Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/949687e0-ba33-340c-8c9c-e72a6b17addd.roa
File:                     949687e0-ba33-340c-8c9c-e72a6b17addd.roa (raw, json)
Hash identifier:          pDnFuBgCM2WXFOfhSSdU5IG3DqEMLoAJ7Tdfa5cyu94=
Subject key identifier:   A3:24:94:0E:78:0E:99:37:FD:B1:FC:7F:66:DD:4B:6A:F5:BB:38:97
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EC371B6ED699CB3064AD2B300
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/949687e0-ba33-340c-8c9c-e72a6b17addd.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     28458
IP address blocks:        206.135.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:71:b6:ed:69:9c:b3:06:4a:d2:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=e3f11700-e39e-4841-9322-771cd60c0432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b1:a4:4d:9e:f1:4d:3b:e8:8b:f4:fb:9b:1f:
                    52:12:af:27:c0:0e:40:08:ca:b4:56:b5:2a:26:ca:
                    5a:de:bc:a3:62:15:96:a6:3e:fa:e1:6a:4d:02:9c:
                    95:6c:95:e1:4d:ab:92:ac:79:d8:8a:a4:85:b1:cd:
                    1a:b8:26:27:2e:f8:73:76:3e:03:bc:03:7b:ac:c0:
                    a5:32:ec:80:b2:75:38:72:98:b7:a1:e3:c0:2d:16:
                    6c:e7:0a:d4:07:98:ea:06:87:7a:42:cb:ec:6f:ca:
                    81:81:27:04:5f:c6:0d:24:fe:5b:82:be:10:5b:65:
                    97:30:a6:bc:0d:f0:b9:cc:f7:f8:dc:3a:61:23:97:
                    1e:68:5f:26:44:38:32:f9:a4:a2:1e:a1:7a:23:38:
                    16:88:72:d8:33:4b:8e:3d:5a:40:f2:a7:9b:81:62:
                    4a:b7:0e:06:1f:4f:a9:84:07:e3:90:7c:b2:b2:b6:
                    26:6a:30:6d:cc:5b:11:01:cb:6c:cb:5e:83:94:f5:
                    86:da:4d:08:14:06:7d:78:2f:68:19:3f:87:b4:11:
                    93:ad:4a:8c:f1:d6:58:89:a5:68:f6:d0:71:b9:5a:
                    00:3d:c4:06:87:ea:37:18:fe:7c:de:a4:10:bb:f3:
                    d5:57:aa:d9:31:01:c9:80:09:30:8a:d3:b3:df:fa:
                    3e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:24:94:0E:78:0E:99:37:FD:B1:FC:7F:66:DD:4B:6A:F5:BB:38:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/949687e0-ba33-340c-8c9c-e72a6b17addd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.135.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:a6:db:43:82:14:ad:c7:20:85:f3:f6:12:e9:ff:03:7d:f6:
         9f:6e:05:34:f7:7a:c0:37:c3:47:73:95:f6:9a:2e:9a:4b:08:
         b4:3f:c3:27:0f:45:84:04:21:91:a5:09:b2:be:40:d3:ee:81:
         8d:17:1a:55:55:4f:18:c7:4d:5e:42:53:b2:6c:86:e8:cf:9e:
         29:1b:60:f0:d5:61:4f:c4:a2:03:62:dc:e7:2a:ad:be:34:7b:
         f4:fc:3f:5f:d4:d3:22:1a:19:78:90:4c:66:f9:e8:7e:01:4d:
         c7:41:11:39:97:5e:8c:71:04:00:7b:29:66:ff:1c:7e:b0:7f:
         8b:c6:e3:84:42:33:12:72:48:0d:a2:34:49:ce:bc:0c:5a:9e:
         f0:2f:4d:cf:87:1a:36:e2:19:0e:65:d7:4e:48:e7:d9:69:23:
         95:8c:50:24:57:55:b6:18:47:c6:78:63:8a:6e:fe:39:81:a7:
         82:2f:08:c9:ca:d0:8f:fc:42:3a:f2:e2:c9:cb:17:d2:69:87:
         85:9a:8a:27:35:ab:6f:9e:87:d5:9f:cb:66:5c:dd:5b:13:e3:
         d1:79:e3:41:64:b0:0b:2b:11:8e:d8:46:21:5b:12:eb:05:62:
         c6:e0:fb:26:e2:9a:c8:dd:3d:0d:14:70:50:33:82:f5:a5:47:
         bb:a2:e0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 04:16:06 2026 by rpki-client