Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/28769cd4-65bd-3560-9039-398d97a508a2.roa
File:                     28769cd4-65bd-3560-9039-398d97a508a2.roa (raw, json)
Hash identifier:          da/i+GxOknHSFeSWXLKE/RbFLptiFBexoS/17uh+kw0=
Subject key identifier:   D8:B7:C7:9C:41:A6:44:80:5C:97:5A:1E:DE:D6:03:35:33:0B:6C:EA
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584D2BDA1CD1C1823C5D9560A480
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/28769cd4-65bd-3560-9039-398d97a508a2.roa
Signing time:             Sun 15 Mar 2026 01:00:32 +0000
ROA not before:           Sun 15 Mar 2026 01:00:32 +0000
ROA not after:            Sat 13 Jun 2026 01:00:32 +0000
asID:                     271
IP address blocks:        206.12.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2b:da:1c:d1:c1:82:3c:5d:95:60:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Mar 15 01:00:32 2026 GMT
            Not After : Jun 13 01:00:32 2026 GMT
        Subject: CN=49fd14e7-752f-4bcc-a8b9-c88dfcd59526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0f:be:8b:d7:49:5e:41:19:4d:29:4e:40:95:
                    71:38:67:bf:ec:45:55:88:c4:47:93:31:28:81:a9:
                    15:1a:73:f8:f6:74:fc:6d:9b:43:c0:cd:c5:48:2c:
                    cb:b8:e2:a9:0a:4b:79:f7:29:a4:5e:a7:fc:a2:0b:
                    11:30:f6:78:27:c3:ea:54:f0:be:88:b1:c7:84:5d:
                    ca:93:77:0e:ba:19:60:2e:29:b2:70:8c:06:47:4f:
                    3c:16:7a:66:d7:dd:33:9e:f4:a9:14:8b:37:be:23:
                    d3:39:22:50:85:08:4e:ef:ef:c8:4b:39:72:5a:ef:
                    90:c9:cf:16:ec:8e:7e:b5:e3:59:da:a1:f4:58:61:
                    41:bc:4f:26:31:6c:df:64:fb:b2:8f:6b:61:13:c2:
                    88:62:23:80:16:fc:c5:1a:20:f6:f1:a9:94:5a:7c:
                    8e:30:35:21:1c:25:35:33:4c:dc:53:71:bf:93:5f:
                    9c:90:0b:49:9d:30:f9:2a:56:f2:0b:e4:9d:77:26:
                    7b:76:64:53:b5:78:61:ce:bb:0f:fc:c5:c7:04:33:
                    4a:7d:4a:64:42:c4:07:f4:80:79:6d:4f:ba:44:63:
                    b7:87:fc:d7:79:5e:1d:76:07:b3:40:2c:f5:28:cc:
                    90:06:29:c4:ce:d3:0a:be:02:da:87:b4:63:90:b3:
                    15:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B7:C7:9C:41:A6:44:80:5C:97:5A:1E:DE:D6:03:35:33:0B:6C:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/28769cd4-65bd-3560-9039-398d97a508a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.12.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:7b:3f:27:1b:2d:ab:8b:97:0b:e1:7e:30:13:5a:da:dc:14:
         98:d1:b5:38:83:35:bb:cf:01:42:36:7c:52:e2:4e:81:2b:9b:
         8e:88:ea:6e:64:8f:51:ee:f5:04:0a:d6:99:99:92:b6:fa:f4:
         d2:04:27:aa:bc:10:3e:49:dd:3e:4e:03:59:0a:12:9f:ff:88:
         51:c1:46:7e:e7:a1:83:1b:60:5f:cd:22:f2:f9:cc:51:35:31:
         6e:3f:7e:61:ab:03:ce:c5:52:eb:b4:ec:8e:02:08:22:5a:9c:
         cc:3e:98:b5:41:3b:6f:f0:89:06:86:82:1a:97:78:af:49:f2:
         43:20:84:6e:d3:3c:38:33:0b:0e:f6:08:fa:3b:1d:43:68:5b:
         1a:4a:bd:db:b2:23:f5:4e:0b:cb:79:18:47:93:c8:b0:78:61:
         8c:6e:20:76:49:d9:74:ce:17:ff:e6:f7:2f:bd:1d:35:77:26:
         b3:53:b3:77:d9:79:e3:43:e9:32:53:98:10:32:ee:40:51:7f:
         29:15:cf:cd:0e:47:82:28:de:da:20:b5:19:36:f6:d9:9b:c0:
         cf:66:8c:52:43:f2:cc:36:a1:06:19:7b:10:66:6c:48:47:6b:
         76:f6:3c:57:a3:63:68:21:b5:24:2a:4e:0f:59:00:fc:63:ce:
         79:18:f3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 12:20:38 2026 by rpki-client