Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/34ca0b7c-8989-353e-92c3-6193ab9e4f64.roa
File:                     34ca0b7c-8989-353e-92c3-6193ab9e4f64.roa (raw, json)
Hash identifier:          X7S6Fk4BY5oTUFYBRL7UocvD9p6V3zMYMLcRKg33V18=
Subject key identifier:   AF:ED:D7:1C:95:6B:D4:5A:08:5C:0A:F3:09:59:2D:47:37:E2:A5:C9
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584F3FAD41629E1EFE97BFB07800
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/34ca0b7c-8989-353e-92c3-6193ab9e4f64.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     393249
IP address blocks:        206.87.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:41:62:9e:1e:fe:97:bf:b0:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=c3e9f870-5331-4fb3-9144-809c2f6891cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4c:2b:06:6b:ef:43:bd:1a:79:26:45:88:1c:
                    60:b5:a7:09:0f:d0:33:c8:94:44:28:cd:d6:73:82:
                    8b:ba:74:ef:2b:c8:99:61:37:3b:c4:b7:16:74:80:
                    ca:88:cb:7d:3c:fb:9d:d9:7c:b5:64:42:1e:8c:42:
                    f3:d3:c6:f2:c5:96:f4:b4:ec:53:30:56:23:35:7d:
                    0a:1c:5a:69:b5:8c:9b:95:b1:91:d5:45:4f:61:55:
                    20:7e:f8:1c:66:e1:38:6d:58:2f:75:c9:b5:84:d3:
                    ce:99:53:90:e8:c3:5e:8e:fe:ca:cd:77:88:1a:c0:
                    60:11:d0:a2:a7:be:a9:08:e5:53:a0:81:90:a0:cc:
                    c5:99:22:75:d6:fc:49:7d:30:09:1c:24:39:dd:0d:
                    ef:ee:ee:b0:bc:a3:02:2d:a4:5c:fd:a8:29:46:0c:
                    b7:be:93:83:1b:7c:af:d5:84:07:f6:d4:ef:fc:85:
                    29:4c:42:2b:e6:f6:09:ad:51:ea:24:c5:68:c8:59:
                    73:46:4b:5e:2d:37:55:d0:6b:3f:41:96:5b:48:39:
                    be:cb:82:16:83:6c:15:73:e7:9c:01:2a:db:4b:23:
                    cf:e3:e9:7f:28:05:ce:60:df:8c:ac:42:c8:1c:00:
                    97:7e:3a:fb:c6:6c:30:c8:8f:d0:5c:2d:a8:04:aa:
                    91:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:ED:D7:1C:95:6B:D4:5A:08:5C:0A:F3:09:59:2D:47:37:E2:A5:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/34ca0b7c-8989-353e-92c3-6193ab9e4f64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.87.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:b3:e0:ff:92:3a:ec:af:72:48:f4:f2:98:8c:cc:70:b7:24:
         b7:75:c6:38:45:ee:a9:78:bd:d4:14:7d:0b:d8:41:ca:40:cc:
         ad:45:5d:5b:9d:38:e1:2c:fb:2d:da:21:0a:1d:20:34:e6:2a:
         7d:1b:55:4f:bf:4c:64:ed:77:83:0f:ee:a9:9b:a6:74:e5:7e:
         e2:fb:05:92:11:f7:45:93:d5:fa:32:96:65:fa:33:fe:20:10:
         8b:fb:40:ac:df:83:40:c2:cc:6a:b0:bf:fe:f3:ec:49:ee:ad:
         3e:9d:dc:39:ba:96:fb:b2:d4:f9:68:c6:30:60:74:07:e2:4b:
         5a:7f:35:8b:7f:61:a5:46:40:c3:4d:b9:c8:98:27:88:0e:15:
         ef:f0:8a:05:5b:21:d0:ea:65:bd:ab:16:0c:e4:df:a5:1b:90:
         c9:9e:58:0a:a8:bf:82:e9:00:8f:59:69:fb:14:31:fb:33:62:
         ca:c9:5e:ef:c3:ef:c4:b1:45:1c:5f:3b:82:2f:87:6f:43:01:
         df:d8:a8:b5:8a:70:c8:d3:f9:54:5a:c8:82:f9:7c:2d:f4:cd:
         36:6d:32:59:98:25:c8:ed:fb:41:c0:96:c0:1d:36:e2:f5:55:
         77:28:50:1d:c3:47:5b:b4:f9:64:97:99:ea:91:dd:6e:04:e2:
         bf:3c:5c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 12:32:07 2026 by rpki-client