Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb/4b6ea082-cf66-36cc-9cb0-d75ebcdc8e3e.roa
File:                     4b6ea082-cf66-36cc-9cb0-d75ebcdc8e3e.roa (raw, json)
Hash identifier:          qoV8HRBx/GbX6+wCp+GNNt+cW79WwegFEsEc/YKZSmY=
Subject key identifier:   9A:69:C8:7C:DC:FC:6A:DF:CF:E2:BB:5C:7E:F1:F0:A2:DA:E5:3D:47
Certificate issuer:       /CN=6ec5d668-721f-4186-82e6-1391fb7784bb
Certificate serial:       010D0C9F4328584D2D3F7AB6AB3F943E4CA4DF00
Authority key identifier: 7D:2B:C5:E6:4E:A4:7A:30:F2:01:F7:37:47:FB:D3:47:B7:14:63:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb/4b6ea082-cf66-36cc-9cb0-d75ebcdc8e3e.roa
Signing time:             Sun 15 Mar 2026 13:00:41 +0000
ROA not before:           Sun 15 Mar 2026 13:00:41 +0000
ROA not after:            Sat 13 Jun 2026 13:00:41 +0000
asID:                     212238
IP address blocks:        172.81.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb/6ec5d668-721f-4186-82e6-1391fb7784bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb/6ec5d668-721f-4186-82e6-1391fb7784bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2d:3f:7a:b6:ab:3f:94:3e:4c:a4:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ec5d668-721f-4186-82e6-1391fb7784bb
        Validity
            Not Before: Mar 15 13:00:41 2026 GMT
            Not After : Jun 13 13:00:41 2026 GMT
        Subject: CN=7dff51e6-4019-4148-8aa7-1e6ac3d65bad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:72:58:ab:43:98:5c:91:c6:3a:a6:ec:dd:15:
                    ad:fa:1a:95:03:4e:36:9a:e1:6f:4b:20:91:69:f3:
                    ae:0b:41:9e:bf:4a:6a:f9:e5:a9:7d:88:15:00:e2:
                    5c:68:2c:11:37:28:4c:8c:42:1d:b9:20:a0:c4:db:
                    51:8c:91:ea:52:18:06:41:86:dc:73:d3:f3:bb:60:
                    96:f6:a0:e4:42:8a:b6:6b:bb:d8:43:df:3f:7a:f9:
                    f3:ca:d0:6e:b4:e9:97:47:36:3a:19:15:d8:1e:5f:
                    09:02:99:02:ab:eb:a6:5f:84:85:34:d5:15:75:f0:
                    f5:65:43:82:06:89:e0:b6:f1:8a:0b:74:4e:35:e2:
                    ed:88:62:b0:6c:99:ed:c4:a6:17:bd:23:12:8f:df:
                    62:c8:96:c5:07:4b:4d:42:27:68:6e:98:1e:54:e9:
                    aa:ec:0e:93:22:a2:91:9d:32:75:0b:74:67:47:f9:
                    e7:cf:46:54:46:38:0f:0e:b0:2b:5f:ba:7a:5a:1c:
                    57:ef:ea:d0:8a:b2:05:6e:a6:d2:b2:25:2f:28:c1:
                    14:67:97:2b:c3:5d:be:18:55:37:cb:f6:95:9e:b4:
                    02:28:cc:50:b8:e6:2e:e1:45:04:db:c1:7c:70:ab:
                    fb:43:b9:b3:26:cf:90:af:69:2d:cd:39:04:5f:db:
                    99:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:69:C8:7C:DC:FC:6A:DF:CF:E2:BB:5C:7E:F1:F0:A2:DA:E5:3D:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb/4b6ea082-cf66-36cc-9cb0-d75ebcdc8e3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb/6ec5d668-721f-4186-82e6-1391fb7784bb.crl

            X509v3 Authority Key Identifier:
                keyid:7D:2B:C5:E6:4E:A4:7A:30:F2:01:F7:37:47:FB:D3:47:B7:14:63:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.81.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:43:bb:50:6f:87:42:e7:84:ad:3b:71:c9:fb:8f:c5:ce:33:
         6a:75:73:b5:92:97:34:c0:92:ec:47:d5:dd:57:dc:c5:65:e6:
         49:fb:6e:4f:05:01:36:af:56:56:22:26:ca:db:f6:1b:2e:24:
         3f:71:7a:e8:51:de:38:56:55:df:73:15:1d:bf:02:a5:01:af:
         cc:60:bb:93:87:fd:61:4b:2f:84:d1:40:bd:b6:15:fc:19:9b:
         a4:5d:fc:b2:0c:62:05:fe:85:2c:34:b9:0a:8b:4a:25:ab:3a:
         84:cc:f8:93:17:a7:e4:d1:9b:f0:fa:01:0a:9c:64:00:01:fc:
         51:6e:77:7c:42:d2:88:ea:53:4f:75:cf:de:d2:1a:5d:35:f0:
         28:c2:5e:55:3e:95:f1:6d:04:13:3d:7e:9d:63:b7:54:cc:a1:
         d0:1c:3c:ba:9f:37:ef:5a:03:ac:69:fc:2e:7a:c2:f9:87:e1:
         55:3f:d3:a7:70:f4:6a:6d:94:03:cd:71:2f:4a:14:c8:50:36:
         2c:df:4e:7a:53:29:ca:95:3f:eb:40:84:68:ef:18:66:18:1f:
         d2:a8:c5:76:cf:b9:47:c7:d4:12:e8:3e:f2:78:22:07:ab:42:
         1f:d6:f9:a3:d1:9e:7e:1d:0b:f6:cb:c5:b4:8c:ed:bf:84:8e:
         41:75:8b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 06:49:50 2026 by rpki-client