Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/922506ab-190b-4044-a562-b1717e19da36/ed42dbd2-f573-34a5-8797-5b5794619121.roa
File:                     ed42dbd2-f573-34a5-8797-5b5794619121.roa (raw, json)
Hash identifier:          QcsS8dFrLsEfhbPB1+zEnIM0LeLwrsy1xmwupC9h1MU=
Subject key identifier:   28:4B:18:EE:05:08:51:47:DF:A8:67:44:35:C4:DA:34:3B:2F:93:F5
Certificate issuer:       /CN=922506ab-190b-4044-a562-b1717e19da36
Certificate serial:       010D0C9F4328584D5F7FAE63EC7112B142FB9780
Authority key identifier: D4:03:01:51:4E:30:68:5A:3E:2E:BD:2E:93:EB:D6:C5:A9:21:71:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/922506ab-190b-4044-a562-b1717e19da36.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/922506ab-190b-4044-a562-b1717e19da36/ed42dbd2-f573-34a5-8797-5b5794619121.roa
Signing time:             Thu 02 Apr 2026 13:00:30 +0000
ROA not before:           Thu 02 Apr 2026 13:00:30 +0000
ROA not after:            Wed 01 Jul 2026 13:00:30 +0000
asID:                     29831
IP address blocks:        206.168.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/922506ab-190b-4044-a562-b1717e19da36/922506ab-190b-4044-a562-b1717e19da36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/922506ab-190b-4044-a562-b1717e19da36/922506ab-190b-4044-a562-b1717e19da36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/922506ab-190b-4044-a562-b1717e19da36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5f:7f:ae:63:ec:71:12:b1:42:fb:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=922506ab-190b-4044-a562-b1717e19da36
        Validity
            Not Before: Apr  2 13:00:30 2026 GMT
            Not After : Jul  1 13:00:30 2026 GMT
        Subject: CN=d86a987a-66f3-4a00-82d9-05dd57c33042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:57:8c:c0:73:a3:66:e6:5e:7c:e0:a0:08:7f:
                    92:aa:b1:7a:7b:b0:f2:62:f5:6b:b3:11:37:94:9b:
                    31:60:e5:10:b1:53:73:c4:f2:b9:cd:2a:94:e8:35:
                    cf:04:5f:4f:fa:c0:bf:fc:df:5c:ac:7c:9d:7a:30:
                    d9:46:1d:9d:7a:de:c4:0e:13:9b:0b:44:04:62:11:
                    73:3e:f7:90:f1:34:c4:d8:cf:87:b5:dd:fd:62:5f:
                    2b:db:fb:4e:87:3c:84:0f:4f:6b:7f:98:ef:61:1a:
                    e2:9b:10:ee:f9:e9:15:27:7f:48:0c:af:39:65:14:
                    ea:d8:0d:44:19:3e:f5:e9:e6:ba:15:20:59:ab:8b:
                    77:ae:81:71:b7:a9:53:04:67:ac:f7:b2:9d:e5:07:
                    9e:57:ec:15:b6:87:1e:6a:b8:f7:6e:ef:67:ac:f0:
                    bf:a4:52:50:4d:78:06:0f:67:cf:06:d4:99:6a:88:
                    bf:52:2c:d5:f5:d1:2c:4f:73:d3:a2:65:56:bc:ee:
                    28:5a:79:bb:f5:ac:89:7a:14:b1:f0:27:a9:15:03:
                    39:16:fa:93:9e:1a:16:10:50:5b:16:a6:9f:6c:68:
                    64:ca:fb:5d:8b:55:7a:cc:73:4e:25:93:bc:57:3a:
                    8e:81:78:36:69:ad:09:59:3c:7a:52:e7:b2:ee:24:
                    9c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:4B:18:EE:05:08:51:47:DF:A8:67:44:35:C4:DA:34:3B:2F:93:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/922506ab-190b-4044-a562-b1717e19da36/ed42dbd2-f573-34a5-8797-5b5794619121.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/922506ab-190b-4044-a562-b1717e19da36/922506ab-190b-4044-a562-b1717e19da36.crl

            X509v3 Authority Key Identifier:
                keyid:D4:03:01:51:4E:30:68:5A:3E:2E:BD:2E:93:EB:D6:C5:A9:21:71:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/922506ab-190b-4044-a562-b1717e19da36.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:55:f0:da:95:ac:18:37:e3:cc:74:26:c1:93:c8:0e:3a:e3:
         5c:1e:88:84:00:9b:fe:49:ff:85:97:1a:71:51:72:bb:2d:66:
         bb:13:78:71:7d:2a:eb:d0:a8:0a:2f:bf:3d:9e:c9:74:58:cc:
         a0:45:f2:9a:a2:d8:1c:58:23:c1:96:e0:8b:4b:f4:e4:30:b7:
         1d:79:1c:dc:3f:8b:0e:aa:bd:73:06:fb:84:f0:4e:6c:67:10:
         a0:06:24:9a:92:f6:4e:71:f1:30:e6:06:71:92:a1:57:25:fd:
         dd:aa:32:a6:7c:85:0e:62:de:66:2a:98:05:80:42:c0:6f:b3:
         90:a5:fb:ee:8a:1a:4e:94:d4:af:9a:e6:37:f5:1c:20:91:d6:
         fc:a8:94:48:a2:3f:0b:18:50:f0:d1:53:36:84:f5:52:94:9d:
         21:97:21:8c:13:f2:66:f5:31:fe:09:a5:0b:0c:a6:10:9a:bf:
         01:01:28:c6:9c:2d:e3:64:a5:26:10:9b:bc:1f:a7:7a:63:74:
         01:94:56:3a:9f:9a:de:a2:e0:e9:8e:4f:d7:4e:49:b8:e6:8f:
         47:23:1b:24:70:bf:1a:d9:8a:b0:7e:b6:0d:10:47:f0:e5:1c:
         86:6c:2d:8a:a4:5e:7f:9d:b5:de:b0:72:56:81:d0:17:03:86:
         fe:e0:68:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 13:22:53 2026 by rpki-client