Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/9ce8df41-28ef-390e-88c7-d5c64039b0f4.roa
File:                     9ce8df41-28ef-390e-88c7-d5c64039b0f4.roa (raw, json)
Hash identifier:          8EAc4rOXQDxjVRMxChiDDRdPouojarefgI+m5m/zVRg=
Subject key identifier:   55:19:06:DA:E6:C7:A5:62:D0:C7:DD:2A:EE:46:5D:BF:7A:B3:FD:D8
Certificate issuer:       /CN=2bdaa217-f00f-46c5-a102-e5ff2acb105b
Certificate serial:       010D0C9F4328584F4976B96F8425BDB4FED43800
Authority key identifier: C0:88:D3:59:8E:C0:4C:E4:97:77:88:B7:37:9D:8F:BB:3D:E9:1E:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/9ce8df41-28ef-390e-88c7-d5c64039b0f4.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     0
IP address blocks:        206.53.168.0/23 maxlen: 26
                          206.53.173.0/24 maxlen: 26
                          2606:a980:0:2::/64 maxlen: 64
                          2606:a980:0:6::/64 maxlen: 64
                          2606:a980:0:a::/64 maxlen: 64
                          2606:a980:0:b::/64 maxlen: 64
                          2606:a980:0:c::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:b9:6f:84:25:bd:b4:fe:d4:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bdaa217-f00f-46c5-a102-e5ff2acb105b
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=43ecea40-06ed-44d1-9834-fc55fc71659b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4a:1b:32:63:5f:71:d9:a1:5c:2c:b1:e2:08:
                    c8:2d:aa:d2:de:c1:16:44:40:41:4d:dc:8a:f0:8d:
                    ac:f5:56:67:67:f8:3c:41:12:7e:36:10:3f:4c:d3:
                    2b:29:67:31:15:01:89:4d:db:c5:4f:58:f8:36:53:
                    a9:71:52:73:de:f3:f2:04:a5:19:6c:1c:c9:55:fb:
                    15:19:5a:7c:e0:07:35:e1:69:c3:0b:99:4c:dc:72:
                    2c:a3:29:66:00:e8:5c:17:70:d2:4b:8b:9d:32:22:
                    81:85:db:21:4b:7a:1a:49:6b:d2:6a:91:18:19:1f:
                    92:bf:d7:58:cf:c0:9e:f5:3a:f2:f8:f0:07:a9:64:
                    69:89:fd:01:6b:8c:7f:66:7d:3d:f8:79:12:22:20:
                    e0:aa:56:ef:7c:c7:40:ea:c0:48:90:b8:40:45:bc:
                    a3:59:6e:c0:a5:a3:8b:73:d5:60:3e:72:bf:af:7f:
                    b4:1e:e3:e1:ea:e5:02:5f:84:2d:69:37:d0:c1:eb:
                    19:6d:7a:5a:b9:73:08:68:75:84:0c:42:4f:27:bb:
                    ae:8d:6f:f4:50:e7:46:c2:93:73:df:74:b7:83:a1:
                    e5:4b:f2:6b:d5:d4:57:83:d9:45:e9:a7:27:e2:88:
                    1e:80:ce:c2:69:b7:53:75:7d:d2:e2:5f:48:34:a5:
                    96:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:19:06:DA:E6:C7:A5:62:D0:C7:DD:2A:EE:46:5D:BF:7A:B3:FD:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/9ce8df41-28ef-390e-88c7-d5c64039b0f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.crl

            X509v3 Authority Key Identifier:
                keyid:C0:88:D3:59:8E:C0:4C:E4:97:77:88:B7:37:9D:8F:BB:3D:E9:1E:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.53.168.0/23
                  206.53.173.0/24
                IPv6:
                  2606:a980:0:2::/64
                  2606:a980:0:6::/64
                  2606:a980:0:a::-2606:a980:0:c:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:00:56:2e:e7:46:0b:41:b9:2e:7e:56:3a:c9:ce:8b:c1:4a:
         a4:92:a9:7a:8e:d3:af:a1:ae:7b:bb:f7:c3:4d:4a:65:d9:36:
         a1:f8:2e:31:3f:2c:07:d9:33:8a:bb:44:6f:50:42:26:7c:2c:
         af:1f:de:5e:68:c3:c4:34:f4:fd:e9:19:49:7a:7b:b5:69:e5:
         94:55:bf:5e:cb:24:fa:a1:8a:26:19:f8:50:e1:85:ab:7c:bc:
         7f:4f:2d:37:ec:7d:53:97:97:fe:11:da:49:cf:12:14:9d:61:
         c9:0a:8e:dd:68:d0:19:6e:a8:d9:09:27:ab:c1:d5:eb:f4:f9:
         50:47:7c:7f:a9:84:d2:70:ec:64:09:00:7d:1a:48:cd:7e:63:
         99:cd:1b:9f:1d:37:30:4c:a2:27:f4:a9:73:1c:cc:b4:4b:f7:
         b0:0b:3e:8d:f1:13:2a:ba:bf:1c:db:a5:77:f2:4f:0a:39:4c:
         85:3e:78:1d:d3:44:60:51:3a:70:be:08:49:61:d5:a2:23:26:
         56:74:5e:5f:d9:06:46:ff:e2:96:df:cc:e9:6e:af:8a:85:70:
         e4:c5:e9:c7:5f:6d:14:5c:61:4b:61:f8:71:f1:33:08:e0:94:
         db:e7:b2:5f:9b:c6:d6:79:8a:9d:93:0c:77:89:80:04:d4:36:
         e3:b5:06:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:16:47 2026 by rpki-client