Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6e4722f3-e912-317b-9e77-89a6fd9ef9ec.roa
File:                     6e4722f3-e912-317b-9e77-89a6fd9ef9ec.roa (raw, json)
Hash identifier:          HOGgYnW0ezgUtnTSkp8XrVVYj1MLKsKpj4Bdesxk/hw=
Subject key identifier:   A0:60:43:26:8F:E2:80:EB:FE:AA:32:8F:FA:9A:28:0E:08:AF:D4:64
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584EF7177D3D1DAF60AB71145880
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6e4722f3-e912-317b-9e77-89a6fd9ef9ec.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     3356
IP address blocks:        206.164.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:7d:3d:1d:af:60:ab:71:14:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=5b9fd605-ce76-476c-ae11-556dcbb556e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7f:10:3d:c9:22:95:c5:b8:ab:b4:7f:28:23:
                    8b:96:ae:39:f8:5b:0e:ae:63:36:35:fc:cc:90:c4:
                    61:1b:f1:db:3e:77:e1:77:d6:d0:07:83:95:ba:14:
                    3e:0f:a7:52:08:a2:f0:e2:59:13:ea:01:55:7d:ba:
                    e3:2f:ea:e2:6c:40:8e:83:f1:8c:ef:50:da:4e:e4:
                    e2:93:76:91:da:fc:ab:36:f0:86:2b:78:f5:98:78:
                    50:34:49:5b:44:b8:57:19:ad:10:da:72:a0:00:3d:
                    3d:fb:17:44:9a:e0:cc:2e:37:61:f1:6a:25:f1:01:
                    f7:09:83:94:ae:72:ff:12:c3:13:a4:1c:e5:cc:ca:
                    36:de:67:52:45:e9:d1:4d:98:be:35:dd:58:f9:a0:
                    69:58:02:e3:78:0c:bd:61:32:64:1c:32:f2:4d:a2:
                    d7:76:ce:c0:23:45:de:0b:6a:be:6b:74:5a:4a:82:
                    44:20:c4:c5:3e:c5:e3:35:67:0b:02:8a:06:29:03:
                    72:a0:bc:0a:a0:6f:f1:88:5e:1d:72:a8:51:7f:6f:
                    60:f1:3f:a6:9b:64:1b:3c:15:4b:75:7e:46:e4:f8:
                    02:68:95:03:43:c9:87:b2:20:ef:69:a0:84:a9:de:
                    3a:88:9e:f5:da:14:4d:39:a7:cc:89:cb:ba:7b:97:
                    21:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:60:43:26:8F:E2:80:EB:FE:AA:32:8F:FA:9A:28:0E:08:AF:D4:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6e4722f3-e912-317b-9e77-89a6fd9ef9ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.164.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:17:50:40:42:40:44:d6:9b:6d:3b:d8:b9:fc:4e:3f:fd:29:
         4c:11:e0:71:84:ee:5c:61:0d:9f:5e:e9:65:37:25:29:58:52:
         63:94:f8:4a:68:78:2c:9c:13:d4:7f:06:ed:51:cc:83:3f:5f:
         48:0e:81:51:da:42:e6:af:05:ab:83:0a:48:99:6f:a7:1b:08:
         6e:38:0b:58:34:6a:66:c5:6a:25:a2:f8:14:16:f4:e9:51:22:
         3a:ab:12:0f:cc:84:09:b4:9a:d4:9d:32:4e:e3:04:6a:04:fb:
         66:9c:5b:2b:9a:48:5e:c7:98:fa:67:d5:81:33:de:18:df:b0:
         d5:5c:3b:92:d1:97:41:1d:2e:99:6d:ea:42:57:f1:0c:0a:f1:
         fb:a8:63:9e:58:66:8b:f8:d7:16:09:29:e2:03:cf:ca:41:85:
         3c:5a:0a:66:fc:b9:80:f5:c6:68:4e:30:76:88:0c:3a:9f:69:
         43:20:00:82:ff:2e:22:65:ef:53:28:aa:4d:8b:fa:de:1d:20:
         f4:ec:bc:cf:2c:45:f4:6d:39:44:4b:3e:a0:d9:0a:97:51:87:
         c0:22:9b:eb:55:bc:bd:d3:dd:d1:96:88:de:fa:c2:56:a8:fb:
         ad:87:6e:b0:85:3f:d9:59:83:69:1d:5e:3c:dd:bc:45:da:b9:
         3b:8e:c5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:26:02 2026 by rpki-client