Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/cc46af26-a8f4-31f1-a878-84ce51c855cc.roa
File:                     cc46af26-a8f4-31f1-a878-84ce51c855cc.roa (raw, json)
Hash identifier:          nSi7ipdZmxcZNDHXs7ynCXFTgVfhDGR9C0WS4xImjmA=
Subject key identifier:   38:16:4C:1E:C4:54:7A:69:7C:6E:D9:2F:34:AD:0E:A2:9A:93:5C:61
Certificate issuer:       /CN=acfb2995-9ee5-423c-a521-8d6490303e2d
Certificate serial:       010D0C9F4328584E534F3AC55C33F56D3223EF00
Authority key identifier: 7A:14:A8:2A:46:38:BF:39:C0:FE:45:0A:C6:FA:8A:B6:9F:F0:A7:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/cc46af26-a8f4-31f1-a878-84ce51c855cc.roa
Signing time:             Sun 28 Jun 2026 21:00:11 +0000
ROA not before:           Sun 28 Jun 2026 21:00:11 +0000
ROA not after:            Sat 26 Sep 2026 21:00:11 +0000
asID:                     812
IP address blocks:        206.186.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/acfb2995-9ee5-423c-a521-8d6490303e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/acfb2995-9ee5-423c-a521-8d6490303e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:53:4f:3a:c5:5c:33:f5:6d:32:23:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acfb2995-9ee5-423c-a521-8d6490303e2d
        Validity
            Not Before: Jun 28 21:00:11 2026 GMT
            Not After : Sep 26 21:00:11 2026 GMT
        Subject: CN=b5ccbead-cee0-449c-a5e7-f11461dc0b10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b9:0b:5f:1f:50:35:da:ba:42:7e:a6:2a:c0:
                    53:75:44:53:56:0b:fa:89:c8:c8:6b:3a:92:9d:71:
                    62:de:3c:af:67:de:de:ae:ec:c3:ea:c5:57:88:4d:
                    d7:59:f6:5b:d1:76:ab:e0:cb:7b:0b:38:41:2f:96:
                    cc:d1:31:24:2b:ee:6a:14:29:2e:40:1f:80:d9:4e:
                    9a:da:6c:aa:29:f3:cf:14:4d:ac:50:0a:30:3d:62:
                    be:8f:67:86:b7:0a:7e:05:20:4e:f1:1b:e5:f3:cc:
                    dd:ec:f3:2f:cf:c6:67:ba:f2:be:48:30:b4:a6:e6:
                    db:71:ae:b7:39:4b:84:34:d2:ea:91:00:07:b8:6c:
                    c5:83:f3:29:e5:f6:09:08:31:36:63:9d:80:ff:2d:
                    ea:2b:eb:51:3b:45:27:a1:ca:d4:55:f0:8f:ba:45:
                    55:06:b1:ec:da:65:2e:91:b5:62:b1:bd:4e:02:f7:
                    84:71:3e:d1:05:a2:7b:d7:61:83:47:4e:7d:cd:0d:
                    ac:3e:12:e3:c5:90:75:5c:c9:53:1e:8d:b0:f8:ab:
                    87:11:4d:8a:8c:6a:5a:a3:aa:5d:ad:de:c1:2d:be:
                    b6:4a:a8:a6:cd:33:9e:77:5a:2a:5c:23:2c:f8:b5:
                    61:65:d3:00:8e:0b:d4:6b:2b:dd:fa:ec:3c:f3:d2:
                    99:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:16:4C:1E:C4:54:7A:69:7C:6E:D9:2F:34:AD:0E:A2:9A:93:5C:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/cc46af26-a8f4-31f1-a878-84ce51c855cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/acfb2995-9ee5-423c-a521-8d6490303e2d.crl

            X509v3 Authority Key Identifier:
                keyid:7A:14:A8:2A:46:38:BF:39:C0:FE:45:0A:C6:FA:8A:B6:9F:F0:A7:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.186.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:ad:d7:85:72:37:88:9d:c6:ff:82:99:cd:2c:cd:53:df:4c:
         ae:db:3b:fe:81:3f:98:ad:9b:95:91:29:48:46:f1:ec:45:73:
         1f:85:f3:8b:13:23:c5:b8:58:7a:c2:02:92:4e:d4:10:71:a0:
         87:b3:72:bc:75:5a:f8:56:cc:a0:25:f7:d1:73:66:09:f5:20:
         2e:c7:65:84:2e:7a:f8:a3:28:96:9d:8c:46:70:6d:2b:73:71:
         f3:9f:dd:7b:f8:cd:3d:a2:e1:54:df:85:ca:56:70:7b:de:5b:
         2a:29:ee:86:8f:03:43:74:36:cf:e1:53:ff:0c:84:57:d4:f7:
         91:76:7b:92:81:27:c6:4c:7c:f8:db:04:f4:49:83:e6:12:42:
         db:29:f9:7b:cc:e8:58:9a:44:e3:9a:68:d2:d5:61:5e:1b:81:
         97:63:69:01:52:09:d0:11:5c:f6:ec:9a:ad:53:8b:b8:6c:50:
         5b:e4:f1:ba:32:17:06:c2:0d:9d:4c:3b:c4:8b:17:29:6e:8b:
         f9:19:37:dc:28:6e:80:ff:c7:be:d1:d8:11:ea:39:0c:f5:f4:
         d2:88:72:8e:44:7c:bb:72:25:39:9d:e7:81:54:ca:11:49:80:
         25:b4:e4:ac:3d:76:9a:38:80:bc:86:0a:86:cb:ec:f7:08:6d:
         e0:2a:51:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:34:00 2026 by rpki-client