Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/5cbc19ba-8561-3325-aa41-36e9cd9325e5.roa
File:                     5cbc19ba-8561-3325-aa41-36e9cd9325e5.roa (raw, json)
Hash identifier:          +vndg+Yi2T9Ndz75NhPjB9Asn9Pi7TNoLYcsNEi0DjM=
Subject key identifier:   B4:F6:CC:F1:E9:39:B1:82:AE:94:D1:6F:60:92:7C:55:8B:21:1C:57
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F4328584D91C0091AC770148480E00700
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/5cbc19ba-8561-3325-aa41-36e9cd9325e5.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     40676
IP address blocks:        206.127.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:c0:09:1a:c7:70:14:84:80:e0:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=31daebd2-21ca-4eb8-8381-0bab81b071da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:42:c4:1e:00:cf:7b:ce:88:e2:64:59:f3:36:
                    fc:b7:8a:2b:00:a4:30:ce:b8:58:43:64:64:a8:02:
                    64:21:97:f5:b2:df:21:4f:1d:9d:3e:56:b9:2c:55:
                    2a:6b:ab:ec:c9:5e:93:4d:79:b2:8e:56:32:34:1d:
                    ef:a4:bf:f9:32:fc:3f:64:9d:58:91:a2:9e:a4:9f:
                    7c:52:4f:24:60:33:92:f9:1e:5b:7f:ef:b0:e6:4b:
                    a8:7a:dc:a7:6d:a2:ce:09:d2:68:e1:5a:3c:dd:5f:
                    53:5b:66:90:9a:d6:03:ce:24:46:9d:07:23:db:3d:
                    14:01:ca:de:e0:86:67:a5:a5:22:df:f6:99:11:b9:
                    7c:c4:8f:3c:39:c2:f9:5f:47:b8:b2:bf:63:26:4a:
                    b2:1d:95:eb:f6:5c:87:c4:eb:60:fb:26:51:df:e7:
                    77:ae:d6:44:d4:b7:5b:7a:f0:1b:b3:4e:b4:68:6a:
                    5f:82:8e:a6:08:be:39:7c:53:41:ce:14:7b:13:d5:
                    53:20:62:ea:e7:a6:85:fa:3a:15:4f:b2:0d:f8:ec:
                    50:7c:31:1b:bd:6a:36:d1:f6:90:79:f5:45:52:54:
                    b1:80:c0:77:a3:9e:38:b2:71:7d:d5:d1:86:21:b9:
                    b7:d9:f5:cb:40:40:9d:01:57:33:1b:cc:a7:b1:6f:
                    f9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F6:CC:F1:E9:39:B1:82:AE:94:D1:6F:60:92:7C:55:8B:21:1C:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/5cbc19ba-8561-3325-aa41-36e9cd9325e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.127.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:08:4f:b4:22:0d:de:c0:73:53:74:fc:31:62:7d:31:ab:05:
         79:c8:e7:5b:f2:17:68:54:97:e9:5a:27:9a:28:9d:1f:d3:d8:
         d7:5b:99:70:db:b0:5c:4c:f0:2e:70:ac:4f:55:ce:7b:24:d9:
         51:3a:8b:5c:79:99:15:d6:e1:e1:77:7d:6c:4f:e5:c7:f2:0d:
         75:a3:f0:b0:c1:4b:22:e8:ca:24:6d:26:ae:53:52:2e:4a:88:
         21:e7:7a:39:61:90:87:e2:3a:f8:fc:7e:35:5b:19:16:2a:a5:
         c9:89:bb:d7:1d:15:25:31:da:a6:fe:85:78:9d:20:6e:9f:04:
         41:6a:85:86:92:46:36:f5:d5:ee:cb:aa:2a:a4:61:2c:e5:09:
         6e:de:a9:33:d9:d3:a4:c0:11:76:33:85:ac:80:f7:c4:d4:46:
         b7:73:da:85:c8:c4:75:e7:e7:e3:34:48:5c:d9:97:dc:0e:ef:
         6b:c4:16:d3:da:cb:bd:d1:aa:3e:d4:90:54:c5:a5:cc:65:03:
         5f:f1:75:86:59:3b:54:15:c2:97:41:97:df:09:85:5d:b4:f5:
         87:8e:8f:6b:41:1f:b2:ce:cb:e0:6f:cc:c1:be:79:fc:99:2c:
         54:e3:1e:68:09:13:7c:38:68:76:32:20:87:be:f3:8b:9c:e0:
         02:ba:ae:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 24 23:19:35 2026 by rpki-client