Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/182d254b-5b93-4be8-95c3-ae75e24d32ee/43cf8218-285f-3ff6-9493-df15ae78c7d0.roa
File:                     43cf8218-285f-3ff6-9493-df15ae78c7d0.roa (raw, json)
Hash identifier:          RuKZP93FfY049awHEBWbKZlHfKw6eUb5xnqhuq9AlPE=
Subject key identifier:   D5:01:C5:97:18:93:BB:C5:C4:2F:15:06:38:BA:D8:8E:15:23:BA:3E
Certificate issuer:       /CN=182d254b-5b93-4be8-95c3-ae75e24d32ee
Certificate serial:       010D0C9F4328584EEEB757003FF1F19F3A509480
Authority key identifier: 01:55:8A:9E:58:0A:8B:BC:5D:9A:5E:FE:9E:40:44:50:46:34:F1:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/182d254b-5b93-4be8-95c3-ae75e24d32ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/182d254b-5b93-4be8-95c3-ae75e24d32ee/43cf8218-285f-3ff6-9493-df15ae78c7d0.roa
Signing time:             Sun 23 Aug 2026 13:00:12 +0000
ROA not before:           Sun 23 Aug 2026 13:00:12 +0000
ROA not after:            Sat 21 Nov 2026 14:00:12 +0000
asID:                     33236
IP address blocks:        206.71.150.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/182d254b-5b93-4be8-95c3-ae75e24d32ee/182d254b-5b93-4be8-95c3-ae75e24d32ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/182d254b-5b93-4be8-95c3-ae75e24d32ee/182d254b-5b93-4be8-95c3-ae75e24d32ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/182d254b-5b93-4be8-95c3-ae75e24d32ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ee:b7:57:00:3f:f1:f1:9f:3a:50:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=182d254b-5b93-4be8-95c3-ae75e24d32ee
        Validity
            Not Before: Aug 23 13:00:12 2026 GMT
            Not After : Nov 21 14:00:12 2026 GMT
        Subject: CN=1369f310-930e-43b0-8513-defa1a328205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:eb:e1:45:a0:f1:5b:1a:58:4b:dd:c6:ba:91:
                    8d:21:bf:0c:f1:0c:aa:3e:b9:9e:72:ec:4c:2a:85:
                    67:b3:31:5a:56:e6:18:f3:19:eb:4f:a4:24:b4:2f:
                    c6:8d:c5:f8:37:6b:13:09:b4:c5:8c:1c:48:bc:b5:
                    13:e3:c1:32:c6:cd:d1:f8:2c:1b:f6:ae:59:aa:02:
                    c2:f7:24:60:02:75:97:71:0c:5b:5b:21:1b:97:73:
                    63:c1:9e:a8:38:ec:62:13:dd:22:b8:b4:31:f7:ce:
                    30:41:47:82:bf:c8:87:b0:a3:1c:dc:75:cf:f7:8b:
                    ed:82:43:c0:7c:31:af:3a:d3:80:9f:bb:74:8f:67:
                    44:ef:1b:47:30:b0:59:ee:ac:1b:e0:2d:ad:d1:e5:
                    79:53:6f:f2:6d:21:77:9c:4f:b1:d5:f9:1d:59:ef:
                    b3:7f:8b:bc:96:86:92:67:6c:72:15:2e:f5:fe:d8:
                    6d:05:a2:f2:93:34:26:9a:7b:c6:53:dc:c2:bd:31:
                    99:76:7a:c0:c2:86:f8:01:2f:0c:7a:55:bc:1c:7b:
                    dc:b9:75:21:7c:76:6e:c5:00:2c:79:6b:40:6e:04:
                    ac:38:87:77:de:7b:29:ef:68:07:6a:68:94:2d:ab:
                    e1:99:59:7a:c0:e6:0b:da:7a:ec:59:3a:62:bf:1e:
                    ce:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:01:C5:97:18:93:BB:C5:C4:2F:15:06:38:BA:D8:8E:15:23:BA:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/182d254b-5b93-4be8-95c3-ae75e24d32ee/43cf8218-285f-3ff6-9493-df15ae78c7d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/182d254b-5b93-4be8-95c3-ae75e24d32ee/182d254b-5b93-4be8-95c3-ae75e24d32ee.crl

            X509v3 Authority Key Identifier:
                keyid:01:55:8A:9E:58:0A:8B:BC:5D:9A:5E:FE:9E:40:44:50:46:34:F1:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/182d254b-5b93-4be8-95c3-ae75e24d32ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.71.150.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:7b:41:0a:a6:c2:1e:2e:87:d7:c3:87:7d:f8:db:fa:70:6d:
         2d:e4:24:12:70:56:31:43:04:c3:fd:a8:10:a6:67:06:78:d9:
         d2:56:a9:d6:61:36:db:15:2d:c7:1f:71:f4:4d:68:9f:45:74:
         4c:fe:00:58:28:91:64:3a:d6:57:00:34:1b:d7:b9:03:91:c8:
         19:7b:14:ad:f6:de:69:29:c9:28:8b:9b:e7:7f:ac:54:80:e1:
         0a:06:41:f0:81:da:2f:5d:b8:1f:6c:cb:05:a9:32:8a:4b:af:
         61:1a:f8:63:ae:7c:92:04:e7:76:34:d2:41:05:d8:a0:da:6f:
         52:b3:8a:42:41:f9:28:02:c0:ec:09:72:81:1c:19:b9:a8:21:
         05:b2:08:89:a7:90:91:a7:0f:ec:fb:e5:85:2b:17:e8:a7:cc:
         6a:9c:60:9f:a7:e1:3a:8f:9f:a9:7f:9d:f3:df:52:fa:e1:56:
         c2:e5:47:c6:37:c4:5a:d7:97:92:37:f3:06:df:b6:f4:36:94:
         d8:cd:e5:56:9b:80:22:d4:95:f2:8d:dd:be:02:cb:98:48:f9:
         99:41:f3:5a:8e:57:f2:95:39:c0:19:8b:db:50:33:07:94:21:
         ec:33:9b:ed:97:8d:da:13:c8:d6:d5:bf:90:b3:af:07:a4:a4:
         97:a1:36:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 10:37:45 2026 by rpki-client