Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2606f00e-0a2b-4ddb-ba37-229aa9e57714/c09c6260-da0d-3a13-856c-f8c751b918fe.roa
File:                     c09c6260-da0d-3a13-856c-f8c751b918fe.roa (raw, json)
Hash identifier:          GxZ/yO+IjyiGWUYj7mAIuIPAfrGKFohSuftUjwE8UDI=
Subject key identifier:   4B:32:A8:BB:8E:2E:B1:FB:9A:A6:D7:9C:41:FC:85:15:20:80:6E:08
Certificate issuer:       /CN=2606f00e-0a2b-4ddb-ba37-229aa9e57714
Certificate serial:       010D0C9F4328584F4976353598741B6631857400
Authority key identifier: F9:5C:02:7E:18:2E:A8:B6:03:6C:2E:CE:17:80:14:39:54:B8:D2:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2606f00e-0a2b-4ddb-ba37-229aa9e57714.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2606f00e-0a2b-4ddb-ba37-229aa9e57714/c09c6260-da0d-3a13-856c-f8c751b918fe.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     1798
IP address blocks:        204.144.80.0/24 maxlen: 24
                          2001:580::/32 maxlen: 32
                          2607:6d00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2606f00e-0a2b-4ddb-ba37-229aa9e57714/2606f00e-0a2b-4ddb-ba37-229aa9e57714.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2606f00e-0a2b-4ddb-ba37-229aa9e57714/2606f00e-0a2b-4ddb-ba37-229aa9e57714.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2606f00e-0a2b-4ddb-ba37-229aa9e57714.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:35:35:98:74:1b:66:31:85:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2606f00e-0a2b-4ddb-ba37-229aa9e57714
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=09f5f308-4184-42e3-a400-c6417f32fe01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9b:6f:f3:90:4e:ec:30:95:54:ad:1b:b0:36:
                    41:87:5d:a6:90:0d:d2:52:b8:07:c7:67:6c:80:ca:
                    4e:45:06:8a:b7:04:66:d8:53:26:92:b4:4e:39:e1:
                    f6:de:83:74:0f:45:34:d0:ef:92:96:91:da:91:2d:
                    08:44:2a:00:ce:38:6f:7e:bf:1b:1a:98:57:92:f7:
                    3d:c8:a4:3d:90:97:48:f4:6c:98:fb:44:13:5a:c9:
                    be:7d:26:89:99:ea:5a:f8:3a:f7:d0:a8:43:00:f2:
                    41:ae:e4:bf:8d:57:77:32:98:2c:7e:68:1f:24:8a:
                    38:41:d5:a3:77:d9:07:77:0f:f1:3f:8b:0a:77:ed:
                    5c:97:05:3b:bf:3f:1f:7c:7f:63:fd:c0:44:7e:be:
                    7c:81:29:19:50:24:b8:d7:9d:04:bb:a2:2d:28:36:
                    12:bc:5e:7a:93:c5:4f:e4:58:c7:da:a3:fb:dc:37:
                    6e:be:2e:14:dd:40:87:1d:b5:b9:b4:90:16:aa:6a:
                    ea:36:26:5b:e1:52:a1:e1:56:34:d4:d7:36:9c:6f:
                    78:19:60:99:da:ea:e2:67:72:20:4f:b1:a3:ec:97:
                    b1:3c:f7:36:6d:32:79:14:4c:ed:cd:5d:06:0a:68:
                    13:0b:30:d2:e6:0e:52:de:2a:2f:fd:82:0f:81:70:
                    04:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:32:A8:BB:8E:2E:B1:FB:9A:A6:D7:9C:41:FC:85:15:20:80:6E:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2606f00e-0a2b-4ddb-ba37-229aa9e57714/c09c6260-da0d-3a13-856c-f8c751b918fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2606f00e-0a2b-4ddb-ba37-229aa9e57714/2606f00e-0a2b-4ddb-ba37-229aa9e57714.crl

            X509v3 Authority Key Identifier:
                keyid:F9:5C:02:7E:18:2E:A8:B6:03:6C:2E:CE:17:80:14:39:54:B8:D2:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2606f00e-0a2b-4ddb-ba37-229aa9e57714.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.144.80.0/24
                IPv6:
                  2001:580::/32
                  2607:6d00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:f0:b2:73:ba:69:f8:53:37:d2:8a:3e:79:bb:85:4d:da:0c:
         9a:54:e6:e4:6b:6a:17:a2:03:b6:3e:f6:7b:5e:19:44:55:2d:
         dd:cd:c6:19:60:ab:a7:87:11:ad:ba:ed:72:fe:a1:f0:a8:2d:
         6f:97:9e:82:5d:75:71:43:d5:83:7c:46:c9:fe:ec:d3:74:a0:
         cd:aa:9a:00:0c:c1:5a:fe:38:f3:ef:ae:ca:ad:04:d0:dc:3c:
         bc:61:5d:be:62:12:67:ee:f2:2a:58:af:77:fa:0e:1b:01:24:
         e3:92:91:64:ea:8e:25:3b:48:28:4a:e8:2d:e8:75:85:eb:28:
         14:b7:5e:b5:4d:59:5e:37:03:3c:61:ee:55:08:8c:31:1c:5c:
         e5:ee:0f:1a:0a:47:5a:44:34:3b:58:51:ca:2c:12:6d:84:6f:
         e2:63:c6:62:48:08:59:15:57:14:79:22:97:e0:6e:42:89:5a:
         e2:9d:c9:45:09:a0:e8:3f:de:7a:2c:84:9c:5b:56:14:23:6f:
         c4:1a:27:0a:fe:54:24:ed:43:b0:8f:eb:cb:a8:ea:0e:fd:05:
         85:e3:0e:9f:35:03:6a:00:cc:cc:01:05:f5:33:7c:86:f7:68:
         84:2c:c8:cf:ae:69:b4:24:d1:c2:33:d3:3b:a3:6c:e1:d0:b9:
         5f:4e:02:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:11:57 2026 by rpki-client