:20:fd:03:36:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Apr 18 13:00:30 2026 GMT
            Not After : Jul 17 13:00:30 2026 GMT
        Subject: CN=b0a50e37-d7ab-463e-98d8-9c69bf3409ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1d:fc:08:5a:19:7a:50:a6:63:16:ac:5b:c7:
                    c3:74:2a:f3:23:da:bf:51:70:70:a4:f1:2d:fe:ee:
                    b3:f9:6d:c9:8b:73:f0:83:b6:c5:c6:f9:4f:89:34:
                    97:ed:64:01:2d:04:59:d7:31:b0:75:f6:1e:10:c1:
                    fb:50:5e:56:9b:32:b8:e1:26:0d:6a:e1:32:e3:65:
                    2a:e6:10:b5:70:77:04:9a:d2:45:33:99:e3:85:ae:
                    ed:30:9b:3f:ce:66:5f:bd:79:18:e8:c0:1f:27:b9:
                    32:31:de:5d:34:e0:da:8a:3f:69:72:fd:52:de:e7:
                    ca:cc:77:74:6c:8d:64:e8:5d:ea:9a:9e:a7:f0:a4:
                    d0:f6:77:fe:24:5e:76:f6:43:8f:63:b8:f0:26:a2:
                    34:48:95:70:58:7f:fd:0a:48:51:00:ea:b2:9c:31:
                    31:2b:3b:72:2b:30:b7:91:4b:88:3a:f2:fe:af:a8:
                    51:81:61:3d:cc:32:a1:d6:44:5f:90:57:8e:a3:a9:
                    50:f1:20:f2:11:9d:4e:40:f4:9a:d4:34:be:bc:02:
                    73:43:08:8b:c5:1f:10:30:f7:35:3e:6b:68:32:ed:
                    ea:9e:9e:18:fe:6d:75:3e:83:05:de:ff:c3:b8:66:
                    cf:1b:43:49:07:43:62:f9:07:fc:4a:12:20:37:a9:
                    60:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:BD:8D:8C:2E:EA:BB:AE:77:48:22:EC:70:3A:53:83:E2:AC:A9:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6825d990-9e2f-3a42-8825-c78a7683ebd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.123.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:03:b5:af:bd:74:aa:12:37:0b:c5:65:0c:38:e4:0c:30:33:
         07:3b:c5:bc:30:ef:a2:37:b8:af:45:be:88:cd:55:de:e5:0c:
         c9:35:36:77:6e:0c:44:87:18:0c:96:29:03:79:f2:16:fa:7d:
         51:20:59:32:7d:42:7b:62:ee:4f:5b:aa:f3:b7:23:a1:b2:30:
         f5:8d:63:fc:5d:84:6e:32:a6:37:00:a0:39:70:f8:0d:35:fa:
         bf:32:d8:f4:4c:8b:91:f7:0e:44:ed:81:68:a9:5d:20:1a:44:
         4d:8a:05:87:8e:2e:d5:91:1f:7b:92:cc:c7:6c:cf:eb:ee:c1:
         03:fe:a5:af:c9:81:39:08:a4:09:f6:ea:3f:a2:f9:30:3d:d8:
         78:61:5c:9b:22:87:ce:5f:58:ec:90:35:85:09:35:06:70:d6:
         36:a0:c7:8d:fd:5b:b8:55:67:28:19:14:5b:90:8a:5a:2a:41:
         39:61:34:cb:d2:db:42:76:8f:5c:2a:59:0e:ec:d6:39:35:78:
         b2:c3:a1:1c:0b:e8:84:06:72:b1:53:5b:64:af:6c:49:94:41:
         2e:f2:09:d5:c4:da:82:d2:af:27:33:d7:66:4c:fe:d9:9a:52:
         03:53:a2:4b:5a:5a:f3:30:bd:7a:6e:e4:6d:84:f6:33:c2:98:
         b9:fb:8c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 01:54:10 2026 by rpki-client