Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2796c15e-7581-35e8-ac4a-0fadda74c52c.roa
File:                     2796c15e-7581-35e8-ac4a-0fadda74c52c.roa (raw, json)
Hash identifier:          juNXgigwWfbu7SfQCl60LU8FsuyHLIX2l288Dk1N1NQ=
Subject key identifier:   8B:A1:40:6B:D4:89:4B:27:F4:3A:92:AF:A7:2A:9F:7D:D9:26:27:84
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F5EBDCDCF17C9B99142C6F380
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2796c15e-7581-35e8-ac4a-0fadda74c52c.roa
Signing time:             Fri 02 Oct 2026 16:03:52 +0000
ROA not before:           Fri 02 Oct 2026 16:03:52 +0000
ROA not after:            Thu 31 Dec 2026 17:03:52 +0000
asID:                     64179
IP address blocks:        206.62.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:bd:cd:cf:17:c9:b9:91:42:c6:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct  2 16:03:52 2026 GMT
            Not After : Dec 31 17:03:52 2026 GMT
        Subject: CN=2135ba38-34fa-4dcd-8688-08f7de3377d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2f:7d:4f:ba:73:7d:e1:6b:ac:73:16:ea:8c:
                    8b:4a:2e:a0:3f:a9:81:f2:89:f8:81:04:4c:59:be:
                    43:76:96:36:35:be:5a:67:d5:6a:80:bb:99:e6:3a:
                    5c:84:81:46:10:3e:d1:fd:d6:69:b8:60:9b:b9:09:
                    23:df:b1:57:d4:5f:da:a2:90:25:44:58:f4:4a:22:
                    79:78:dd:0b:43:cd:b2:64:cc:2d:f2:98:27:35:bb:
                    92:bb:3d:80:0f:ac:8f:1c:1c:36:5f:51:2e:90:be:
                    e1:8c:e8:0d:e1:ce:e4:e8:60:62:27:02:70:ce:34:
                    ba:ee:75:9e:cb:26:12:ac:0b:61:3c:be:b7:0b:0c:
                    04:24:78:f2:66:66:c0:37:ed:6c:34:d3:17:9c:e7:
                    b4:bd:3c:70:64:a6:ac:30:22:72:24:0a:dd:68:80:
                    1d:f8:8f:a7:57:6f:83:cd:02:93:8b:a2:e0:21:06:
                    be:b1:03:12:21:f7:53:b4:66:48:4f:ff:36:6e:e7:
                    41:d1:ad:a6:f0:41:7b:1b:c7:aa:a6:36:f3:aa:b3:
                    38:95:dd:16:78:c0:69:ba:41:55:07:6e:7b:91:e7:
                    46:0a:a6:6a:c6:ff:c4:95:b7:56:6a:02:65:18:5d:
                    ca:4d:88:1b:f5:cf:44:1e:b0:b2:fa:99:94:ef:de:
                    fc:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A1:40:6B:D4:89:4B:27:F4:3A:92:AF:A7:2A:9F:7D:D9:26:27:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2796c15e-7581-35e8-ac4a-0fadda74c52c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.62.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:01:74:a5:03:05:df:87:80:f0:6e:af:39:95:0a:ab:51:ee:
         c0:ae:7b:21:a5:91:da:41:9f:e3:d6:18:f1:ff:1a:ae:f6:73:
         f7:fd:02:57:71:da:e4:20:bd:e7:7d:5d:0e:96:91:1a:70:8a:
         6b:51:2b:84:13:fc:2e:cb:77:e8:8d:47:c8:04:49:3b:3f:16:
         58:ee:a9:6c:6d:d4:c4:df:ce:a8:16:56:40:42:a2:f9:7a:d4:
         ad:10:95:6c:b4:62:3b:40:43:1c:29:57:da:c9:80:a1:54:0a:
         9a:ae:dc:16:92:93:18:71:e3:b4:af:7f:ed:1d:78:fe:f0:95:
         ef:54:0d:ec:34:c1:6c:fd:a6:d1:63:dd:ea:80:fc:0d:62:b2:
         b1:1b:bd:b1:51:c2:f3:4a:37:5b:63:09:69:f8:69:22:34:fd:
         c7:1b:71:e4:35:c1:b7:96:85:23:b0:74:67:bd:29:8d:da:58:
         95:c4:32:c7:75:30:fe:4d:27:9b:11:e6:46:09:8b:f0:0f:24:
         be:c1:9d:f4:29:df:d4:a9:82:0f:11:61:4a:57:67:9c:38:e8:
         12:98:62:58:31:d7:fe:90:2e:6d:e1:fc:42:c7:ea:de:92:0b:
         b1:35:66:68:2e:80:91:20:99:6b:a9:2c:09:a0:5c:e9:02:4c:
         6c:20:07:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:44:07 2026 by rpki-client