Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a677148e-8e5e-3bf5-9614-c93128ae885c.roa
File:                     a677148e-8e5e-3bf5-9614-c93128ae885c.roa (raw, json)
Hash identifier:          aKNp+jfQRkXHr8mi8zZOn54v+8l41cHIHrYO6US7GTc=
Subject key identifier:   9D:C4:36:A6:0F:63:1E:0E:E2:1D:23:27:15:5F:5B:B7:C3:F4:E6:15
Certificate issuer:       /CN=a1bd9d43-c127-4a9e-b038-0c436c5d905d
Certificate serial:       010D0C9F4328584ED431D6F5825E73D7E52AC400
Authority key identifier: 44:56:B0:0C:C3:6F:6E:82:D5:8A:0A:1C:2A:77:45:78:E6:33:A0:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a677148e-8e5e-3bf5-9614-c93128ae885c.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     13340
IP address blocks:        206.53.152.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:31:d6:f5:82:5e:73:d7:e5:2a:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1bd9d43-c127-4a9e-b038-0c436c5d905d
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=23c06890-437f-4e94-9b51-1df91dad4ad5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6e:d5:3a:95:67:c8:43:1e:1d:9a:0c:da:76:
                    39:02:4c:01:79:6c:8f:ea:99:b8:0e:3e:2a:15:22:
                    60:7e:e2:2f:ed:6f:d9:e2:42:47:25:07:ca:4d:ec:
                    ab:b2:d6:95:26:3d:ee:7c:22:45:58:45:c6:24:49:
                    48:41:f0:f2:fb:69:af:50:31:43:e5:ab:78:cb:05:
                    65:c1:39:57:9d:dd:6c:f1:6a:70:3c:5b:05:a7:b3:
                    09:e6:2d:6d:6b:d9:62:9b:1a:79:9f:09:65:86:a0:
                    43:2f:fc:3e:e0:7f:95:2c:14:64:78:a7:70:30:2e:
                    03:6b:6c:98:cb:a7:93:62:04:a3:51:6a:90:50:f5:
                    93:6d:2e:9c:7d:b1:3e:a8:4a:cb:d3:8a:c0:3e:92:
                    2b:a9:39:2c:35:8d:26:50:0f:8e:74:f0:75:9c:a4:
                    f2:82:51:71:09:ca:bb:f2:60:ff:db:6e:30:4a:6a:
                    45:e2:ce:11:e5:85:25:27:6f:0f:38:8c:46:67:a3:
                    e4:c9:9e:db:37:2a:d0:fe:ec:8f:db:89:11:40:ae:
                    35:e0:55:fc:70:08:77:88:be:a5:c4:e4:05:92:c9:
                    fb:58:84:67:95:b1:a0:36:d8:39:48:ae:1f:ca:10:
                    08:79:bb:5a:9f:4a:29:6d:53:14:d9:cb:17:c1:12:
                    40:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C4:36:A6:0F:63:1E:0E:E2:1D:23:27:15:5F:5B:B7:C3:F4:E6:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a677148e-8e5e-3bf5-9614-c93128ae885c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.crl

            X509v3 Authority Key Identifier:
                keyid:44:56:B0:0C:C3:6F:6E:82:D5:8A:0A:1C:2A:77:45:78:E6:33:A0:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.53.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:ce:da:88:3e:22:6f:59:c0:9e:24:b4:6f:ea:9a:4e:9b:81:
         5b:02:8b:28:d2:ec:16:70:02:60:3b:01:6f:96:60:47:a2:39:
         ca:18:e2:23:5e:0c:7a:65:db:ce:d2:3a:75:54:c0:85:5a:98:
         f1:e2:d9:b3:bb:1a:d3:b5:81:68:49:85:da:ce:e3:04:7d:46:
         80:78:12:fd:ab:fd:ea:65:ca:1c:db:49:63:ac:59:d1:69:1a:
         52:0a:53:3a:51:38:85:e6:ac:b1:13:18:37:fa:72:7a:49:19:
         7a:66:6b:50:d7:b5:db:b6:a0:12:3b:1f:a5:90:ec:63:cd:ed:
         38:e3:6c:84:c4:cb:b6:81:7f:b0:1d:b3:d3:40:83:aa:a1:1a:
         82:19:c3:34:74:25:48:40:a3:a7:87:31:9e:58:94:4c:7b:4f:
         92:6c:c5:f0:0e:77:f6:b6:2e:8b:03:c8:06:1a:66:b0:de:a4:
         bf:cb:13:5b:78:a2:1e:c3:5e:db:66:de:ab:b8:dc:80:d5:c6:
         3d:89:ab:38:85:af:79:2d:40:65:80:9e:33:df:d7:fb:85:66:
         35:84:0e:4e:a0:7f:8b:9d:fd:2f:70:c1:6c:37:98:a8:bc:3f:
         7e:d6:71:19:59:3f:58:fe:c4:18:2f:c7:00:49:ef:3a:c0:b0:
         bb:7a:99:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:38:41 2026 by rpki-client