Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f7d23a38-a15a-3763-8330-fec331d81d97.roa
File:                     f7d23a38-a15a-3763-8330-fec331d81d97.roa (raw, json)
Hash identifier:          ZWOWt0/qs+CUpG3045UWhEQwSBgU6hRfOYy7LKN5ZPo=
Subject key identifier:   B0:24:BF:E3:30:A0:1B:99:50:DF:6E:ED:07:2B:3B:3A:FB:C0:B3:15
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584EA788AB4B21AB8EB74B9FB0C0
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f7d23a38-a15a-3763-8330-fec331d81d97.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     63386
IP address blocks:        206.192.246.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:ab:4b:21:ab:8e:b7:4b:9f:b0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ff6424c4-4832-466b-ac9b-664dac6ab411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:45:e5:5b:c6:b5:98:5c:38:e4:fd:3f:8c:ce:
                    60:e6:ed:3a:5d:e4:a3:ad:ce:88:35:a7:48:19:98:
                    cf:6e:42:23:3a:9f:da:33:44:95:1e:50:bc:bc:d7:
                    31:68:9f:88:b2:55:07:98:25:5d:a4:c4:ee:f9:7e:
                    63:85:9c:0e:93:d4:6c:3b:02:79:c5:d0:53:d6:23:
                    e9:22:95:41:4b:39:22:c9:d3:68:45:1e:73:24:c3:
                    1c:69:82:50:73:14:fb:84:86:be:44:86:61:30:7f:
                    dc:db:46:b4:0d:97:c5:92:44:66:fa:25:d0:67:6b:
                    1a:24:83:4b:f3:16:66:1c:8a:d8:1b:e3:12:e6:44:
                    a0:a3:9c:d0:c0:31:79:13:30:3e:ca:a1:dd:24:4c:
                    48:db:ba:24:87:3e:41:13:2b:2d:22:48:5c:9b:45:
                    28:cf:36:57:50:66:01:fd:ec:c4:7b:e7:15:77:39:
                    6b:cd:fb:26:13:86:4b:36:43:c4:39:84:29:fe:77:
                    a5:a0:f1:fb:37:16:89:e2:ff:c8:b8:33:ad:e6:f1:
                    90:03:f0:a8:1e:11:37:a3:a0:92:b4:10:4b:e8:40:
                    15:c8:7a:84:6d:93:2f:84:66:df:22:9a:ea:3e:bb:
                    c9:1d:e1:d6:60:bf:7e:d5:82:49:3c:7a:ee:70:23:
                    8d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:24:BF:E3:30:A0:1B:99:50:DF:6E:ED:07:2B:3B:3A:FB:C0:B3:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f7d23a38-a15a-3763-8330-fec331d81d97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.192.246.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:4d:1e:03:d1:f0:23:ea:10:85:83:55:db:3b:a3:55:e6:06:
         9b:ce:3b:06:d7:62:db:74:ee:7c:0e:2a:19:c3:62:a8:a0:e2:
         eb:8f:37:8f:c2:9b:6e:a5:d0:50:60:4c:88:ff:b9:11:4f:cb:
         28:0f:11:b5:b0:86:2d:be:05:76:de:bd:8b:71:59:a2:28:6e:
         cc:06:8d:3c:47:23:71:b2:85:28:4d:c3:bb:b2:3d:aa:09:46:
         af:ae:29:9b:41:5b:6d:b9:fc:1f:de:79:76:d0:90:fb:79:c7:
         66:61:03:54:0e:87:09:ea:97:ba:ea:53:3b:c2:55:e3:78:64:
         59:a6:7d:e2:a9:2d:5e:8b:d3:89:01:f2:57:16:0b:41:fe:7c:
         15:8a:89:98:5b:9e:18:36:80:73:2a:dc:21:00:7e:d4:a5:e8:
         0f:6b:ba:3f:ef:9c:26:75:b5:92:41:a7:fb:1f:30:9b:6b:24:
         94:a9:21:2b:45:bc:50:fd:92:b0:2d:75:3b:d9:fd:26:17:a6:
         bf:c1:72:dd:56:e9:95:84:1a:73:20:82:cb:af:12:35:1e:4f:
         99:35:0e:1d:c9:1d:31:8a:31:96:e6:34:95:0e:ca:d8:fe:5b:
         22:bc:1c:f4:2b:4b:13:6b:05:09:b8:d3:2a:1d:1d:a8:bb:80:
         6d:2a:30:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 11:24:52 2026 by rpki-client