Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/2a3598a6-3c51-3995-b0a7-612073b7b44d.roa
File:                     2a3598a6-3c51-3995-b0a7-612073b7b44d.roa (raw, json)
Hash identifier:          1y2Cxd84f/75GMG3+kh6WtINdHf/tqzkSlGnLZRjdDk=
Subject key identifier:   3C:03:CD:A3:09:A2:55:FD:AC:3B:9E:E4:16:2A:1C:BE:48:98:8E:73
Certificate issuer:       /CN=d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27
Certificate serial:       010D0C9F4328584F02421D4523801CD0D07F6F10
Authority key identifier: A1:2C:DA:96:0B:63:94:15:8D:17:96:2B:73:6A:DF:40:5C:72:A2:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/2a3598a6-3c51-3995-b0a7-612073b7b44d.roa
Signing time:             Sun 30 Aug 2026 13:00:11 +0000
ROA not before:           Sun 30 Aug 2026 13:00:11 +0000
ROA not after:            Sat 28 Nov 2026 14:00:11 +0000
asID:                     16509
IP address blocks:        206.204.64.0/19 maxlen: 24
                          216.234.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:02:42:1d:45:23:80:1c:d0:d0:7f:6f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27
        Validity
            Not Before: Aug 30 13:00:11 2026 GMT
            Not After : Nov 28 14:00:11 2026 GMT
        Subject: CN=66b06e5b-b1ad-483f-8bd2-2343d7ea109d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9d:c0:46:0e:73:ff:07:28:a6:d2:a9:04:62:
                    44:08:fe:9c:ed:89:47:0f:17:df:16:c0:22:85:41:
                    6e:f8:4a:40:b8:1e:27:4f:a1:70:c6:8c:93:0a:ed:
                    2e:1e:cf:1b:1c:19:dd:51:cc:be:9c:b4:a1:17:66:
                    05:3e:58:0d:a1:f3:48:c9:23:69:ba:4e:bb:66:4b:
                    85:d1:08:07:69:a7:fe:ea:33:79:6c:d4:4b:e7:2c:
                    dc:5a:8c:a7:cd:16:4b:a3:58:8d:85:b9:0f:71:c2:
                    03:27:2e:e1:4c:ec:a5:2f:74:f9:f7:50:19:35:f5:
                    68:28:74:06:06:82:f1:ef:0e:ab:ec:60:f1:f1:58:
                    24:db:77:c8:e5:a5:d7:e0:b5:2f:c1:94:0b:10:7b:
                    69:a0:ee:24:f6:69:62:a1:66:0b:9e:de:5d:a2:16:
                    53:7e:fb:b5:29:32:08:d6:c0:e4:05:93:23:81:01:
                    de:45:0c:2d:86:5e:7a:8c:d0:3d:d4:72:f4:ae:ae:
                    ef:4a:1c:59:51:40:2e:a8:ab:06:ed:20:f6:58:62:
                    f5:27:4b:4e:80:25:15:c1:a7:23:98:de:23:0b:0e:
                    5b:33:85:fa:b4:ac:8d:95:a0:77:a0:b9:30:73:96:
                    b2:2e:fe:08:9e:e3:9e:a1:58:c3:13:8b:5d:9c:e2:
                    6c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:03:CD:A3:09:A2:55:FD:AC:3B:9E:E4:16:2A:1C:BE:48:98:8E:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/2a3598a6-3c51-3995-b0a7-612073b7b44d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.crl

            X509v3 Authority Key Identifier:
                keyid:A1:2C:DA:96:0B:63:94:15:8D:17:96:2B:73:6A:DF:40:5C:72:A2:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.204.64.0/19
                  216.234.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:90:a3:68:50:46:e6:05:e1:39:24:a2:8a:80:76:9e:a9:84:
         40:bf:23:11:fb:c1:cb:39:ca:83:22:ad:b6:e4:03:d7:f7:3d:
         bc:96:60:a0:b2:0b:63:f6:de:a7:4c:5c:3b:10:80:aa:55:39:
         86:93:14:48:b4:de:10:c7:14:a9:03:d0:3e:c9:b4:1c:49:30:
         f5:fa:70:74:14:63:45:89:1c:80:c3:0d:74:59:22:7a:24:cc:
         94:cc:79:e9:9c:53:6a:b9:46:05:f5:89:88:b6:43:d8:d6:a7:
         42:86:00:cc:ad:cc:4e:8f:48:b9:0a:5c:21:17:79:92:7c:9c:
         15:86:9a:3d:51:80:42:2a:67:cd:19:0a:43:5b:01:06:08:47:
         93:db:d7:3f:87:e7:dc:9e:e2:a8:cc:5c:81:0b:42:6c:0c:92:
         67:ef:d6:88:e4:5a:5a:14:25:ef:8d:71:a6:41:ac:71:43:61:
         09:1a:4d:89:95:c7:63:b6:2d:11:b4:57:e9:fa:da:c5:f3:fa:
         06:1e:32:b8:c4:67:69:f1:a3:51:87:1d:eb:2c:fc:05:22:08:
         ec:69:c1:01:a5:e7:a3:9e:27:52:71:e0:23:9d:a4:38:34:01:
         18:3f:cd:5b:67:59:3a:b6:45:89:51:16:8a:6d:22:ec:46:59:
         a5:1f:3a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:30:33 2026 by rpki-client