Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d5620446-dd4f-369b-bd5a-0c81bb1e87fb.roa
File:                     d5620446-dd4f-369b-bd5a-0c81bb1e87fb.roa (raw, json)
Hash identifier:          /zwK2TujYMvSOHj5QZA+G888J9I/EeXKuD+mxF7Yuf8=
Subject key identifier:   C1:E0:36:4A:F3:8E:EA:64:0B:1D:53:CA:D6:8F:0A:9D:91:41:43:D7
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F7D0F515BB6E5AF9BD7E60000
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d5620446-dd4f-369b-bd5a-0c81bb1e87fb.roa
Signing time:             Tue 13 Oct 2026 12:42:21 +0000
ROA not before:           Tue 13 Oct 2026 12:42:21 +0000
ROA not after:            Mon 11 Jan 2027 13:42:21 +0000
asID:                     329735
IP address blocks:        206.185.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7d:0f:51:5b:b6:e5:af:9b:d7:e6:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct 13 12:42:21 2026 GMT
            Not After : Jan 11 13:42:21 2027 GMT
        Subject: CN=e0a14551-25a6-468a-9890-96ec41e77e70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c0:85:63:72:84:13:f1:de:c1:70:0c:0c:e5:
                    c6:8a:68:f3:ca:39:c2:74:03:1c:c1:e0:e1:7f:e4:
                    6e:1e:ab:6d:4a:ea:73:92:89:cf:69:db:d9:ba:2a:
                    26:c2:e5:91:97:e0:28:ea:77:91:ff:2d:6c:e2:bc:
                    2b:74:0b:e9:0a:03:f2:c3:29:f2:a1:97:6c:c0:30:
                    83:4e:b6:db:be:28:33:f0:27:25:6c:1f:d4:df:a5:
                    11:33:e0:91:00:28:16:89:e4:71:7f:c9:9e:9b:49:
                    9a:c9:03:a2:c7:68:d6:82:06:43:2f:6d:6e:75:1d:
                    d6:a9:45:4e:64:c1:78:5f:de:02:2d:9e:60:45:ed:
                    f6:b1:e9:cf:40:7f:84:e4:76:40:0f:c3:f2:2c:00:
                    84:52:41:c7:2c:05:fa:cf:6a:64:70:b4:52:db:67:
                    2c:3a:22:c2:9d:1c:dc:d9:9a:7b:0b:9a:fa:96:6d:
                    7a:67:36:47:a7:16:c5:fd:64:6b:f8:4b:0a:d3:2f:
                    fb:a1:3a:b3:24:28:ee:70:07:94:10:c7:44:90:a9:
                    0c:32:ba:5b:3a:c7:38:57:c3:bb:52:a4:94:32:d5:
                    99:5c:33:84:af:0f:c4:b7:1f:9a:5e:b9:8c:98:c8:
                    6e:97:db:f3:d0:36:6d:6a:7e:08:37:fd:30:dd:ce:
                    f3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E0:36:4A:F3:8E:EA:64:0B:1D:53:CA:D6:8F:0A:9D:91:41:43:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d5620446-dd4f-369b-bd5a-0c81bb1e87fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.185.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:9f:8b:93:5e:18:34:27:7a:8a:48:af:7f:86:bf:fb:28:38:
         bc:b5:dc:dd:de:6a:a6:20:78:fb:fb:6e:8a:ce:db:39:05:40:
         ea:eb:03:0a:e1:85:b7:34:15:65:a6:ec:73:67:6b:8a:75:e8:
         6b:10:f1:7c:84:7c:e1:39:8b:89:8d:d1:68:ba:26:ce:bd:cf:
         42:e6:47:7a:74:e4:6b:a0:6e:4b:da:74:35:4a:25:a8:ee:ed:
         da:5b:bc:42:07:6b:4a:c3:b4:12:0f:07:6d:28:c8:cd:88:ac:
         f2:14:b1:30:e3:80:10:bc:ba:3b:79:9a:b7:fe:69:a4:c5:95:
         5d:d5:d9:c5:7e:f2:c9:cf:6a:90:3c:d6:82:00:93:ec:55:33:
         00:76:ea:3f:43:d9:4e:42:f6:a4:52:20:e9:83:5d:6f:6f:61:
         67:57:5a:65:e8:c4:de:ac:02:5f:18:2b:97:9d:ce:54:39:be:
         fb:20:0b:c6:bf:a4:68:8e:a3:3c:01:e5:e2:88:54:dd:b6:fb:
         12:1f:f2:37:27:4a:ce:7e:19:0f:c9:c6:42:8b:78:ab:80:d4:
         48:fb:03:04:b6:53:3a:c3:46:69:fc:3e:28:ed:81:38:a5:91:
         94:f8:fc:a5:27:8d:ec:89:e9:24:21:01:20:74:1e:28:c3:bc:
         55:3c:09:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:13:55 2026 by rpki-client