Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a23e4fc3-9953-40b8-8d08-ac7981cb8d44/37bb94b6-db12-3248-80db-f0de1fc7267b.roa
File:                     37bb94b6-db12-3248-80db-f0de1fc7267b.roa (raw, json)
Hash identifier:          brkTpN3J07gvkhTGdwO5/xE3W9IfXIKxG9bfQsACiZo=
Subject key identifier:   DC:84:ED:45:1D:28:BB:3D:66:A0:79:14:04:E3:4D:42:5E:6A:FE:ED
Certificate issuer:       /CN=a23e4fc3-9953-40b8-8d08-ac7981cb8d44
Certificate serial:       010D0C9F4328584F5C6CCDC10986EF793E5C16C0
Authority key identifier: 41:CF:8D:20:93:EE:29:10:61:2F:FD:A6:51:EE:3C:00:89:B4:AD:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a23e4fc3-9953-40b8-8d08-ac7981cb8d44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a23e4fc3-9953-40b8-8d08-ac7981cb8d44/37bb94b6-db12-3248-80db-f0de1fc7267b.roa
Signing time:             Thu 01 Oct 2026 20:09:03 +0000
ROA not before:           Thu 01 Oct 2026 20:09:03 +0000
ROA not after:            Wed 30 Dec 2026 21:09:03 +0000
asID:                     23228
IP address blocks:        204.154.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a23e4fc3-9953-40b8-8d08-ac7981cb8d44/a23e4fc3-9953-40b8-8d08-ac7981cb8d44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a23e4fc3-9953-40b8-8d08-ac7981cb8d44/a23e4fc3-9953-40b8-8d08-ac7981cb8d44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a23e4fc3-9953-40b8-8d08-ac7981cb8d44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5c:6c:cd:c1:09:86:ef:79:3e:5c:16:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a23e4fc3-9953-40b8-8d08-ac7981cb8d44
        Validity
            Not Before: Oct  1 20:09:03 2026 GMT
            Not After : Dec 30 21:09:03 2026 GMT
        Subject: CN=c09cf41f-7cd0-44e0-a13a-c8c8357e783d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e7:6e:fa:58:34:48:99:59:3f:2d:a0:48:8d:
                    3e:ae:96:ee:73:54:e8:55:a0:9b:3b:e0:9a:ca:eb:
                    c0:bd:2a:d1:db:45:46:15:b3:ea:d2:db:03:f5:ad:
                    68:d3:44:e5:f2:59:cb:43:36:65:a0:c5:de:e1:a0:
                    97:e6:77:6d:5e:02:cd:a8:29:dc:4e:89:51:6a:6d:
                    29:5c:10:17:18:c3:db:20:a8:cd:c3:ab:18:c8:53:
                    e5:13:2a:d4:77:5e:96:af:6d:e6:f1:ed:2b:81:88:
                    fa:33:ab:c1:5a:0f:c3:26:7e:81:a8:d0:d6:49:c8:
                    f0:64:4e:7b:ad:3b:17:ef:e7:c0:e3:61:04:62:e0:
                    bb:f4:cd:c0:dc:27:ae:49:29:1b:15:15:c6:01:2c:
                    c2:8d:9a:e9:2b:2c:3b:1a:36:ec:43:ca:03:62:55:
                    43:58:d8:c6:9d:3e:38:31:d0:00:fc:e9:b9:be:10:
                    55:75:64:d4:7a:b0:ec:3f:22:f1:a8:e1:6d:9c:7e:
                    56:b2:50:0a:7d:e8:d8:23:d1:83:44:75:51:9e:94:
                    27:38:03:5e:7f:1a:23:37:5e:57:57:35:73:4c:9f:
                    cf:24:ed:6f:4d:50:fe:51:12:37:ff:8f:7c:3b:d6:
                    0f:0b:3b:b3:95:f4:93:5d:1b:44:dc:3c:8e:67:87:
                    c7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:84:ED:45:1D:28:BB:3D:66:A0:79:14:04:E3:4D:42:5E:6A:FE:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a23e4fc3-9953-40b8-8d08-ac7981cb8d44/37bb94b6-db12-3248-80db-f0de1fc7267b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a23e4fc3-9953-40b8-8d08-ac7981cb8d44/a23e4fc3-9953-40b8-8d08-ac7981cb8d44.crl

            X509v3 Authority Key Identifier:
                keyid:41:CF:8D:20:93:EE:29:10:61:2F:FD:A6:51:EE:3C:00:89:B4:AD:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a23e4fc3-9953-40b8-8d08-ac7981cb8d44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.154.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:02:0c:8b:a7:f3:fb:a3:fc:97:46:02:f6:ce:69:6d:84:ef:
         b9:4c:69:8d:26:7b:b4:f1:1a:66:80:bd:51:73:57:91:a2:4f:
         fc:4f:64:19:47:b0:c1:06:7d:b7:56:ef:b2:c7:5e:0f:5d:a6:
         b9:e7:1e:5a:65:15:5c:46:8f:96:eb:11:a8:19:57:b5:a1:10:
         3e:85:e8:61:58:88:98:c3:bf:17:0b:23:d8:a6:08:af:2e:47:
         19:7c:87:04:92:57:51:51:1c:fd:80:1c:cc:11:a3:63:17:1e:
         e3:fb:f5:33:ac:e2:f0:3b:79:76:da:57:22:d4:af:b9:4f:49:
         83:36:9b:19:a7:5a:bd:e6:d5:93:f0:64:7c:f9:64:86:fe:9f:
         ff:4a:10:b1:7b:86:d3:08:71:5b:cb:d3:35:d5:13:a0:e6:b0:
         46:fc:81:77:39:b3:1b:19:c7:0f:7a:35:22:58:2c:65:ec:46:
         bf:3e:99:c7:d7:8a:77:a3:c9:66:47:3e:a8:4e:10:b7:86:8b:
         eb:c6:20:e9:19:37:7b:2d:94:3c:4b:7b:7f:10:a9:18:c2:53:
         79:ba:ac:dd:4c:94:b4:61:39:a0:5b:45:b3:02:e9:c7:1b:6b:
         33:a4:6e:b0:6a:3e:e1:f5:ce:5e:29:ed:7d:fc:96:aa:32:a0:
         e4:5c:54:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 14:30:41 2026 by rpki-client