Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7572dc10-0f90-44cf-ad9d-a07f934047c2/7d6bd850-7cae-3d0e-a6fe-8e4114ebb12d.roa
File:                     7d6bd850-7cae-3d0e-a6fe-8e4114ebb12d.roa (raw, json)
Hash identifier:          Qog7EqME+WeawYAWQKPkBhzQ74D9tY+gli9zG65y+To=
Subject key identifier:   65:CC:BC:05:AF:6D:FF:9C:D4:B9:A8:38:44:A3:3A:A0:4C:D5:2D:6E
Certificate issuer:       /CN=7572dc10-0f90-44cf-ad9d-a07f934047c2
Certificate serial:       010D0C9F4328584ED001DC8C07FC7656CA0378C0
Authority key identifier: C1:68:53:EB:8B:92:E4:61:7F:25:BA:97:53:4E:16:1C:86:6E:E8:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7572dc10-0f90-44cf-ad9d-a07f934047c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7572dc10-0f90-44cf-ad9d-a07f934047c2/7d6bd850-7cae-3d0e-a6fe-8e4114ebb12d.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     55222
IP address blocks:        206.28.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7572dc10-0f90-44cf-ad9d-a07f934047c2/7572dc10-0f90-44cf-ad9d-a07f934047c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7572dc10-0f90-44cf-ad9d-a07f934047c2/7572dc10-0f90-44cf-ad9d-a07f934047c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7572dc10-0f90-44cf-ad9d-a07f934047c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:dc:8c:07:fc:76:56:ca:03:78:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7572dc10-0f90-44cf-ad9d-a07f934047c2
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=94dea08b-e13e-43f0-aef8-540250f1e2cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:02:0a:fd:76:fa:db:02:5a:0e:68:75:a9:8e:
                    3f:1b:88:90:ee:ba:22:80:b4:59:d2:00:37:6d:32:
                    ed:86:45:aa:27:67:89:ac:a2:17:2d:cd:7e:a3:24:
                    c3:c8:4f:a5:c7:40:1e:ba:25:91:4b:b3:2a:b3:95:
                    a4:20:b6:e8:6b:f4:62:5d:ba:b4:be:aa:88:f3:4a:
                    6f:24:4e:c9:45:af:7a:17:a4:36:f1:59:68:2c:6a:
                    77:dd:b8:68:fe:aa:ed:a4:35:b1:f4:77:a0:07:4c:
                    52:d6:6b:92:a9:f6:6b:00:38:57:7d:dc:38:66:f0:
                    6d:3c:22:f2:7f:42:df:03:f6:4c:ed:d3:34:ae:93:
                    e4:2e:1d:ed:46:3e:e2:5b:08:4b:50:67:58:b9:c8:
                    29:ac:ab:28:c2:05:61:eb:3c:ea:b5:fd:8d:20:bc:
                    64:58:16:bb:75:56:8f:63:38:9c:69:b3:41:69:4d:
                    f7:a9:d2:99:aa:fa:89:33:da:24:de:87:6a:11:01:
                    94:2b:b5:29:d9:af:0f:35:51:e0:4f:6d:be:6d:5e:
                    d0:07:9a:66:04:b9:23:41:5f:bf:c6:dd:65:4f:b6:
                    c7:9f:58:07:05:c8:bc:c8:43:cd:61:33:3f:e0:6c:
                    b0:0b:09:c7:c2:c4:5d:59:fd:fb:73:3f:5f:6c:2d:
                    c2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:CC:BC:05:AF:6D:FF:9C:D4:B9:A8:38:44:A3:3A:A0:4C:D5:2D:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7572dc10-0f90-44cf-ad9d-a07f934047c2/7d6bd850-7cae-3d0e-a6fe-8e4114ebb12d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7572dc10-0f90-44cf-ad9d-a07f934047c2/7572dc10-0f90-44cf-ad9d-a07f934047c2.crl

            X509v3 Authority Key Identifier:
                keyid:C1:68:53:EB:8B:92:E4:61:7F:25:BA:97:53:4E:16:1C:86:6E:E8:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7572dc10-0f90-44cf-ad9d-a07f934047c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.28.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:64:15:50:c0:71:92:f4:56:c6:2a:b1:73:83:23:05:72:60:
         1b:cd:55:da:b9:5a:18:13:c6:85:3d:76:bf:85:7a:0c:97:e8:
         df:dd:3c:0a:7c:77:f1:06:2f:21:b2:50:30:f7:2c:96:cd:6f:
         ff:47:9c:68:ed:f5:78:16:aa:ac:45:7a:a4:6c:cb:31:6e:31:
         4d:f4:c0:72:da:aa:5d:38:5e:32:4d:cd:31:60:6a:2e:5b:8b:
         43:5b:7b:69:fe:4f:07:7e:4b:31:71:1d:e2:17:61:1b:38:7d:
         02:61:42:a9:5a:05:7a:99:88:23:b8:b8:3e:2d:2f:d3:b8:21:
         e8:b1:05:dd:84:47:a6:ae:a7:46:05:35:c1:35:ed:78:b8:8d:
         ac:7c:5a:6f:97:9c:92:46:4c:7e:57:8e:be:4f:15:cc:b1:46:
         4a:eb:ec:f1:45:7e:e9:a5:bf:08:07:7b:b5:6b:82:0b:39:06:
         dc:96:0d:cd:3c:2a:55:fa:3a:60:37:45:3b:74:ac:6e:68:8e:
         2e:f8:db:90:e7:d8:d3:43:ee:7f:39:f9:1b:71:f0:4b:80:43:
         71:89:1c:45:a4:b8:50:ed:42:51:b4:ae:9b:e1:66:1c:d2:a1:
         69:8c:e1:b7:bf:92:d3:74:21:f5:3b:18:5d:3f:53:54:3f:30:
         35:6c:d6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 05:44:41 2026 by rpki-client