Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/425bc425-ab56-3ed6-90a7-fa902292f916.roa
File:                     425bc425-ab56-3ed6-90a7-fa902292f916.roa (raw, json)
Hash identifier:          y94MWmU8xX2JnCyihzR71YW0s8lWBNFLJ46nB5TI/7s=
Subject key identifier:   73:3A:DD:73:B6:46:58:19:11:16:5F:C3:A2:8C:2C:65:F6:6F:38:69
Certificate issuer:       /CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
Certificate serial:       010D0C9F4328584D905AA12D6ADAE6AAD9869E00
Authority key identifier: D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/425bc425-ab56-3ed6-90a7-fa902292f916.roa
Signing time:             Mon 20 Apr 2026 01:00:24 +0000
ROA not before:           Mon 20 Apr 2026 01:00:24 +0000
ROA not after:            Sun 19 Jul 2026 01:00:24 +0000
asID:                     13213
IP address blocks:        206.130.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 May 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:90:5a:a1:2d:6a:da:e6:aa:d9:86:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
        Validity
            Not Before: Apr 20 01:00:24 2026 GMT
            Not After : Jul 19 01:00:24 2026 GMT
        Subject: CN=69bb2fa2-97b2-4d46-9584-8d1cd24f1267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:b2:9d:d4:11:47:71:0d:66:a5:dd:f2:34:20:
                    6d:3b:c2:b5:f9:d9:62:8d:3f:16:51:8f:b6:7d:2f:
                    c8:96:e4:f4:60:da:a6:1d:b7:65:7b:3b:93:5c:07:
                    b9:7c:4a:18:f6:ff:b9:38:60:0f:e5:9b:81:a3:75:
                    f1:5a:d1:80:a8:19:64:3e:57:e1:75:02:67:f3:85:
                    69:23:39:b8:3a:ec:52:63:26:4f:51:08:41:f7:de:
                    ec:80:7d:f2:e1:dc:60:63:10:a4:47:cf:01:32:06:
                    d3:9e:bb:9e:1d:55:80:8e:84:f4:59:59:73:5b:59:
                    54:74:5d:19:6c:51:06:45:b0:78:a5:aa:f7:6b:e0:
                    8b:97:a2:e6:70:9e:59:cf:f5:b9:7f:37:f6:70:ae:
                    ca:96:d7:e0:55:93:d2:f7:67:8d:c9:b4:0e:43:c4:
                    ec:a3:a3:bf:5b:4a:cb:f2:2e:ba:eb:87:d4:b2:21:
                    01:66:38:a1:fc:0d:fa:4f:bc:f0:e0:73:96:73:07:
                    b9:17:39:ef:b4:45:8d:62:0b:09:dd:5d:05:39:98:
                    e6:a3:1b:53:30:83:e5:5a:c8:17:ea:4d:86:15:aa:
                    54:46:22:d4:2c:89:7f:ba:94:29:0e:f9:4a:38:c3:
                    71:29:60:fc:5e:e2:61:c8:ff:9f:80:9f:18:b1:fe:
                    b6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:3A:DD:73:B6:46:58:19:11:16:5F:C3:A2:8C:2C:65:F6:6F:38:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/425bc425-ab56-3ed6-90a7-fa902292f916.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl

            X509v3 Authority Key Identifier:
                keyid:D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.130.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:55:f4:c3:f0:a1:55:9b:55:fa:0a:43:df:eb:07:41:b9:68:
         b7:87:c6:f1:be:5b:fc:48:03:38:d0:b3:d0:d8:d9:dc:2c:22:
         a5:51:44:7d:e6:e4:87:99:21:26:50:e0:9f:97:f1:24:99:d5:
         d0:cd:f5:47:7b:35:bf:4d:7b:59:b9:d0:80:c2:2e:ef:e6:97:
         e4:d2:e0:d4:05:e0:9a:e8:26:f3:6d:63:32:1c:b2:27:8e:90:
         2b:c7:1c:62:f7:7b:de:ad:a9:20:3e:cb:8a:f0:5f:79:ac:ce:
         5b:1d:97:2a:eb:65:fb:65:26:a2:47:e8:e8:04:72:61:81:55:
         ef:68:13:1c:0b:1e:b3:36:9c:50:21:3a:d3:b1:21:73:dc:54:
         6e:33:25:1d:cc:88:17:8a:20:68:8a:8d:35:03:37:fa:b9:52:
         4f:8d:e5:ad:7b:93:99:e8:f3:fd:56:0f:97:c6:39:c3:58:85:
         b7:da:af:5c:5e:e4:f9:c0:da:90:03:7e:f8:96:c9:48:24:fc:
         ac:61:fa:70:06:53:85:7f:57:4d:20:1c:aa:3a:72:43:0a:43:
         62:28:00:21:6a:41:72:fb:b8:c8:b9:ec:f3:04:02:ed:74:6f:
         a5:36:e4:20:c4:cb:06:00:7a:b8:66:6a:3b:0f:24:b4:88:3a:
         2c:75:ef:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 4 03:10:34 2026 by rpki-client