Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a3073e85-2b7a-45f5-809d-4c36116cd85c/dccd8aec-fc34-3574-9ee9-85d8bdb2a7b7.roa
File:                     dccd8aec-fc34-3574-9ee9-85d8bdb2a7b7.roa (raw, json)
Hash identifier:          3Ij+R8F5/AQljRZInQAC2lo9thiUtIQWSHKqVxFaCHE=
Subject key identifier:   EF:44:ED:49:FE:78:48:7C:82:40:05:20:69:DC:50:35:B7:74:B9:62
Certificate issuer:       /CN=a3073e85-2b7a-45f5-809d-4c36116cd85c
Certificate serial:       010D0C9F4328584DD1F5BE7252D7F29958D8E900
Authority key identifier: 16:D4:A2:91:CE:45:6E:BA:43:DB:81:7F:C1:DF:C0:86:2B:8A:F9:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a3073e85-2b7a-45f5-809d-4c36116cd85c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a3073e85-2b7a-45f5-809d-4c36116cd85c/dccd8aec-fc34-3574-9ee9-85d8bdb2a7b7.roa
Signing time:             Wed 13 May 2026 13:00:31 +0000
ROA not before:           Wed 13 May 2026 13:00:31 +0000
ROA not after:            Tue 11 Aug 2026 13:00:31 +0000
asID:                     7922
IP address blocks:        206.225.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a3073e85-2b7a-45f5-809d-4c36116cd85c/a3073e85-2b7a-45f5-809d-4c36116cd85c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a3073e85-2b7a-45f5-809d-4c36116cd85c/a3073e85-2b7a-45f5-809d-4c36116cd85c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a3073e85-2b7a-45f5-809d-4c36116cd85c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d1:f5:be:72:52:d7:f2:99:58:d8:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3073e85-2b7a-45f5-809d-4c36116cd85c
        Validity
            Not Before: May 13 13:00:31 2026 GMT
            Not After : Aug 11 13:00:31 2026 GMT
        Subject: CN=14b11149-6a71-4ec1-a685-ce3c70df4c44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:61:a0:ea:14:99:92:f4:8b:31:6f:18:f2:42:
                    43:32:12:d8:64:1a:8b:78:cd:25:cf:db:b4:34:7d:
                    75:5d:58:99:ae:40:e8:d6:14:08:24:0d:29:cc:a1:
                    3c:e1:2e:b6:67:b3:9d:96:3f:bd:26:3a:ea:f0:2c:
                    f1:57:73:fd:5a:c9:cb:ba:9b:cc:00:e1:76:d0:15:
                    24:0b:33:e2:08:12:1d:63:21:b4:b9:a1:30:b8:c7:
                    29:31:d3:c6:d8:19:ed:d2:35:f8:fd:e9:2a:6d:00:
                    10:be:20:e6:33:5b:ef:80:45:e1:49:61:11:bd:89:
                    92:77:d4:89:7c:d3:41:3e:68:d8:dd:a3:71:bf:dc:
                    14:aa:ce:9a:51:b4:42:6c:e7:a6:3c:2e:6d:04:d6:
                    da:7b:ca:b8:1b:1f:fc:f3:7b:81:b5:14:b0:d3:d5:
                    b0:2d:5c:ee:73:b7:5b:28:9d:36:f3:e1:07:26:d5:
                    9e:51:76:70:66:02:47:f0:0c:22:52:80:e7:56:70:
                    64:12:41:9a:4e:2f:65:a9:41:e1:e3:b5:77:ef:0c:
                    ad:a2:16:90:8c:16:bc:34:a8:5b:bc:2a:84:27:24:
                    df:46:88:52:69:86:8b:a9:8a:57:e0:27:f1:61:f8:
                    8f:e1:a3:ec:02:3f:ff:9e:2c:58:67:cc:72:fb:51:
                    c3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:44:ED:49:FE:78:48:7C:82:40:05:20:69:DC:50:35:B7:74:B9:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a3073e85-2b7a-45f5-809d-4c36116cd85c/dccd8aec-fc34-3574-9ee9-85d8bdb2a7b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a3073e85-2b7a-45f5-809d-4c36116cd85c/a3073e85-2b7a-45f5-809d-4c36116cd85c.crl

            X509v3 Authority Key Identifier:
                keyid:16:D4:A2:91:CE:45:6E:BA:43:DB:81:7F:C1:DF:C0:86:2B:8A:F9:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a3073e85-2b7a-45f5-809d-4c36116cd85c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.225.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:3f:1e:b7:8b:04:48:e9:5d:3a:7e:44:af:ff:b9:b4:3e:d2:
         20:4a:55:4e:6b:94:97:49:e3:cf:02:f1:c8:95:4f:35:95:9a:
         9c:6e:79:8f:66:39:b5:14:08:47:35:df:6e:d5:29:e8:b8:48:
         38:3e:d1:bb:5c:6d:91:cd:8f:f0:f8:82:c8:97:57:10:5f:75:
         bc:76:6a:64:6b:f1:5c:04:30:92:92:2f:3b:3e:22:8d:8b:b0:
         e2:43:90:a5:16:a8:94:0d:3a:e8:14:93:ab:7f:6b:ae:61:3f:
         51:6a:1a:4f:44:78:34:1f:a4:8e:b1:8b:2b:41:4e:c1:c0:2b:
         51:3b:82:59:dc:01:ef:20:61:f3:66:4e:9e:23:24:18:58:3b:
         1f:b7:c1:4d:af:7f:a8:94:67:61:e1:e7:e2:41:5a:b4:ae:b5:
         ef:2a:59:53:ed:7f:96:9c:16:85:10:14:2a:5c:9b:ef:fc:fa:
         5b:c4:54:f3:63:41:1a:36:3f:cb:27:33:75:fd:86:5f:2a:a4:
         84:5f:79:10:ce:f0:bd:33:0f:d0:c7:d8:a0:f7:bd:b7:27:69:
         d1:90:33:5a:c3:b6:83:ec:0f:42:d5:8d:11:b7:46:83:b1:07:
         3d:a8:b4:b9:fa:3b:d1:5f:90:cd:f1:c7:cc:fc:9c:f9:02:74:
         0d:52:c1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 26 04:01:26 2026 by rpki-client