Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/06f0a681-24a4-3081-a345-230fcfb70ddb.roa
File:                     06f0a681-24a4-3081-a345-230fcfb70ddb.roa (raw, json)
Hash identifier:          +cQT4lO0y5E7J04/b1OJ+REeMFOMnalyAt3GcRfvgoI=
Subject key identifier:   89:F2:D1:8B:9F:EA:32:8E:02:99:47:4A:05:76:9A:4D:A4:96:0C:D1
Certificate issuer:       /CN=a8825ed0-210f-48ae-8970-c92773afbb48
Certificate serial:       010D0C9F4328584EC9DF0747C84009035E7F9600
Authority key identifier: BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/06f0a681-24a4-3081-a345-230fcfb70ddb.roa
Signing time:             Mon 10 Aug 2026 08:15:22 +0000
ROA not before:           Mon 10 Aug 2026 08:15:22 +0000
ROA not after:            Wed 23 Sep 2026 12:11:02 +0000
asID:                     14618
IP address blocks:        206.63.128.0/24 maxlen: 24
                          206.63.129.0/24 maxlen: 24
                          206.63.130.0/24 maxlen: 24
                          206.63.131.0/24 maxlen: 24
                          206.63.132.0/24 maxlen: 24
                          206.63.133.0/24 maxlen: 24
                          206.63.134.0/24 maxlen: 24
                          206.63.135.0/24 maxlen: 24
                          206.63.136.0/24 maxlen: 24
                          206.63.137.0/24 maxlen: 24
                          206.63.138.0/24 maxlen: 24
                          206.63.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c9:df:07:47:c8:40:09:03:5e:7f:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8825ed0-210f-48ae-8970-c92773afbb48
        Validity
            Not Before: Aug 10 08:15:22 2026 GMT
            Not After : Sep 23 12:11:02 2026 GMT
        Subject: CN=9c452442-bab2-47c8-b7e8-b12f81acebcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0a:0f:ab:56:32:77:f4:fd:00:06:b2:c2:77:
                    fe:a2:fc:08:0e:2e:3c:df:e6:10:3f:fc:82:d3:31:
                    43:7a:a0:89:e6:f9:e9:e0:fa:15:bb:b5:8b:a6:2e:
                    c4:97:e5:2e:3f:7f:5b:d3:b8:41:00:10:37:d9:83:
                    9e:8e:59:61:e7:6a:41:7e:b4:5f:c0:30:80:e0:56:
                    a7:82:3e:16:17:7f:17:9d:16:b5:8e:37:09:66:8c:
                    f4:a2:5c:66:e5:7f:a8:50:7b:b6:2c:e0:d1:f5:29:
                    61:17:05:e5:a8:87:2c:70:29:ec:56:a0:5d:6a:8e:
                    92:ce:f6:63:c0:94:d4:0e:01:6c:98:da:24:cb:5f:
                    81:fe:5c:5c:7d:3c:ae:42:a5:99:1b:a2:15:ae:aa:
                    3a:46:0f:d6:25:ce:88:ce:dd:c6:1b:2d:01:ea:fe:
                    2d:70:f5:2e:75:d4:77:86:09:2e:45:05:80:32:90:
                    a6:65:82:12:0b:77:d4:30:3e:81:8a:92:73:dd:44:
                    d3:fd:da:d1:22:86:e7:ed:e2:8f:6f:0f:80:ca:35:
                    9e:51:f7:00:b4:58:62:06:d7:a2:78:d8:b4:1f:af:
                    af:a3:0b:e2:63:b1:a3:7b:5a:d4:21:89:2e:da:53:
                    5f:e7:73:4e:ba:cf:85:31:da:b5:7a:a3:ce:bb:bf:
                    29:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F2:D1:8B:9F:EA:32:8E:02:99:47:4A:05:76:9A:4D:A4:96:0C:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/06f0a681-24a4-3081-a345-230fcfb70ddb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl

            X509v3 Authority Key Identifier:
                keyid:BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.63.128.0-206.63.139.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:33:fe:82:cd:11:b2:be:89:a3:08:e6:1b:d7:b9:67:5d:57:
         d1:ba:52:03:33:1c:47:af:70:a6:3f:0d:9c:eb:de:70:8f:ae:
         bc:ea:f0:61:b3:56:06:ef:fb:2d:71:00:c4:99:ff:0a:d2:e1:
         e6:52:71:82:4f:f2:19:9e:fa:75:d8:ef:09:cb:da:d9:9e:ba:
         73:c1:1b:74:bd:4f:92:9c:19:c9:d7:14:d3:55:d4:b4:bd:e4:
         0e:94:66:96:c9:e0:8b:5a:24:1a:7e:03:f4:70:79:e7:7b:86:
         d9:e3:cb:ae:53:c4:6c:66:03:a8:df:38:ad:b2:7b:2b:9a:86:
         a1:46:46:29:e9:00:13:74:08:2d:4b:85:63:aa:1d:a0:14:af:
         c5:63:a1:7f:ae:71:f0:11:1d:42:54:14:8b:07:fd:4f:c9:9f:
         4d:70:9e:8e:91:af:02:65:01:76:6d:ae:94:9e:6d:f6:3d:5d:
         b7:b5:25:bd:8b:63:09:d1:98:60:ba:f9:88:9b:ef:4a:d4:84:
         b6:69:71:4c:fd:30:4d:35:29:c6:2b:44:34:73:71:4b:63:a2:
         e5:27:ac:33:d2:3c:56:79:81:ad:ef:b2:9c:84:cf:2d:23:ea:
         2f:f2:19:22:aa:87:21:6e:c1:a5:2a:63:ab:17:5a:89:d9:5f:
         92:e0:a9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:56:37 2026 by rpki-client