Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/0bfdcce3-bf0c-3c99-8e69-783195d18590.roa
File:                     0bfdcce3-bf0c-3c99-8e69-783195d18590.roa (raw, json)
Hash identifier:          PkR9s+j1PR0qsIa/ra2kzdpEtEJ8bopVwO++OO3HOkk=
Subject key identifier:   90:78:0E:A7:31:D3:8A:AD:FF:13:ED:B9:C0:90:08:C4:AF:32:22:8F
Certificate issuer:       /CN=06b2da7d-ae03-4c12-bd29-f0c285888740
Certificate serial:       010D0C9F4328584EE38C9A706F33737FABB12F00
Authority key identifier: B8:FD:89:4B:88:4F:53:16:18:88:90:87:6E:B8:1B:07:4D:27:4A:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/0bfdcce3-bf0c-3c99-8e69-783195d18590.roa
Signing time:             Wed 19 Aug 2026 13:00:11 +0000
ROA not before:           Wed 19 Aug 2026 13:00:11 +0000
ROA not after:            Tue 17 Nov 2026 14:00:11 +0000
asID:                     16509
IP address blocks:        206.195.222.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/06b2da7d-ae03-4c12-bd29-f0c285888740.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/06b2da7d-ae03-4c12-bd29-f0c285888740.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e3:8c:9a:70:6f:33:73:7f:ab:b1:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06b2da7d-ae03-4c12-bd29-f0c285888740
        Validity
            Not Before: Aug 19 13:00:11 2026 GMT
            Not After : Nov 17 14:00:11 2026 GMT
        Subject: CN=681e2463-a538-423a-b06e-c3f2b4e010e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6b:f1:60:cd:06:06:ea:ea:8c:73:a7:16:5a:
                    a4:49:af:11:47:c9:dd:3e:0f:bf:ef:49:e6:e9:2b:
                    34:90:c8:4e:ef:a3:44:92:30:a0:41:18:d1:d7:e9:
                    3c:b0:f8:59:25:04:90:d7:d8:40:4c:dd:00:80:0d:
                    ba:a4:4e:7d:f1:ca:da:52:41:47:1f:8b:91:c7:dc:
                    8a:13:49:e2:bc:05:01:09:b8:84:0a:bb:dc:ee:ea:
                    ff:04:ed:11:12:9f:ae:a8:f3:db:cb:3f:b7:a1:7e:
                    04:24:3d:f5:fd:e1:0d:ee:b4:ca:b5:fc:5e:25:78:
                    97:99:92:00:59:86:6a:1f:ea:14:92:c3:fb:dc:8b:
                    95:7e:a1:84:a9:5c:50:f2:87:da:a0:4f:12:4c:6a:
                    0a:26:89:88:91:e1:32:00:51:b3:e7:f9:a0:91:f3:
                    79:15:2a:42:65:09:ea:57:a5:6e:20:c7:95:37:6b:
                    aa:97:9c:e3:77:45:6a:e5:53:10:c5:de:17:16:b5:
                    ba:eb:eb:85:b8:6e:b2:a6:72:42:52:17:96:1f:20:
                    29:1d:63:13:82:a9:90:17:e5:a5:15:42:0e:20:f4:
                    f2:6d:b3:aa:b7:ec:c8:30:c5:70:a1:83:1b:bd:79:
                    58:21:07:cd:98:27:47:db:3c:c7:e9:c7:9c:8b:6f:
                    cd:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:78:0E:A7:31:D3:8A:AD:FF:13:ED:B9:C0:90:08:C4:AF:32:22:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/0bfdcce3-bf0c-3c99-8e69-783195d18590.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/06b2da7d-ae03-4c12-bd29-f0c285888740.crl

            X509v3 Authority Key Identifier:
                keyid:B8:FD:89:4B:88:4F:53:16:18:88:90:87:6E:B8:1B:07:4D:27:4A:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.195.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:46:df:34:fa:16:2b:4a:96:24:15:fb:07:6b:c0:b6:ce:43:
         8c:a3:68:b9:10:ff:4e:cb:38:9b:88:81:ca:cb:2c:f8:26:8a:
         36:fb:13:1d:7b:d3:92:e5:20:78:d9:e3:2b:90:a6:08:14:b7:
         07:94:2d:2f:a5:a1:f4:a4:0c:4c:35:71:21:9c:e3:29:6f:dc:
         16:18:f4:e8:ea:78:96:12:89:b7:1a:21:c3:eb:26:42:e6:00:
         bc:e7:91:2d:fb:84:e0:b1:ff:1c:f3:13:5c:ba:08:08:5a:a6:
         f9:c5:67:9a:6a:74:d0:d1:32:c6:4b:a4:43:23:99:a8:ce:4a:
         93:69:01:68:10:cb:1f:f8:39:10:20:40:d9:81:f9:33:b7:15:
         02:16:a8:be:d6:38:90:ce:99:d1:fd:e6:51:6a:73:bd:9e:5e:
         a8:6c:f2:c5:6c:63:6f:d1:30:31:ce:20:7a:81:90:69:ba:56:
         a8:eb:13:d3:0e:81:0d:1b:c8:ab:f8:4c:fb:4f:23:5b:4c:aa:
         14:87:66:10:29:12:90:d2:99:a5:89:45:4b:70:d6:a1:de:fb:
         0c:72:b1:2c:9d:b9:9f:c4:73:7e:d2:a0:d4:2d:b9:96:95:95:
         45:b2:83:09:38:05:66:fd:22:90:9b:aa:d4:b9:55:30:e7:d5:
         59:09:90:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:52:36 2026 by rpki-client