Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/ac8e58bc-3039-3dd4-9a12-9cf852ff8a4f.roa
File:                     ac8e58bc-3039-3dd4-9a12-9cf852ff8a4f.roa (raw, json)
Hash identifier:          ma1br4F+TV1H0xFB13FH3zAs66QFIBMW9Ma96kngE9k=
Subject key identifier:   A7:5D:98:00:43:98:E1:55:E7:BD:AA:52:25:06:C8:CB:79:C3:C7:32
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F4328584EFCACC21EC85B56B47DFF6180
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/ac8e58bc-3039-3dd4-9a12-9cf852ff8a4f.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     14297
IP address blocks:        206.201.18.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:c2:1e:c8:5b:56:b4:7d:ff:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=928c33d7-5982-4b1b-b449-b720bd30bcee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b8:1a:7d:f6:3c:ca:9d:e4:d9:f1:6b:b4:d8:
                    e4:c4:f5:02:56:13:21:3b:0e:40:ab:99:d0:2f:fb:
                    6b:18:72:e1:d5:17:25:63:22:c4:c0:d8:0c:92:50:
                    a0:c4:88:99:76:97:90:72:70:a2:8b:3a:da:79:cd:
                    f3:41:4f:c0:df:57:9f:fd:83:1c:2b:4c:d5:8f:fd:
                    b4:72:d7:70:94:1d:3c:3b:65:d2:20:cb:eb:88:82:
                    2c:af:3c:12:c7:91:be:80:67:50:8a:0d:16:71:9b:
                    2d:5f:f2:b9:9b:b3:1e:e4:ed:c3:c3:c3:86:57:58:
                    26:fd:6d:c2:39:87:6f:39:0a:e2:65:ab:ae:2e:08:
                    95:0d:76:54:d5:36:5c:fd:fb:da:a3:82:fb:ba:89:
                    50:14:27:15:0f:51:b7:74:0a:e9:46:2c:20:79:8f:
                    ee:f5:30:76:81:e8:4f:63:e2:f5:ef:83:65:63:1f:
                    a7:ee:b4:58:61:e6:b3:b3:b2:f3:ea:db:fe:fd:39:
                    2b:de:f4:2d:0c:f9:f6:c5:49:37:db:a8:a5:61:38:
                    c2:37:fe:b3:3d:1c:42:2e:d4:89:63:70:84:99:ad:
                    d0:c6:19:4d:da:48:06:b1:14:ff:46:fb:51:a5:ba:
                    c0:a5:ab:ba:4c:08:a5:15:16:8d:cb:91:4d:14:a2:
                    b8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:5D:98:00:43:98:E1:55:E7:BD:AA:52:25:06:C8:CB:79:C3:C7:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/ac8e58bc-3039-3dd4-9a12-9cf852ff8a4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.201.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:ea:b0:a9:f3:4a:86:2c:3f:bf:2f:24:01:57:78:a1:96:78:
         d2:ab:33:02:1a:9e:de:d9:46:63:67:d2:52:8a:95:c8:49:ac:
         35:73:4f:6f:46:40:1a:fb:bf:58:6e:6b:9a:5c:d0:28:f2:c3:
         de:15:3c:07:d5:97:62:fa:0f:34:01:a8:fe:3d:33:a7:44:56:
         cf:3f:16:68:42:f3:5f:8a:00:e6:c8:91:fa:27:e0:2a:35:e2:
         94:4d:06:8d:05:58:32:41:b2:f7:13:d7:ae:58:22:bc:ef:0c:
         d3:33:21:f9:90:4c:e0:f5:4e:a0:76:9c:9c:8d:19:0b:7e:d2:
         00:62:1b:8f:a7:6d:86:30:19:70:b2:23:d1:58:b3:37:60:2b:
         a3:97:22:8d:a8:b1:68:26:6f:e5:dc:79:c8:6e:5e:91:af:fd:
         e7:f6:c0:fd:3a:76:b4:59:16:b0:ed:a2:1a:0b:f0:39:69:6b:
         56:21:f5:19:3f:f8:d1:78:5e:0e:fc:ea:ea:01:a7:8b:f5:3e:
         0a:68:c5:21:8e:49:c3:44:b7:34:a4:79:58:79:5f:46:98:02:
         da:89:0f:eb:ec:28:b7:27:2f:31:ea:e8:24:48:90:59:46:15:
         00:2e:23:b8:6e:55:9f:ff:1e:4a:b7:c4:93:9f:08:99:82:13:
         6f:c7:5c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:00:50 2026 by rpki-client