Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59/206f4970-5c67-3b6d-a995-f66fb4a8fe7d.roa
File:                     206f4970-5c67-3b6d-a995-f66fb4a8fe7d.roa (raw, json)
Hash identifier:          Yz1vaazDEDNXtwekJle7Z8qq5rDMyVru0fiksIg4/IM=
Subject key identifier:   7A:B6:75:55:59:55:12:C6:13:3C:1D:DF:32:4C:13:CA:B1:0B:08:BF
Certificate issuer:       /CN=ccb98637-aae1-42c3-90ca-0cee2f4ebf59
Certificate serial:       010D0C9F4328584F4974BBFC466D472B0DEA8900
Authority key identifier: 26:ED:05:C4:E6:BA:DC:DE:5A:7A:14:24:02:A6:15:CF:1C:45:7E:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59/206f4970-5c67-3b6d-a995-f66fb4a8fe7d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     31832
IP address blocks:        199.189.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59/ccb98637-aae1-42c3-90ca-0cee2f4ebf59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59/ccb98637-aae1-42c3-90ca-0cee2f4ebf59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:bb:fc:46:6d:47:2b:0d:ea:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccb98637-aae1-42c3-90ca-0cee2f4ebf59
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a7459c0f-4990-4d78-a7b5-ab42dff5e4b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:35:a5:ea:d9:ca:a0:85:a5:61:62:bb:6e:b8:
                    d1:1e:2e:72:85:a2:37:fb:6d:3f:65:d5:11:60:fe:
                    ca:b8:cd:f8:0a:18:13:3a:2c:c2:85:0f:92:06:9c:
                    4c:2e:4a:3d:9c:ce:05:aa:67:79:8c:a4:ba:af:69:
                    54:a2:cd:d7:73:49:9f:18:cf:a8:e5:fe:e4:39:c9:
                    7f:32:af:7e:71:52:6e:77:ef:5d:8e:05:7b:27:35:
                    6b:bd:41:09:ba:08:8f:2d:30:36:bd:38:fb:15:08:
                    db:92:44:b3:d3:0c:71:cb:7c:90:3e:2c:94:b5:03:
                    76:a5:07:78:54:53:4e:fa:62:9a:a1:a8:88:17:82:
                    f4:c6:bd:6d:68:3b:94:62:69:9c:26:69:f8:75:91:
                    5b:04:5e:bc:70:38:3d:12:9d:9c:65:f2:54:f7:fc:
                    0a:7f:27:8c:a7:05:d4:a4:ff:6c:bf:fd:87:a9:26:
                    f1:80:3d:a1:56:be:a0:b3:dc:ad:7c:e6:96:c3:a2:
                    42:b4:8b:80:ee:c5:99:95:a8:ee:57:ec:d4:94:e5:
                    75:d7:17:84:45:12:6a:cc:76:a0:03:84:8a:de:49:
                    05:3f:80:b6:96:80:0e:a1:c8:d4:81:19:1f:a9:1a:
                    1e:b7:73:81:de:51:3d:9d:98:2a:7b:fc:47:0b:9f:
                    ba:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B6:75:55:59:55:12:C6:13:3C:1D:DF:32:4C:13:CA:B1:0B:08:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59/206f4970-5c67-3b6d-a995-f66fb4a8fe7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59/ccb98637-aae1-42c3-90ca-0cee2f4ebf59.crl

            X509v3 Authority Key Identifier:
                keyid:26:ED:05:C4:E6:BA:DC:DE:5A:7A:14:24:02:A6:15:CF:1C:45:7E:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.189.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:b0:fa:d3:e7:ea:9a:69:90:da:12:af:85:bd:e7:bb:89:28:
         7e:49:1a:03:0b:9f:24:e1:40:58:a6:50:92:23:7c:fc:9c:ee:
         da:e6:88:f5:82:be:63:27:c4:02:b8:ce:e6:a0:1f:05:58:91:
         26:c5:b8:a4:34:11:76:31:fb:91:44:fa:8c:b5:e6:8b:19:8b:
         d6:68:4b:26:c7:01:0b:44:97:37:7f:94:4a:f0:c5:a5:80:7e:
         3a:b9:79:7b:63:ec:2f:ae:ca:8f:2c:bc:20:14:4a:4e:ee:d1:
         c0:89:88:27:f2:e9:82:d1:ca:e0:64:d8:61:98:43:ce:3a:d6:
         34:aa:10:db:1c:b2:a9:54:49:56:0d:7b:fa:62:20:d9:fd:ec:
         93:80:db:cf:f4:41:e2:50:dc:d0:5e:96:7b:ce:9b:ab:64:40:
         8f:c8:bf:65:41:fe:3c:88:bb:fe:90:c2:e5:a3:ef:d6:30:6c:
         b4:7b:7c:45:9d:26:a0:46:cb:76:4b:d8:0f:96:39:c1:ce:6a:
         ae:c8:54:4b:5d:01:5d:c4:5d:ff:70:9f:b8:fc:31:99:58:62:
         eb:2b:ce:2f:46:78:9f:36:f8:71:a0:7e:be:7a:9f:2f:57:9d:
         94:ec:ec:8e:3d:d6:3e:3a:d1:56:a3:c7:79:db:11:3b:f4:2a:
         52:53:45:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:00:53 2026 by rpki-client