Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/ddb7af71-6de7-3c34-a135-9f6b2682ca8f.roa
File:                     ddb7af71-6de7-3c34-a135-9f6b2682ca8f.roa (raw, json)
Hash identifier:          LtTfgQX5G+zl4reln92tXXZMmVwnt84ooSJimJ1yBys=
Subject key identifier:   FA:3B:FA:12:47:D1:0B:60:76:B2:DA:E4:EE:0E:2C:C6:25:A8:CB:C0
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584DBE6B23D18AD02F2384B31F00
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/ddb7af71-6de7-3c34-a135-9f6b2682ca8f.roa
Signing time:             Wed 06 May 2026 13:00:30 +0000
ROA not before:           Wed 06 May 2026 13:00:30 +0000
ROA not after:            Tue 04 Aug 2026 13:00:30 +0000
asID:                     22652
IP address blocks:        206.41.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:be:6b:23:d1:8a:d0:2f:23:84:b3:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: May  6 13:00:30 2026 GMT
            Not After : Aug  4 13:00:30 2026 GMT
        Subject: CN=75c84050-e771-436a-be85-b70396d6ef03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d2:4f:cc:e9:27:93:fd:1a:2a:96:1e:5a:db:
                    da:46:4e:9e:03:df:49:82:ba:e1:f0:0c:f6:03:b1:
                    e2:84:f9:2a:64:2f:65:85:ce:02:76:d2:7f:b7:63:
                    fe:53:ab:fa:65:93:86:b0:b8:5b:1c:2f:22:16:34:
                    54:5a:e0:46:0d:8e:24:e9:8e:0c:f6:da:88:22:35:
                    51:98:a0:df:e4:e7:b6:20:9e:10:a7:39:58:79:cc:
                    a0:ce:9c:73:92:ff:6c:cd:e7:f4:cd:50:34:23:43:
                    fd:8a:0b:ec:85:3f:ef:58:32:6f:b8:ff:b0:9e:a3:
                    dc:49:53:57:f4:b1:5c:86:5f:bb:4f:ba:74:9b:1c:
                    13:b3:58:ce:61:e7:36:b7:d1:50:dd:43:94:90:4a:
                    51:3c:c5:38:35:f9:4b:39:a3:1d:d8:12:00:51:0a:
                    f9:2c:8e:41:38:f8:60:e0:3d:cd:19:95:b6:91:47:
                    58:3b:fc:9e:98:1a:2a:3f:c8:c1:cc:7a:67:f5:cf:
                    c2:36:f4:5e:73:ca:14:44:26:b6:df:20:9f:a9:fb:
                    74:f9:bb:c2:18:43:c6:ab:17:67:6f:09:b2:47:d0:
                    e7:58:32:b3:62:4b:83:d1:46:1c:01:bf:c0:53:43:
                    9e:60:1a:5a:12:38:d5:45:ec:2e:5b:5c:d8:e2:ed:
                    82:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:3B:FA:12:47:D1:0B:60:76:B2:DA:E4:EE:0E:2C:C6:25:A8:CB:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/ddb7af71-6de7-3c34-a135-9f6b2682ca8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.41.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:86:78:5f:a4:fd:12:17:a9:ad:88:ad:be:e2:4f:77:30:8d:
         74:b5:8c:5e:45:17:8c:9e:7f:a7:1a:2a:1c:d6:89:b6:d4:5a:
         a1:2b:82:d9:5e:d8:00:91:bf:98:f0:37:40:6f:77:a8:85:84:
         52:8d:53:8f:cc:16:bf:bb:f4:19:4e:b9:70:59:a8:ea:d8:08:
         05:00:5e:78:c1:3b:d5:3f:a8:61:f6:ed:5d:5d:29:ea:c6:fe:
         dd:49:cd:e0:f7:7d:ec:a7:26:cc:55:a2:5f:5b:a7:37:e0:05:
         1b:b8:46:a9:ee:0f:f8:a7:39:91:2e:bc:fc:c9:92:0e:bb:f2:
         1e:2a:1c:45:db:2b:0e:c5:15:ae:d0:31:9a:60:d9:14:4f:57:
         41:3c:86:87:83:be:b5:53:51:95:ac:c9:4b:23:24:ab:57:60:
         9a:7b:7d:4d:74:6d:67:af:f3:76:47:2b:e4:f4:2d:71:6b:de:
         44:80:6f:f0:9c:30:12:77:ab:74:04:b7:8f:16:19:48:26:26:
         38:c3:ad:87:8e:79:35:9c:84:a9:24:54:c0:e8:3c:16:7c:0d:
         48:44:c4:30:e1:f0:3f:51:da:dd:aa:e5:92:1d:97:f8:b3:7f:
         3c:a2:cb:0b:9b:22:d6:9a:db:48:18:bd:8a:9b:b9:56:fd:d6:
         25:79:77:8e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2+ayPRitAvI4SzHwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm
ZjcxMB4XDTI2MDUwNjEzMDAzMFoXDTI2MDgwNDEzMDAzMFowLzEtMCsGA1UEAxMk
NzVjODQwNTAtZTc3MS00MzZhLWJlODUtYjcwMzk2ZDZlZjAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9JPzOknk/0aKpYeWtvaRk6eA99Jgrrh8Az2
A7HihPkqZC9lhc4CdtJ/t2P+U6v6ZZOGsLhbHC8iFjRUWuBGDY4k6Y4M9tqIIjVR
mKDf5Oe2IJ4QpzlYecygzpxzkv9szef0zVA0I0P9igvshT/vWDJvuP+wnqPcSVNX
9LFchl+7T7p0mxwTs1jOYec2t9FQ3UOUkEpRPMU4NflLOaMd2BIAUQr5LI5BOPhg
4D3NGZW2kUdYO/yemBoqP8jBzHpn9c/CNvRec8oURCa23yCfqft0+bvCGEPGqxdn
bwmyR9DnWDKzYkuD0UYcAb/AU0OeYBpaEjjVRewuW1zY4u2CfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPo7+hJH0QtgdrLa5O4OLMYlqMvAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5
MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvZGRiN2FmNzEtNmRlNy0z
YzM0LWExMzUtOWY2YjI2ODJjYThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5
MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy
ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2
ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzilRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG6GeF+k/RIXqa2Irb7iT3cwjXS1jF5FF4yef6caKhzWibbUWqErgtle
2ACRv5jwN0Bvd6iFhFKNU4/MFr+79BlOuXBZqOrYCAUAXnjBO9U/qGH27V1dKerG
/t1JzeD3feynJsxVol9bpzfgBRu4RqnuD/inOZEuvPzJkg678h4qHEXbKw7FFa7Q
MZpg2RRPV0E8hoeDvrVTUZWsyUsjJKtXYJp7fU10bWev83ZHK+T0LXFr3kSAb/Cc
MBJ3q3QEt48WGUgmJjjDrYeOeTWchKkkVMDoPBZ8DUhExDDh8D9R2t2q5ZIdl/iz
fzyiywubItaa20gYvYqbuVb91iV5d44=
-----END CERTIFICATE-----
Generated at Sat May 9 19:29:10 2026 by rpki-client