Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/821e279e-176c-4b5d-ad30-b8c9c2340ee0/1f87c226-2475-3227-b5f0-d1168a1ed52a.roa
File:                     1f87c226-2475-3227-b5f0-d1168a1ed52a.roa (raw, json)
Hash identifier:          O3Dmd7jiXjAEM1mRt8GkgdcUK0Andnq4UbZ7m58aZO4=
Subject key identifier:   61:AB:3C:4A:33:BF:11:C0:3D:19:90:5C:9F:0A:FF:07:86:20:83:DB
Certificate issuer:       /CN=821e279e-176c-4b5d-ad30-b8c9c2340ee0
Certificate serial:       010D0C9F4328584DAF102E2CC51D816A7507AF00
Authority key identifier: F4:7B:F8:5A:79:A4:A5:58:90:6D:8A:80:83:7F:56:8C:AA:89:A9:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/821e279e-176c-4b5d-ad30-b8c9c2340ee0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/821e279e-176c-4b5d-ad30-b8c9c2340ee0/1f87c226-2475-3227-b5f0-d1168a1ed52a.roa
Signing time:             Fri 01 May 2026 01:00:24 +0000
ROA not before:           Fri 01 May 2026 01:00:24 +0000
ROA not after:            Thu 30 Jul 2026 01:00:24 +0000
asID:                     398816
IP address blocks:        206.109.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/821e279e-176c-4b5d-ad30-b8c9c2340ee0/821e279e-176c-4b5d-ad30-b8c9c2340ee0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/821e279e-176c-4b5d-ad30-b8c9c2340ee0/821e279e-176c-4b5d-ad30-b8c9c2340ee0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/821e279e-176c-4b5d-ad30-b8c9c2340ee0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 03 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:af:10:2e:2c:c5:1d:81:6a:75:07:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821e279e-176c-4b5d-ad30-b8c9c2340ee0
        Validity
            Not Before: May  1 01:00:24 2026 GMT
            Not After : Jul 30 01:00:24 2026 GMT
        Subject: CN=8e1e2266-a428-47b9-b327-c02a92ce4000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bf:5a:91:c0:b7:c8:2c:00:aa:ea:b0:05:2b:
                    ed:b1:33:24:b7:b6:bd:f5:e6:50:8c:be:a4:63:90:
                    ae:78:0d:e5:33:92:b7:d5:b4:99:55:28:e4:c2:29:
                    38:91:25:57:ba:9f:23:b1:8e:1a:fd:d1:24:d6:10:
                    fc:41:e1:40:57:59:af:16:f9:ad:d1:02:bb:ef:f5:
                    97:33:dd:45:ad:e5:02:e8:75:64:ad:45:04:22:61:
                    42:be:2c:4e:ae:8f:b6:0e:5f:a6:b7:40:82:6e:99:
                    1f:c8:e9:2e:29:d1:14:6f:59:ab:24:f1:ee:f3:f3:
                    f2:3d:68:97:7a:b7:4f:82:6a:c8:60:fb:cb:0c:d4:
                    8f:71:55:ea:eb:ec:33:96:ba:29:16:6f:d8:2b:44:
                    8d:d1:e8:4c:43:34:d0:17:33:6b:02:80:3d:12:be:
                    09:06:93:f1:44:4f:cb:e1:35:67:5e:f9:f5:db:9b:
                    20:68:20:7f:87:ae:34:b3:d7:c8:a4:c1:3c:a4:2a:
                    47:b1:14:5a:dc:09:e9:77:05:a8:83:65:f3:40:8e:
                    47:ef:11:55:e1:d6:f1:0c:2c:73:9f:27:b3:5e:b7:
                    c2:19:84:1d:ae:8a:2c:44:7a:b2:c3:66:c2:b1:b7:
                    b6:77:ec:d4:1c:96:7b:eb:c4:33:ab:6f:f2:64:94:
                    b1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:AB:3C:4A:33:BF:11:C0:3D:19:90:5C:9F:0A:FF:07:86:20:83:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/821e279e-176c-4b5d-ad30-b8c9c2340ee0/1f87c226-2475-3227-b5f0-d1168a1ed52a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/821e279e-176c-4b5d-ad30-b8c9c2340ee0/821e279e-176c-4b5d-ad30-b8c9c2340ee0.crl

            X509v3 Authority Key Identifier:
                keyid:F4:7B:F8:5A:79:A4:A5:58:90:6D:8A:80:83:7F:56:8C:AA:89:A9:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/821e279e-176c-4b5d-ad30-b8c9c2340ee0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.109.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:b1:05:4e:6d:30:a5:13:a3:28:68:41:9b:9b:95:58:0d:a7:
         73:e0:e1:92:3d:1e:f4:63:e6:d5:d6:c1:fd:b7:50:14:27:d4:
         55:38:5b:9d:bc:b5:18:cd:8c:86:77:49:99:c7:45:b0:ae:23:
         c4:c8:03:ad:f4:d4:28:01:03:26:34:0e:1e:51:6a:ac:67:c1:
         4c:5b:36:4d:5d:da:1f:36:4c:9f:ea:23:7d:14:ca:46:e2:53:
         90:e3:f9:6f:e2:02:54:83:6c:ce:b2:e3:59:55:97:3a:4e:8b:
         39:44:61:af:b9:26:5b:80:ef:c6:bd:de:e1:e3:49:1a:c4:61:
         6c:1c:ec:2a:fb:44:57:28:1a:0b:16:f3:54:43:99:cf:fb:30:
         04:e0:97:df:ce:f3:d2:16:83:47:69:d1:d3:8c:97:8c:0a:7b:
         8d:fd:b2:16:5f:34:4e:39:38:bc:a4:0f:54:e8:ee:a3:d4:9c:
         01:1f:29:1e:ae:da:cb:39:07:ef:d7:14:d9:e4:0f:5c:1b:83:
         19:9e:cb:66:26:92:59:25:45:a2:fd:66:48:de:d1:c5:01:03:
         55:59:68:85:8b:41:78:89:fb:74:57:67:ef:49:13:5a:49:2c:
         35:73:17:99:d4:8d:ec:38:7f:89:9f:fb:ae:d4:9f:52:8f:74:
         59:a0:6b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 17:06:26 2026 by rpki-client