Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/62dd0302-3085-3f70-8edd-449ecdbc6149.roa
File:                     62dd0302-3085-3f70-8edd-449ecdbc6149.roa (raw, json)
Hash identifier:          RyEqsJs6LOFcC3lU/NxwavSV1A1qy0ChpRG5mzr7YPo=
Subject key identifier:   B2:D9:74:15:F5:2E:48:33:4B:59:35:49:EA:20:E9:B3:A4:DC:FB:DC
Certificate issuer:       /CN=8ac31463-974b-4676-9328-200202ae4d6e
Certificate serial:       010D0C9F4328584EC20C7021B4D977B529395BFE
Authority key identifier: 66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/62dd0302-3085-3f70-8edd-449ecdbc6149.roa
Signing time:             Fri 07 Aug 2026 13:00:11 +0000
ROA not before:           Fri 07 Aug 2026 13:00:11 +0000
ROA not after:            Thu 05 Nov 2026 14:00:11 +0000
asID:                     33211
IP address blocks:        206.41.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:0c:70:21:b4:d9:77:b5:29:39:5b:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ac31463-974b-4676-9328-200202ae4d6e
        Validity
            Not Before: Aug  7 13:00:11 2026 GMT
            Not After : Nov  5 14:00:11 2026 GMT
        Subject: CN=0f0febc3-d342-49f8-b57e-a32a7a4319ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:6b:12:2a:46:12:c2:e3:4a:0d:3b:e9:85:9c:
                    d5:5f:a7:59:1f:bc:66:78:41:d4:53:e5:8e:02:9d:
                    47:06:c5:7e:00:e0:a3:5b:44:bb:71:d8:51:34:ab:
                    af:62:70:31:c8:12:cb:b3:ea:18:ef:9b:a9:1b:8b:
                    ad:16:c2:a4:dd:78:b3:fd:d3:75:55:fd:d5:b8:68:
                    30:fc:4c:7b:94:d1:e5:40:c6:bc:c8:48:5a:f3:96:
                    de:e8:6d:73:a6:b9:b6:0c:b5:e2:27:6c:2e:ee:5c:
                    90:1c:92:d5:22:9b:9c:2b:7c:0e:3c:48:73:42:f6:
                    ea:aa:1c:96:52:94:05:40:a9:2a:88:42:7c:a6:ce:
                    45:07:6d:89:57:b0:19:60:da:b1:a1:ee:2c:ca:f1:
                    f9:4d:ab:89:5b:58:30:2a:3a:cc:88:f9:e1:19:e3:
                    c7:02:bc:d8:45:90:da:12:95:4b:51:bf:d4:1b:65:
                    65:ec:57:6f:c9:af:1d:2c:14:fa:af:fc:a4:7a:d2:
                    80:ea:5f:b1:70:f1:d0:e2:21:0c:cd:be:de:cf:2a:
                    56:d9:35:38:fd:9f:62:ec:26:29:d4:f6:7b:e2:8e:
                    d6:57:db:da:dd:ca:5a:bd:60:a0:57:76:27:ee:99:
                    d9:61:de:a0:c6:06:51:47:20:34:90:3d:ab:00:be:
                    f9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D9:74:15:F5:2E:48:33:4B:59:35:49:EA:20:E9:B3:A4:DC:FB:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/62dd0302-3085-3f70-8edd-449ecdbc6149.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl

            X509v3 Authority Key Identifier:
                keyid:66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.41.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:8f:ad:47:a2:9d:c3:7a:8b:59:58:e7:86:d2:60:be:3a:3b:
         5f:aa:27:60:9b:a1:cb:f5:71:16:a2:d0:5a:36:49:47:c4:2d:
         23:38:8f:16:19:ea:f4:86:66:ed:18:9c:6b:05:6b:a5:9b:61:
         4a:30:a8:1e:3a:41:1e:51:c9:34:bc:4b:83:40:5e:89:61:53:
         cb:42:ca:bd:d0:1d:eb:a2:99:f4:34:cd:b4:5b:f7:49:3f:24:
         47:97:26:1c:ec:ff:0d:63:c5:45:5d:83:e5:41:47:5e:6d:91:
         e3:7c:12:d8:2b:f3:45:c1:b8:07:b4:20:56:64:11:25:eb:82:
         81:2c:1f:86:8b:95:f4:2d:b1:e2:67:64:c6:d9:cd:1a:66:1e:
         bf:af:e0:1c:af:0a:33:39:b2:26:b4:c9:e1:d2:cc:70:64:8a:
         d1:a9:43:d0:a8:ff:ab:ca:c2:7c:98:27:a9:2e:c5:bb:34:0e:
         28:1f:64:32:45:f0:2e:9c:5b:ca:1a:42:cc:ab:6c:02:68:f1:
         64:55:37:67:a1:34:f4:98:18:bc:05:b6:9a:95:7f:36:08:f7:
         f9:3a:de:85:7d:0d:5c:71:32:9d:36:11:89:13:31:01:12:f7:
         cd:e1:e7:12:77:98:87:d6:31:9a:10:3c:5b:e0:27:7b:b2:2a:
         45:8f:c1:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 15:15:10 2026 by rpki-client