Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/6f7626b8-0bd7-33d9-8b81-3769c139acaf.roa
File:                     6f7626b8-0bd7-33d9-8b81-3769c139acaf.roa (raw, json)
Hash identifier:          ud/86oZ8N27V+6Rdh9eV7xyN/FK1NmM10yuiAc0OKqI=
Subject key identifier:   3E:0A:CF:7C:36:92:27:BC:66:BE:8F:B3:CF:18:A3:B3:4F:DB:A0:3B
Certificate issuer:       /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial:       010D0C9F4328584F49751BC7D56E2F6CC9463180
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/6f7626b8-0bd7-33d9-8b81-3769c139acaf.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     11273
IP address blocks:        208.66.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:1b:c7:d5:6e:2f:6c:c9:46:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=6274b562-686b-43af-9c2c-4aa2470a9832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0d:9d:6d:31:4a:b8:b4:85:f8:12:8c:d9:df:
                    3c:c5:af:02:ea:bd:0e:2c:ba:df:c7:d2:2b:1e:1b:
                    1c:5e:46:31:06:f3:f4:41:99:77:81:12:c8:89:ec:
                    c3:f8:e4:f5:5b:0d:75:b6:ef:ad:4e:b9:48:7b:a5:
                    3a:81:3d:1c:a9:37:ba:87:1a:7f:14:49:be:0e:09:
                    e0:ed:72:87:20:b2:be:88:70:0a:4e:8a:70:07:ed:
                    67:bc:14:55:2c:d8:59:d7:a5:98:cc:bc:81:02:a7:
                    45:14:7d:a5:a2:44:c0:60:eb:57:a1:b0:d2:0a:8a:
                    18:63:7a:9b:d8:cf:31:51:05:a4:d3:fe:8e:3d:54:
                    b4:00:21:5b:d0:90:50:9a:39:86:5b:33:3e:09:be:
                    f2:a3:22:90:b0:b9:ba:e4:16:cc:6b:d4:7e:13:28:
                    2a:77:31:cc:97:72:bd:37:8e:b2:af:f0:92:21:ba:
                    93:89:de:de:36:5a:7c:8d:ea:fc:d0:a7:05:0e:b9:
                    b8:b6:c1:76:a7:ac:01:03:fe:c7:ee:8f:d2:e5:ca:
                    44:49:ce:6c:71:f0:fa:45:9b:09:ea:06:3f:a2:15:
                    88:56:45:75:43:7b:43:e0:1c:b7:cc:0b:54:0c:de:
                    60:f4:42:64:5e:28:79:f7:11:4a:1b:75:ed:83:6c:
                    54:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:0A:CF:7C:36:92:27:BC:66:BE:8F:B3:CF:18:A3:B3:4F:DB:A0:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/6f7626b8-0bd7-33d9-8b81-3769c139acaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl

            X509v3 Authority Key Identifier:
                keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.66.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:7c:5b:7e:21:69:04:6e:30:6f:8f:7b:29:3c:1d:64:38:0b:
         70:c2:30:e6:d7:b9:1c:32:89:4a:3c:15:be:98:c2:3e:fd:d5:
         06:c6:9e:4f:ff:2a:d6:56:af:d8:da:83:f4:21:78:48:b1:47:
         46:09:45:0b:9c:49:21:f5:6e:73:85:f6:d5:87:88:41:d8:4b:
         de:68:64:e6:29:bb:4f:b2:8b:18:20:93:5b:d2:b4:21:d9:55:
         f0:26:dd:e3:da:97:5f:b4:f0:b3:e5:c4:b8:bc:97:9c:44:e6:
         7d:8d:89:61:f2:ea:31:e5:40:51:7c:be:97:d8:41:d5:13:9e:
         15:0d:1c:90:c6:a3:ad:86:bd:10:38:6b:e0:1c:60:a9:6d:dd:
         55:49:ce:fe:2f:b1:19:00:b8:5d:54:bc:6a:1e:44:7b:47:d8:
         18:1b:13:c7:8d:e3:31:fa:a2:ae:e3:c4:0e:90:d0:57:82:a4:
         ed:44:3f:fb:5c:3f:36:6f:5c:29:d7:81:06:c9:11:ab:0a:18:
         30:2c:bf:3e:c2:f3:0e:49:cd:59:d3:19:d6:14:91:fa:3a:07:
         ea:aa:46:9a:79:65:e6:d6:13:0e:6f:02:32:c9:fc:69:5f:71:
         b2:ad:a6:5a:1c:0a:57:02:fd:98:0d:0e:e3:94:55:d1:de:8c:
         2e:16:9a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 08:30:13 2026 by rpki-client