Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/d9ec9b2b-b2fb-3dcc-ad21-6667c35061d6.roa
File:                     d9ec9b2b-b2fb-3dcc-ad21-6667c35061d6.roa (raw, json)
Hash identifier:          rAFgK+ZCUmES6vb5wyA9roR1gK1pQE6l28Z1lX1uM28=
Subject key identifier:   AE:6A:F5:40:2E:E8:E5:11:90:E3:1B:A4:91:0B:27:C2:8F:33:42:16
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584D8EF585060CD890C35AB939C0
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/d9ec9b2b-b2fb-3dcc-ad21-6667c35061d6.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     26744
IP address blocks:        206.180.128.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 02 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:85:06:0c:d8:90:c3:5a:b9:39:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=578bce90-f1a7-459f-a59a-270b71dcea9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:90:a2:9f:8f:f9:a2:3d:8d:2c:a6:b3:53:a9:
                    47:6f:13:ad:b8:2e:e0:64:3c:9c:6d:63:99:0b:8b:
                    63:d4:00:ca:82:e9:b6:cf:dc:17:44:38:e3:c7:31:
                    fe:af:f9:90:51:b6:2f:48:3f:92:0f:9d:af:ec:64:
                    03:48:0f:5e:05:7f:b5:32:d2:ef:9d:47:e3:7e:e0:
                    37:a8:20:f9:5d:bf:ff:cb:3f:29:f0:d2:82:90:b2:
                    09:07:2a:96:b2:27:2b:29:fa:1a:dd:6c:1e:70:04:
                    de:0f:76:d7:fa:1d:cb:dc:24:a1:f9:23:67:2d:16:
                    e0:6d:07:b1:9b:2d:7e:4e:e2:df:aa:b6:5b:8d:5f:
                    bc:2c:da:77:c7:c2:2f:7a:eb:8c:25:ac:d4:eb:93:
                    29:47:38:8c:8f:66:92:d0:35:19:d9:91:cc:3b:da:
                    c1:96:ae:05:08:32:64:c4:ef:11:2c:08:d1:bd:74:
                    92:c7:40:eb:22:93:e6:24:66:50:2c:18:d8:26:78:
                    10:53:96:3a:7d:68:b8:49:93:50:6d:39:4d:2a:76:
                    86:bc:ec:23:63:77:57:fe:4b:1b:41:b1:56:16:ff:
                    3c:d0:40:b8:a7:4c:09:67:e7:58:c4:b0:89:79:f3:
                    78:ec:96:7b:48:11:98:ba:fe:39:5b:34:28:d3:20:
                    c3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:6A:F5:40:2E:E8:E5:11:90:E3:1B:A4:91:0B:27:C2:8F:33:42:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/d9ec9b2b-b2fb-3dcc-ad21-6667c35061d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.180.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:40:7f:dc:f1:83:5f:c5:8f:fe:df:6b:11:01:cf:08:fa:ba:
         9d:55:76:e5:e8:dd:57:8a:a3:e7:10:e1:06:89:09:1f:70:d4:
         0b:0e:de:d5:2a:48:54:d5:94:44:1e:63:44:7a:01:ee:ad:49:
         bb:c5:12:76:fd:4f:e7:4b:ac:d3:75:b1:c1:72:58:0e:b3:2a:
         fa:63:cb:55:0f:0a:d5:03:aa:7a:46:72:68:de:2d:24:e0:9b:
         22:e1:81:0b:15:b1:d4:2d:e3:0b:7d:e0:0a:96:f8:f1:65:64:
         a9:09:85:9b:35:fb:46:98:ba:41:ff:41:5e:88:c8:70:11:d6:
         62:dc:25:77:b4:67:21:e8:f6:0a:b1:68:3b:34:6c:f2:fc:39:
         06:82:7c:59:22:4c:18:9d:a1:52:79:4e:e7:00:f5:ae:30:7b:
         db:7c:56:05:4a:b4:b4:60:a3:e4:65:37:09:ad:09:14:62:35:
         0d:8a:1e:a5:4d:24:84:04:7d:3d:25:e0:be:b2:79:d9:da:00:
         f0:25:69:c9:6e:bd:b4:03:4a:ac:c3:ba:34:ea:43:3a:90:2b:
         13:9b:d7:53:b2:2b:17:65:29:74:1e:f7:b1:f2:ae:c6:b6:20:
         e4:9c:66:1d:83:18:73:22:4f:2b:33:7c:dd:86:15:41:a7:a3:
         5c:d6:87:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 17:02:32 2026 by rpki-client