Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/30b7b4c1-38d9-3f02-bc38-562475000af4.roa
File:                     30b7b4c1-38d9-3f02-bc38-562475000af4.roa (raw, json)
Hash identifier:          1XoQUJjLkleAhOeZFvtwWL5LMOT4pPXUTtni6o+sgVU=
Subject key identifier:   FA:6D:61:60:E1:80:88:82:27:ED:83:DC:8D:33:BD:83:2F:C6:50:9F
Certificate issuer:       /CN=a8825ed0-210f-48ae-8970-c92773afbb48
Certificate serial:       010D0C9F4328584EC9F5A16F3C721EFC2DBD3A80
Authority key identifier: BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/30b7b4c1-38d9-3f02-bc38-562475000af4.roa
Signing time:             Mon 10 Aug 2026 09:00:54 +0000
ROA not before:           Mon 10 Aug 2026 09:00:54 +0000
ROA not after:            Sun 08 Nov 2026 10:00:54 +0000
asID:                     396982
IP address blocks:        206.63.146.0/23 maxlen: 24
                          206.63.148.0/22 maxlen: 24
                          206.63.152.0/21 maxlen: 24
                          206.63.160.0/20 maxlen: 24
                          206.63.176.0/21 maxlen: 24
                          206.63.184.0/22 maxlen: 24
                          206.63.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c9:f5:a1:6f:3c:72:1e:fc:2d:bd:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8825ed0-210f-48ae-8970-c92773afbb48
        Validity
            Not Before: Aug 10 09:00:54 2026 GMT
            Not After : Nov  8 10:00:54 2026 GMT
        Subject: CN=49406eb8-fb81-4bb0-ab7c-683bcbe881f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:39:c9:1c:f3:14:79:45:20:34:58:83:58:16:
                    bd:34:35:bd:cf:f4:a2:75:68:65:ad:b9:06:e7:16:
                    bc:af:e7:e2:27:9a:5f:49:32:b7:0a:76:c6:a8:12:
                    ca:8f:55:7e:d4:1c:0d:c4:e2:12:ed:4d:b2:b6:08:
                    0f:de:f9:a4:22:47:6a:f4:39:7e:f1:57:e2:0c:45:
                    ec:fc:92:71:86:b9:1c:30:fb:30:96:fd:43:51:97:
                    e6:48:ad:ec:8f:85:9e:87:2d:a5:f7:6f:da:82:c9:
                    51:bf:e2:6a:fc:c8:23:74:92:db:8d:02:6c:76:0e:
                    24:95:24:03:82:78:99:8b:d9:78:53:83:1f:1c:ba:
                    d5:e5:f6:aa:cf:82:37:e3:12:48:b8:d1:5a:92:2a:
                    58:86:cd:d8:46:bd:0a:4b:b7:dc:b1:bd:ac:e3:ff:
                    bb:81:c4:d7:c8:9c:2b:36:9a:5c:7c:16:6f:99:4a:
                    ad:54:6d:8a:a1:cf:85:c3:9a:24:56:d2:b3:5a:5a:
                    c8:99:f1:91:19:e2:24:8a:c8:6b:b2:f4:60:d4:ca:
                    a6:b1:88:5c:b4:0a:94:4c:af:c0:6f:c2:e3:e6:8e:
                    05:b5:42:8e:b0:23:ff:ba:5b:28:ed:80:14:1b:23:
                    0b:d7:f9:c3:e4:65:67:af:e6:e5:8c:d5:ea:47:33:
                    8b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:6D:61:60:E1:80:88:82:27:ED:83:DC:8D:33:BD:83:2F:C6:50:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/30b7b4c1-38d9-3f02-bc38-562475000af4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl

            X509v3 Authority Key Identifier:
                keyid:BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.63.146.0-206.63.188.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:ab:b4:93:5f:62:4c:21:76:5f:a6:68:78:8d:7d:08:f2:b7:
         c6:e5:b3:42:58:a2:c6:6c:7e:60:a6:f4:3c:b9:84:e4:a1:98:
         1a:65:9e:c3:0d:43:45:56:05:b8:88:2f:d1:32:14:4b:02:e1:
         ed:15:40:b8:41:8a:09:22:e6:ad:17:b1:7f:c2:d6:64:5a:a4:
         ab:60:1b:62:49:cb:ad:33:3f:d5:4e:fb:6f:7e:35:d6:f7:d6:
         4b:18:b6:d5:9c:b5:90:fd:58:75:8a:a5:76:e4:24:6f:75:d0:
         6a:65:72:db:33:a3:4a:75:11:5e:25:5d:de:28:4c:3f:8a:5c:
         9a:57:7c:9a:0e:1f:2e:a0:6f:bd:2f:46:e7:36:f3:5f:03:42:
         8b:bd:40:d9:ea:86:e3:44:68:88:2f:a5:ff:07:2d:39:9c:4e:
         c8:a6:5b:e6:2c:f4:46:d7:d1:cf:a6:18:9c:ad:14:95:62:f9:
         ed:37:06:d9:f4:a9:e9:ae:39:d9:e6:a8:c8:a0:05:82:33:e0:
         3f:c3:59:ed:41:f2:42:70:2e:29:7b:92:d7:75:59:27:af:a1:
         1c:11:6b:27:d2:c6:26:c4:5b:4d:c0:a6:36:e1:e0:93:5e:ed:
         2f:3f:55:92:b4:18:7c:21:33:d1:e3:8b:b5:6c:e7:58:5e:ab:
         e0:a3:0e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:33:25 2026 by rpki-client