Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85faca83-186c-473a-88cc-290a53538b08/669c2b40-1aaa-3262-8b3d-35880181fecc.roa
File:                     669c2b40-1aaa-3262-8b3d-35880181fecc.roa (raw, json)
Hash identifier:          NkGmg2T0Nzp+2cNZ3ko+SvRcMfACDqpvyvuB6ZsMHu0=
Subject key identifier:   05:9F:78:1A:AA:FC:E7:2D:50:FF:DC:B3:B4:60:3F:A5:DF:8B:A0:52
Certificate issuer:       /CN=85faca83-186c-473a-88cc-290a53538b08
Certificate serial:       010D0C9F4328584F0D6CFBCC40CE8A69B403C740
Authority key identifier: 2B:06:F7:85:C5:E3:D4:4A:F0:DA:07:82:22:97:1E:1F:40:6D:99:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85faca83-186c-473a-88cc-290a53538b08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85faca83-186c-473a-88cc-290a53538b08/669c2b40-1aaa-3262-8b3d-35880181fecc.roa
Signing time:             Thu 03 Sep 2026 13:00:12 +0000
ROA not before:           Thu 03 Sep 2026 13:00:12 +0000
ROA not after:            Wed 02 Dec 2026 14:00:12 +0000
asID:                     20295
IP address blocks:        199.6.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85faca83-186c-473a-88cc-290a53538b08/85faca83-186c-473a-88cc-290a53538b08.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85faca83-186c-473a-88cc-290a53538b08/85faca83-186c-473a-88cc-290a53538b08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85faca83-186c-473a-88cc-290a53538b08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:6c:fb:cc:40:ce:8a:69:b4:03:c7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85faca83-186c-473a-88cc-290a53538b08
        Validity
            Not Before: Sep  3 13:00:12 2026 GMT
            Not After : Dec  2 14:00:12 2026 GMT
        Subject: CN=a6a4ce86-149a-46b6-9334-78147d33f816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:80:a9:fd:e4:9a:a1:0a:a8:00:23:1a:1e:e2:
                    2d:39:d2:2f:ed:1e:29:5a:f0:cb:0f:b2:e6:cc:b7:
                    87:e1:b7:07:df:19:6b:86:78:06:21:be:53:1e:4a:
                    f6:78:be:08:4c:1e:b0:2a:be:db:63:a6:8e:e6:81:
                    c8:12:cf:5e:04:7e:28:d2:66:63:ae:ef:8c:21:85:
                    e4:ec:3e:72:22:19:8d:8f:30:7f:0c:aa:10:37:36:
                    95:9a:5e:b5:5d:e6:65:0b:0e:57:d8:02:1d:f8:b0:
                    80:ca:2e:69:48:e1:3b:37:4b:40:8c:1d:07:ce:95:
                    f0:a1:b9:d3:36:71:c4:1d:29:01:66:2a:d4:f7:0b:
                    e4:ff:db:5a:5f:d7:cb:86:31:27:19:69:b1:3a:42:
                    ec:81:cf:6c:48:6b:63:a4:11:a0:87:24:53:52:3e:
                    2a:2c:c4:32:7d:d2:bc:7f:af:74:6b:76:7e:37:d6:
                    fe:8e:be:d0:a8:59:3c:43:e2:73:54:63:03:6c:7d:
                    10:eb:ff:72:c6:e7:2b:92:84:9c:a4:45:3b:43:a2:
                    d9:46:a1:f2:6e:26:b7:32:85:eb:85:ea:c5:d9:bd:
                    75:58:49:c1:d5:2f:0f:2a:58:7c:37:9d:e4:1f:35:
                    97:42:74:65:3e:8f:7a:50:7d:4a:d1:97:e7:ca:3e:
                    54:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:9F:78:1A:AA:FC:E7:2D:50:FF:DC:B3:B4:60:3F:A5:DF:8B:A0:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85faca83-186c-473a-88cc-290a53538b08/669c2b40-1aaa-3262-8b3d-35880181fecc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85faca83-186c-473a-88cc-290a53538b08/85faca83-186c-473a-88cc-290a53538b08.crl

            X509v3 Authority Key Identifier:
                keyid:2B:06:F7:85:C5:E3:D4:4A:F0:DA:07:82:22:97:1E:1F:40:6D:99:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85faca83-186c-473a-88cc-290a53538b08.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.6.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:ff:b4:7d:89:53:c6:f4:0e:51:e7:85:cc:d7:59:16:c7:45:
         80:96:93:e3:28:c9:11:da:14:4c:69:25:6f:d2:96:63:e2:ad:
         73:e4:0b:69:6e:c9:a4:5c:17:38:dc:cd:6a:08:03:e5:0c:07:
         d2:c7:56:b3:4e:71:48:66:c7:84:ff:a7:ec:0c:c5:09:13:07:
         6e:76:03:82:6e:e2:6c:78:1f:c0:ec:6e:47:fb:f9:e6:f5:60:
         2f:ee:e9:99:92:33:64:37:57:a2:44:22:6f:ca:c5:41:3a:76:
         43:0b:69:08:0a:ea:b9:53:16:11:34:34:e9:7d:fc:11:7a:b9:
         bf:82:1b:67:c9:63:3b:45:b6:d4:65:47:86:9c:76:6c:6c:3b:
         43:13:e3:57:a9:fd:21:4c:10:90:c5:d2:eb:06:4c:66:3a:3d:
         5d:9e:77:bf:99:a4:4c:00:d4:24:b4:e3:9f:08:9f:b7:16:6e:
         97:5f:d3:c9:b8:76:09:30:7e:07:34:32:da:a9:b6:5a:f3:f1:
         bd:fd:d8:9d:71:ec:58:9b:6e:f5:9e:b5:61:b6:26:1c:07:2b:
         45:68:42:df:04:79:1e:5f:3d:6d:5b:ad:fd:a9:4b:84:b6:75:
         bf:70:4f:0e:b9:2f:b4:3e:d8:6a:19:80:a3:db:af:ba:c9:e5:
         bf:dd:9c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:51:15 2026 by rpki-client