Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9926713b-05c5-343b-888d-0b0752a17d15.roa
File:                     9926713b-05c5-343b-888d-0b0752a17d15.roa (raw, json)
Hash identifier:          5wZevIOabZZrq4+XOXkcR//T9BcV2D59S0ixR2MVPro=
Subject key identifier:   3E:D4:1C:42:E9:3C:42:36:4B:97:57:0F:B7:11:6A:F0:08:E0:AC:3A
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584F51D29FCD25A74F072E63B6C0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9926713b-05c5-343b-888d-0b0752a17d15.roa
Signing time:             Mon 28 Sep 2026 01:00:12 +0000
ROA not before:           Mon 28 Sep 2026 01:00:12 +0000
ROA not after:            Sun 27 Dec 2026 02:00:12 +0000
asID:                     36850
IP address blocks:        204.84.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:51:d2:9f:cd:25:a7:4f:07:2e:63:b6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Sep 28 01:00:12 2026 GMT
            Not After : Dec 27 02:00:12 2026 GMT
        Subject: CN=4368d891-b61a-4994-b46b-54b97fb5e77c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:af:8b:0b:c8:e7:4c:e8:35:10:ae:4a:0d:50:
                    c5:cc:6c:3c:d5:17:0a:5a:49:42:ee:2d:f2:50:aa:
                    90:3e:ac:a3:61:2c:03:f7:12:dc:13:69:46:d6:70:
                    85:3e:8f:a9:b0:75:e6:42:cd:7f:bc:30:dc:72:81:
                    30:84:8e:6e:24:fb:ae:a9:65:9a:b9:53:2e:b9:f1:
                    b4:4a:86:ab:74:b9:34:87:d3:be:9c:cb:24:a8:90:
                    70:e8:85:43:42:63:b6:3e:76:b8:c5:e1:38:00:91:
                    ac:49:61:5d:87:46:2e:89:33:77:ac:bf:87:5e:16:
                    cf:1a:68:85:41:74:68:97:87:9a:90:cf:e8:82:9a:
                    b3:bc:62:e9:35:0a:06:b6:31:c9:f4:48:d4:72:3b:
                    79:a2:65:82:31:c0:6c:40:ce:71:8f:5f:11:49:d4:
                    b9:30:84:83:ff:79:89:1b:10:ab:54:11:7d:4e:e3:
                    ac:42:50:7f:5d:8c:93:f2:69:5e:5c:5c:01:52:b0:
                    b3:da:cd:94:77:e3:00:e5:b5:b2:7a:b2:6e:e7:ae:
                    f8:17:8e:c3:aa:8d:5b:18:5a:90:10:f1:59:57:55:
                    21:c3:41:9a:65:fb:7d:ec:29:5d:30:e2:c3:d4:c4:
                    a9:60:d7:69:49:4c:50:ac:0c:2a:4f:8c:ee:db:29:
                    f5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:D4:1C:42:E9:3C:42:36:4B:97:57:0F:B7:11:6A:F0:08:E0:AC:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9926713b-05c5-343b-888d-0b0752a17d15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.84.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:5e:a2:1f:98:8c:0d:2d:62:6f:8c:e9:78:c7:d3:0e:6a:e5:
         dd:f3:c4:ab:a2:d7:f3:3e:c3:50:dc:df:48:cf:fa:b5:d3:f4:
         67:e5:e1:17:19:6d:1c:2c:30:7e:16:6b:c7:36:53:db:f4:41:
         0f:ba:11:e7:e9:be:d1:92:dc:19:32:2c:3b:53:9f:38:4e:e8:
         50:eb:78:0d:3a:1d:bc:7e:61:3b:e5:db:e5:4b:47:ce:cf:ce:
         44:f7:fe:1d:6d:92:4d:be:76:9d:e1:e7:56:e6:01:13:da:25:
         5f:a2:8a:1d:fa:9c:a6:e1:ab:a4:f1:de:e9:51:7f:7c:0a:a8:
         f5:57:41:22:70:65:07:2b:7e:a2:9e:da:43:a4:ec:67:c5:be:
         14:37:a7:59:81:30:b7:df:44:10:17:a9:e2:f7:64:f9:6e:b9:
         00:9b:9e:ba:b1:b0:e8:9d:34:1f:27:9f:ce:92:10:0b:53:cf:
         5c:c0:6d:21:01:b0:af:e9:ac:c7:da:2a:97:99:84:e5:06:a2:
         6f:2d:49:09:ca:91:8f:e0:cd:12:12:8a:86:59:12:d1:ea:0b:
         66:2c:3b:c2:ff:87:29:1a:fe:b5:af:1e:df:a7:d6:fe:46:1a:
         2d:55:15:d9:9c:5e:4a:b1:40:5e:0d:b9:04:77:f8:50:d1:66:
         4f:c7:06:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 20:24:20 2026 by rpki-client