Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2aa28a3d-7ec2-35be-9e4a-cfa9bf38cfe0.roa
File:                     2aa28a3d-7ec2-35be-9e4a-cfa9bf38cfe0.roa (raw, json)
Hash identifier:          opmrpiqIOzszENpcZ4yn5sI0WbV615/ElFoSGlm365E=
Subject key identifier:   69:4E:7D:19:03:69:AB:E8:DF:60:D8:E4:16:EC:37:9C:1C:97:66:54
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584F13024003B0636A73189FAB4C
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2aa28a3d-7ec2-35be-9e4a-cfa9bf38cfe0.roa
Signing time:             Sat 05 Sep 2026 13:00:12 +0000
ROA not before:           Sat 05 Sep 2026 13:00:12 +0000
ROA not after:            Fri 04 Dec 2026 14:00:12 +0000
asID:                     3561
IP address blocks:        206.154.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:13:02:40:03:b0:63:6a:73:18:9f:ab:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Sep  5 13:00:12 2026 GMT
            Not After : Dec  4 14:00:12 2026 GMT
        Subject: CN=7036bc3a-be94-43c5-8c9d-cee635b63ef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b0:d2:8a:73:4f:2d:fc:57:ce:f9:56:35:ed:
                    25:75:62:d9:00:7e:88:b0:4c:7a:b7:c0:55:07:07:
                    aa:c3:86:74:0e:22:94:19:b8:bc:b4:7b:a7:f7:3b:
                    4b:5a:eb:55:b8:c6:53:e9:70:12:54:47:e4:1c:53:
                    a6:08:cf:7b:4f:e8:9b:3c:75:94:00:0f:4b:e4:6b:
                    36:e4:d9:89:29:ed:83:0e:89:48:62:4c:6f:89:89:
                    4c:c8:01:0b:ce:7c:1c:54:a9:35:77:ca:37:79:59:
                    14:c5:32:58:a8:b1:55:3e:79:16:7f:19:26:ee:c7:
                    89:6f:53:a3:c3:1c:2c:28:2f:39:21:a9:9f:01:1b:
                    fc:a0:c4:6c:0d:1a:d9:17:f0:1c:5c:ad:63:58:76:
                    02:7b:5d:c8:4e:97:9e:c5:87:d5:45:17:63:3e:57:
                    f9:b2:3d:a6:7c:3e:4e:2a:99:7c:80:87:64:78:6a:
                    a5:f1:e6:a8:af:24:b2:7e:79:a3:ae:b0:65:34:d8:
                    6f:fc:a8:bb:c4:1a:98:b6:07:be:13:dd:cb:14:40:
                    22:09:05:92:d3:48:72:9d:28:da:57:0b:52:2e:23:
                    2b:b6:34:e8:fd:49:93:ab:80:1e:d8:8f:88:10:5c:
                    96:cd:b5:5c:b8:f1:88:25:14:da:5c:67:1a:9e:72:
                    5b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:4E:7D:19:03:69:AB:E8:DF:60:D8:E4:16:EC:37:9C:1C:97:66:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2aa28a3d-7ec2-35be-9e4a-cfa9bf38cfe0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.154.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:72:f9:6e:9e:c0:03:28:e8:92:56:44:af:1d:03:ee:51:b7:
         8a:0b:17:e3:3b:a4:ca:d5:74:59:1d:ea:03:72:78:2e:22:c4:
         25:c9:3f:52:12:0b:a8:de:f5:2d:77:2c:c2:38:a0:81:cc:52:
         8e:de:ae:28:c0:7a:2a:4d:c2:68:51:78:39:c3:a4:7a:f6:65:
         5c:1d:70:1c:00:1d:0a:ab:f6:a5:20:75:26:32:bf:d0:1d:54:
         f9:a0:5d:21:1b:44:f6:20:38:8b:82:48:c1:aa:af:45:4c:83:
         b3:ba:61:fd:25:44:4a:92:0b:76:88:8c:51:84:4d:55:ed:0e:
         96:4e:cc:cd:08:02:4d:c8:0e:a9:e5:0b:0c:80:66:1f:97:9c:
         04:b9:39:95:a9:0c:ad:14:43:67:2b:87:fd:76:70:32:a5:df:
         b7:7a:0e:bd:1d:8e:c1:20:1a:00:72:6e:78:18:dd:2d:0b:74:
         0e:e9:f7:d1:55:e6:dc:93:19:ba:d9:e9:75:46:58:fc:52:ae:
         85:f4:9b:04:92:b8:af:9b:28:68:0a:68:c7:e5:f8:ef:b4:3b:
         8c:80:94:35:60:aa:88:db:92:0d:16:a4:4d:67:47:94:ce:f0:
         82:43:20:fc:6d:4c:71:9a:17:cd:ad:eb:81:eb:8f:9e:3f:52:
         de:26:09:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:38:57 2026 by rpki-client