Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6830f8c6-bc25-42bd-8847-d98a6c864d81/4cf91a46-a6cd-399a-bee9-d61019f6740a.roa
File:                     4cf91a46-a6cd-399a-bee9-d61019f6740a.roa (raw, json)
Hash identifier:          2S8mWKrxpJxVOMQFhIAXOk2Nfgk3QxSa5egN49VRA/8=
Subject key identifier:   D9:39:E3:67:F6:29:20:39:15:32:1F:14:55:2D:E1:32:4A:BC:A2:82
Certificate issuer:       /CN=6830f8c6-bc25-42bd-8847-d98a6c864d81
Certificate serial:       010D0C9F4328584F498A8ABBA746DC9742BD0380
Authority key identifier: 50:C5:54:AD:5A:0E:EC:A7:92:94:EC:56:F2:1F:76:2F:60:35:DF:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6830f8c6-bc25-42bd-8847-d98a6c864d81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6830f8c6-bc25-42bd-8847-d98a6c864d81/4cf91a46-a6cd-399a-bee9-d61019f6740a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     23239
IP address blocks:        206.209.212.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6830f8c6-bc25-42bd-8847-d98a6c864d81/6830f8c6-bc25-42bd-8847-d98a6c864d81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6830f8c6-bc25-42bd-8847-d98a6c864d81/6830f8c6-bc25-42bd-8847-d98a6c864d81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6830f8c6-bc25-42bd-8847-d98a6c864d81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:8a:bb:a7:46:dc:97:42:bd:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6830f8c6-bc25-42bd-8847-d98a6c864d81
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=fb6ee488-70ea-49c5-ba2e-a52d88614a80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3a:1f:de:7f:7c:f8:5f:ee:db:16:77:41:bb:
                    8b:5c:a7:60:47:be:9e:29:82:41:86:9e:ed:3d:3c:
                    34:e3:00:c6:7a:11:18:c3:b6:0f:91:99:3f:8f:f2:
                    61:3a:61:a9:90:e7:cf:be:d3:55:3c:9c:13:ce:47:
                    32:8d:81:24:b7:5a:f8:c5:ea:0a:c8:71:be:33:9d:
                    69:bd:6b:c9:2e:11:a8:6a:5f:6b:9b:90:7f:98:e1:
                    c1:72:76:c3:8e:5d:d6:dc:bf:f2:8c:3b:5d:28:68:
                    46:1c:92:4d:15:9b:99:4a:1f:5c:3d:1d:45:8f:ba:
                    57:2f:a2:31:b9:37:51:c0:42:4b:4f:50:e9:4b:ea:
                    d7:48:9b:fb:3d:5f:fd:86:fb:43:22:45:53:02:73:
                    4c:b3:52:e5:7d:1a:3d:01:f0:73:cd:c8:c2:6b:78:
                    92:2a:5b:02:54:ce:16:f7:09:92:85:8c:f1:56:a2:
                    6e:76:49:00:45:b2:45:19:f6:09:29:eb:c0:9c:eb:
                    13:76:9d:3e:39:22:df:6f:e2:f3:dc:3d:8d:59:07:
                    e6:3e:11:25:b1:f6:6a:49:c6:5f:aa:9d:da:4b:db:
                    65:0f:cf:be:b5:47:44:2b:8a:95:4f:53:71:7a:88:
                    d3:a0:c5:2b:86:3e:ce:fc:19:ed:c6:54:91:d6:21:
                    95:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:39:E3:67:F6:29:20:39:15:32:1F:14:55:2D:E1:32:4A:BC:A2:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6830f8c6-bc25-42bd-8847-d98a6c864d81/4cf91a46-a6cd-399a-bee9-d61019f6740a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6830f8c6-bc25-42bd-8847-d98a6c864d81/6830f8c6-bc25-42bd-8847-d98a6c864d81.crl

            X509v3 Authority Key Identifier:
                keyid:50:C5:54:AD:5A:0E:EC:A7:92:94:EC:56:F2:1F:76:2F:60:35:DF:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6830f8c6-bc25-42bd-8847-d98a6c864d81.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.209.212.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:e3:42:10:54:4a:d5:5d:ea:b9:70:6f:ac:a7:60:37:55:c7:
         bb:43:ad:15:c7:01:bc:21:df:39:a6:02:3e:20:05:6f:50:c5:
         6f:da:21:9b:b7:8d:01:50:f6:73:7b:98:28:86:f6:d0:2d:0f:
         84:b5:41:3a:0a:32:fa:be:6f:43:74:d8:7e:b8:9a:07:eb:d8:
         8a:2c:9a:f5:d1:84:a9:1f:b6:13:03:5b:e5:1b:74:d7:f3:2e:
         70:c8:f1:37:eb:05:a7:dd:c3:b4:20:f4:28:9d:d9:7e:d0:77:
         98:3e:c4:4d:1d:63:a4:87:8a:7c:a2:96:40:a8:10:f4:79:92:
         94:93:a7:c1:24:ee:d4:12:08:9e:6f:be:5b:e6:21:1b:27:a8:
         0b:3a:09:af:aa:02:7b:92:58:ab:9d:cc:e8:1b:e7:8f:a0:27:
         2a:46:44:c6:8e:69:20:e4:f5:5d:f4:26:67:b5:4d:af:6b:dd:
         9c:50:1e:f3:f5:fa:3e:ee:3a:97:5d:83:b7:f4:8b:2a:3c:3f:
         3c:e4:5d:be:41:63:80:e9:f9:ab:bc:98:db:06:42:41:41:bd:
         18:e1:59:90:75:6b:bb:fe:a7:12:6a:93:7b:7b:7d:1d:8b:14:
         ee:cc:94:76:62:33:ce:95:75:44:1a:e3:a7:bb:82:09:77:61:
         ab:37:14:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 22:22:00 2026 by rpki-client