Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/cb849826-2908-36e5-bcda-5d5d2ffc071f.roa
File:                     cb849826-2908-36e5-bcda-5d5d2ffc071f.roa (raw, json)
Hash identifier:          4r2Ux3Y+r68KfKsKWDtP7YMyvesmPsZNaG4080JG5Og=
Subject key identifier:   C0:3C:48:DB:0A:5B:44:F6:ED:98:CF:59:E1:E4:3D:35:19:F2:4C:0A
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F4328584EC019A326CD76F2E5E0BB3900
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/cb849826-2908-36e5-bcda-5d5d2ffc071f.roa
Signing time:             Thu 06 Aug 2026 20:15:22 +0000
ROA not before:           Thu 06 Aug 2026 20:15:22 +0000
ROA not after:            Wed 04 Nov 2026 21:15:22 +0000
asID:                     7270
IP address blocks:        206.20.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:19:a3:26:cd:76:f2:e5:e0:bb:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: Aug  6 20:15:22 2026 GMT
            Not After : Nov  4 21:15:22 2026 GMT
        Subject: CN=236e3dbb-16a5-4c1c-a799-7f45a2d95187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c4:bc:53:e7:4c:dd:dd:dd:50:58:86:ef:31:
                    62:c4:29:47:c3:03:85:c2:3c:73:6e:82:67:9f:95:
                    5d:6a:a6:c5:74:2b:19:b5:c9:8b:b8:ed:05:f1:06:
                    3d:43:f2:29:c8:00:29:f1:83:1c:70:9a:58:db:55:
                    02:4d:e3:d0:b1:57:79:90:34:8a:63:84:51:57:4e:
                    88:01:39:36:8e:a8:4d:5a:2a:8b:ee:3a:53:8d:41:
                    37:6f:83:37:4f:cb:8b:2c:1b:2d:6a:50:b4:18:f7:
                    dd:33:e0:c0:75:25:34:57:2e:f2:49:8f:ea:f7:50:
                    dc:04:3b:24:ef:4e:28:7c:36:af:22:3a:3e:75:2a:
                    ea:cb:5c:70:36:a0:22:a6:d4:35:fa:71:1d:c7:51:
                    cb:a2:72:c0:29:47:e7:59:fc:f9:39:ac:2c:43:c8:
                    10:f0:9d:75:0b:65:15:60:6c:56:a5:b2:c0:8d:23:
                    be:fb:d2:fe:b6:df:3e:b5:e6:6e:dd:98:84:ac:82:
                    50:1c:4b:e9:39:51:72:99:5c:fd:0f:4b:3d:6f:7a:
                    a0:c1:36:7d:63:04:2d:7f:76:e0:3e:ef:86:d8:65:
                    28:55:74:c3:11:ca:1a:ff:83:57:c0:8e:ac:6e:02:
                    af:92:db:84:70:b4:29:ca:81:da:3d:b4:c4:a6:2d:
                    c9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:3C:48:DB:0A:5B:44:F6:ED:98:CF:59:E1:E4:3D:35:19:F2:4C:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/cb849826-2908-36e5-bcda-5d5d2ffc071f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.20.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:f0:bb:60:f2:fc:ee:04:4b:20:56:42:3e:44:e1:5b:53:d2:
         d6:85:af:7c:c0:dd:08:d1:e0:11:52:e0:ac:91:80:2f:26:08:
         47:ff:8e:c1:34:3f:e8:2f:2d:87:cc:b5:47:79:11:cc:a4:bd:
         a3:b6:bb:89:c1:30:47:8a:2e:60:c7:85:11:10:86:6f:37:62:
         26:c2:cc:72:30:6c:9b:c5:25:47:06:5a:50:23:4c:e9:e4:dc:
         b5:e1:5e:6a:ea:97:0b:e4:bb:55:eb:6f:b1:b7:09:98:5f:b1:
         e9:af:48:27:d2:ed:6c:78:ed:fe:42:e5:2b:22:0e:7d:1d:1c:
         db:84:f1:d6:87:5f:75:f1:7a:54:a6:56:16:33:dc:96:90:a4:
         ee:26:2a:99:0d:fd:76:f4:6d:3a:57:cc:8f:2a:c0:97:1b:62:
         75:d4:a9:70:e1:60:e5:e8:88:f2:f2:3a:06:9b:26:5a:18:6c:
         c1:3f:aa:03:55:ee:b0:1c:52:52:b2:b3:60:3f:25:90:47:07:
         80:8f:20:89:84:15:0f:55:08:7a:a8:e5:41:05:fe:d0:55:99:
         ff:29:e0:fa:c5:d1:71:84:98:d9:4b:31:cd:92:e2:9b:7c:9a:
         97:b2:94:be:43:66:d8:d5:6c:11:0c:a9:4b:39:11:41:ce:b6:
         16:c2:bd:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:49:52 2026 by rpki-client