Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/06f408c1-157c-3c4a-812a-c88d4ef4c2db.roa
File:                     06f408c1-157c-3c4a-812a-c88d4ef4c2db.roa (raw, json)
Hash identifier:          ly/KXrfF3ff77j/aUQyLOe2w4IJ3gDkjd8NwWdEH7YY=
Subject key identifier:   F0:FA:90:CB:11:61:A1:F1:6F:B8:56:E0:EB:6A:6C:65:F9:66:D5:C9
Certificate issuer:       /CN=bc6884d6-b11e-4280-9c4c-8177287d9869
Certificate serial:       010D0C9F4328584EA7879DBCEC115D8F66A97180
Authority key identifier: 15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/06f408c1-157c-3c4a-812a-c88d4ef4c2db.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     398324
IP address blocks:        206.168.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:9d:bc:ec:11:5d:8f:66:a9:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc6884d6-b11e-4280-9c4c-8177287d9869
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=0153bed4-2c57-4b5f-8ecf-6008eb5df268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6c:8b:6a:8c:66:14:d2:d7:c2:88:01:c9:5d:
                    bf:49:c9:ae:e0:5f:f5:ed:b1:ac:57:6e:fd:f0:35:
                    f7:83:86:eb:f3:b8:9c:38:85:73:05:00:c0:b3:c2:
                    be:df:43:2a:3c:42:ee:9c:db:0b:54:db:7e:59:ed:
                    a2:46:65:34:77:37:39:9e:77:da:9d:74:7d:9d:5c:
                    61:0e:c9:b2:24:76:5d:aa:bc:b7:44:37:d3:7a:00:
                    2a:b7:e9:01:a1:ab:74:6c:9d:bf:a9:97:68:3a:85:
                    94:31:ba:95:a2:de:c5:55:8a:cd:de:fc:c9:dc:5b:
                    d0:39:a7:10:71:b5:6f:56:ff:59:d7:4d:77:b1:dd:
                    6d:ed:8a:fc:ea:b7:40:a4:f8:75:97:a8:2b:38:e3:
                    60:6f:4b:c2:90:e6:bc:44:e7:b3:58:a6:64:d9:9d:
                    83:6d:9b:c3:80:9d:d8:7f:56:b2:46:26:87:d0:37:
                    47:4a:ce:a1:20:e2:08:25:fc:52:7a:35:f0:cb:0d:
                    96:6a:b2:96:d4:17:3d:29:a2:a0:f4:40:1c:69:c7:
                    09:99:0e:9b:f5:2a:e9:b2:43:34:fb:82:51:74:75:
                    d0:a8:0a:43:0e:34:ed:e4:f7:97:a4:02:49:58:a8:
                    4e:6f:10:74:24:6f:e3:9c:3e:96:09:7c:70:bc:b7:
                    be:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:FA:90:CB:11:61:A1:F1:6F:B8:56:E0:EB:6A:6C:65:F9:66:D5:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/06f408c1-157c-3c4a-812a-c88d4ef4c2db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl

            X509v3 Authority Key Identifier:
                keyid:15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:16:23:78:b6:3c:10:36:dc:73:7d:9e:34:2c:fa:43:12:b3:
         ea:5c:32:76:5d:37:ee:c6:4b:f3:f0:83:31:d5:cc:7b:1d:32:
         46:3c:b6:19:30:ea:43:f2:fd:6c:18:bc:90:7a:5a:b8:8f:1b:
         c0:f2:5a:75:1e:1a:52:d6:11:70:b3:64:8f:f4:1d:2d:9b:cd:
         b8:11:82:2a:9d:f8:61:16:25:e8:a5:6a:71:03:b7:dd:65:0e:
         af:87:e6:1e:f2:3f:de:ff:7b:57:9c:46:85:f4:53:91:bc:4b:
         51:c1:d4:0b:14:ad:b0:21:e7:e1:02:0f:47:26:c7:d9:38:28:
         18:4e:c2:35:d5:c3:2e:ed:44:d9:41:08:24:87:8d:1c:e6:8c:
         c5:69:ab:65:02:f8:c9:5b:85:a3:b3:d6:86:38:47:ce:d0:96:
         a5:c4:ee:c0:90:8b:bb:eb:d3:16:c6:4d:ef:a7:54:df:ad:7c:
         6d:bf:9d:bf:19:fb:bb:57:a9:2f:a1:35:d5:51:bd:01:e4:59:
         65:f1:a2:a4:51:03:cf:44:7d:1b:63:6e:77:cd:3d:b0:77:80:
         5c:36:9b:20:24:2c:1b:4c:bd:d1:1f:31:02:e4:19:30:90:4a:
         44:27:52:da:02:ea:f4:cb:85:bc:e8:74:6f:49:c6:31:1d:7e:
         b3:26:a7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 09:44:33 2026 by rpki-client