Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/340caa66-a431-3c9d-98a1-9766656d15ad.roa
File:                     340caa66-a431-3c9d-98a1-9766656d15ad.roa (raw, json)
Hash identifier:          OnqrwaQUBoopKZLmniWUxO2TgRhBq4lJLgNBSJxn+lw=
Subject key identifier:   9D:C0:D4:39:14:0A:92:1A:C1:02:22:FD:2C:78:FF:0B:BE:7D:79:1C
Certificate issuer:       /CN=eea0cb92-050e-479f-bff4-dddd68eb4e04
Certificate serial:       010D0C9F4328584F5CCE57F0AE4C5C0DC9226B40
Authority key identifier: F8:B6:CA:B8:C6:2D:14:6D:0B:16:82:3C:35:57:84:26:9C:01:0E:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/340caa66-a431-3c9d-98a1-9766656d15ad.roa
Signing time:             Thu 01 Oct 2026 23:25:34 +0000
ROA not before:           Thu 01 Oct 2026 23:25:34 +0000
ROA not after:            Thu 31 Dec 2026 00:25:34 +0000
asID:                     40806
IP address blocks:        206.220.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/eea0cb92-050e-479f-bff4-dddd68eb4e04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/eea0cb92-050e-479f-bff4-dddd68eb4e04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5c:ce:57:f0:ae:4c:5c:0d:c9:22:6b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eea0cb92-050e-479f-bff4-dddd68eb4e04
        Validity
            Not Before: Oct  1 23:25:34 2026 GMT
            Not After : Dec 31 00:25:34 2026 GMT
        Subject: CN=f097cdfe-7e1f-4fdc-83fc-3c2e8737b49d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:26:89:f8:5e:8b:9b:3b:89:e6:29:e8:55:8b:
                    79:05:8d:e5:5e:6b:f3:9f:6d:15:cc:09:48:72:c3:
                    b9:9b:24:d8:f1:86:d6:af:95:7b:20:60:27:9a:e4:
                    09:f4:27:58:19:d4:06:35:26:a2:28:4f:54:86:5b:
                    7f:87:75:17:45:36:37:98:4e:7b:f9:4c:e9:af:4e:
                    74:85:2f:bc:b2:1d:96:38:32:d1:76:62:da:e4:84:
                    8a:92:1e:a1:45:d0:a0:b7:69:fb:7d:7e:81:af:d7:
                    70:39:61:e2:65:c4:77:4d:a5:2d:be:af:1d:09:0d:
                    91:59:bf:d6:1b:52:bd:44:e4:1f:2f:93:09:16:86:
                    d6:12:fe:30:92:dc:0b:f4:ad:bc:31:b0:29:8a:47:
                    16:5f:be:41:4b:49:9e:05:f5:dc:b2:a7:e3:f7:a0:
                    1f:c8:d1:9b:4b:eb:90:85:75:82:ae:dc:a2:34:ee:
                    92:ef:26:e8:b6:64:8b:f8:ae:75:db:8b:50:b9:b0:
                    9e:36:4e:fd:02:a9:63:20:39:62:d0:34:76:f9:5b:
                    1c:9d:7e:46:57:6d:7e:ca:74:1f:4e:5d:40:01:bf:
                    91:56:09:34:09:0b:65:00:0d:d3:1d:79:1f:89:63:
                    34:50:4b:27:5e:59:33:91:0e:c6:d3:b7:de:d4:cf:
                    3f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C0:D4:39:14:0A:92:1A:C1:02:22:FD:2C:78:FF:0B:BE:7D:79:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/340caa66-a431-3c9d-98a1-9766656d15ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/eea0cb92-050e-479f-bff4-dddd68eb4e04.crl

            X509v3 Authority Key Identifier:
                keyid:F8:B6:CA:B8:C6:2D:14:6D:0B:16:82:3C:35:57:84:26:9C:01:0E:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.220.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:7c:8d:41:e6:1a:83:e5:06:a9:50:5c:ba:88:b1:1c:f9:84:
         a6:a0:f7:69:89:00:a4:0f:37:3a:04:22:aa:a8:91:c1:11:d0:
         9b:f4:4d:17:63:56:30:8d:6f:52:e3:22:8a:23:26:15:a5:74:
         f5:74:d9:42:bc:6d:f3:d6:a2:a6:46:bf:7d:2d:89:3f:74:f4:
         1a:9d:3c:ed:73:22:86:27:5d:4f:63:4a:92:2d:f2:41:a5:76:
         c4:f8:99:69:ef:26:8a:bd:07:40:67:59:9f:ce:71:cd:71:65:
         ef:51:e0:da:63:f4:84:91:9e:03:00:7c:d0:16:be:02:3f:25:
         20:f4:85:d5:95:de:ac:82:84:11:3a:59:9e:c8:94:3d:bc:80:
         ed:8f:30:25:27:1b:7f:12:1f:bf:b5:fc:f0:36:36:e5:a7:e3:
         a8:78:a8:96:87:98:b9:8f:91:28:67:d5:a7:ed:3c:97:97:2f:
         2f:02:44:06:e0:ee:d2:2c:42:b0:ce:ff:50:1a:62:14:2b:ca:
         9e:dd:b0:1b:4d:f6:7a:18:18:c2:5c:1d:b6:94:f0:e0:c3:e5:
         80:cf:5c:d9:80:a3:3a:9f:bb:33:70:0d:3f:ea:0d:a5:ec:0e:
         b7:a7:eb:ef:5b:bf:1e:59:8a:10:2c:10:d8:df:23:69:67:9a:
         2f:e7:9d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 01:16:41 2026 by rpki-client