Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/36955d5a-5d5f-34d1-9246-8dd4a520c8a8.roa
File:                     36955d5a-5d5f-34d1-9246-8dd4a520c8a8.roa (raw, json)
Hash identifier:          e/T0jvCxhhZItiC5ejcNflyVbT+RtlJOzV6c1lE2Kfw=
Subject key identifier:   90:87:74:6F:05:D2:36:52:59:3D:A2:25:EA:27:EB:BC:3E:EA:2B:66
Certificate issuer:       /CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
Certificate serial:       010D0C9F4328584F49760807E4E45985307CCF00
Authority key identifier: 26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/36955d5a-5d5f-34d1-9246-8dd4a520c8a8.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396422
IP address blocks:        172.82.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:08:07:e4:e4:59:85:30:7c:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=44e72b62-0b60-431f-b4c1-e896517f7fcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:06:1d:ef:73:3f:fd:b5:a5:cd:31:14:fb:87:
                    46:b3:7b:27:97:d3:e8:2f:90:1f:8f:33:b4:bf:ec:
                    db:25:10:63:58:9c:ae:7f:0b:01:27:2e:aa:f4:ff:
                    d1:96:6f:53:f1:04:4b:a2:62:a3:4b:30:b6:d8:50:
                    66:3a:3e:37:39:3d:59:8e:0e:34:23:ff:b4:43:5c:
                    71:4b:38:3e:8c:02:60:e1:91:4c:b0:3f:fa:43:85:
                    d9:0a:04:a8:5e:33:c8:ef:ef:c4:fb:44:04:f3:1f:
                    29:48:92:22:df:5d:63:2c:50:0e:92:a8:59:cc:81:
                    7b:61:fe:3b:6a:6b:ce:81:d1:76:67:af:49:50:12:
                    0d:4c:bc:69:2a:dc:f9:e2:b8:ea:a0:80:09:6f:67:
                    f0:09:27:69:fc:bb:13:f1:4b:30:5b:17:4b:6a:ab:
                    81:57:30:d8:16:58:51:37:5f:58:f6:dc:13:76:40:
                    3f:49:8a:fa:1c:c4:de:8f:40:93:ee:0b:51:d0:19:
                    27:65:00:5e:80:fc:bb:50:dc:1c:7a:99:a1:7a:8f:
                    d3:0d:09:cc:00:55:6e:42:fa:54:0b:72:0e:9f:07:
                    13:c2:0c:36:70:47:a0:88:34:de:d6:ef:4b:b1:1f:
                    68:4c:8e:bb:37:91:b8:fc:cb:ca:ef:a7:d7:a0:dc:
                    72:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:87:74:6F:05:D2:36:52:59:3D:A2:25:EA:27:EB:BC:3E:EA:2B:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/36955d5a-5d5f-34d1-9246-8dd4a520c8a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl

            X509v3 Authority Key Identifier:
                keyid:26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:1a:cb:23:b0:a7:09:78:73:74:54:e1:a6:3c:bd:4b:2e:9f:
         3a:83:45:72:f1:49:7f:24:c9:8a:81:4c:cf:fb:f4:e3:a8:33:
         42:eb:80:e5:4b:80:a1:09:e8:0a:c2:20:43:ed:a6:d8:ac:16:
         73:2c:74:ee:8f:d9:a9:da:0d:9f:9d:a8:2d:56:25:de:7c:be:
         b7:81:2e:80:33:ba:24:1f:78:99:9d:ef:dc:26:7f:99:e2:01:
         60:ad:bf:63:3f:a3:ee:78:72:99:36:bf:b4:54:0c:55:e3:2e:
         30:90:8a:eb:ad:58:56:c6:c7:93:a9:00:48:5b:20:22:d5:87:
         5c:0e:f1:81:3b:14:a0:71:f6:17:75:c1:ca:df:d6:50:e4:7b:
         5d:89:a9:c2:e6:36:25:77:fc:61:92:0c:f4:0a:af:33:cc:4a:
         e6:22:9f:d2:96:22:e5:ee:ef:42:4e:73:98:46:c1:d1:e5:8c:
         aa:e4:84:c0:f1:35:49:c3:54:e4:18:21:93:0a:c2:dc:ca:5f:
         3a:d5:b3:c4:1d:3a:b7:09:f0:3c:d9:5f:a7:c7:a2:e6:b1:0a:
         5b:a8:ec:66:06:da:42:17:39:f7:f2:0b:09:15:6a:cf:73:95:
         f0:5a:73:6e:ce:f5:13:14:d8:1b:77:71:af:91:ee:8a:eb:0e:
         02:93:71:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:52:34 2026 by rpki-client