Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fcd8eeb1-df7b-35e2-ab72-7f8b903d60b9.roa
File:                     fcd8eeb1-df7b-35e2-ab72-7f8b903d60b9.roa (raw, json)
Hash identifier:          YWEt2UA3y/9xDrlpX9+Kgg3NMortG4dFucwPI/vjHCA=
Subject key identifier:   8F:CA:FB:96:35:94:24:3A:41:60:2B:13:A5:77:64:0D:57:B0:92:11
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F067296B265E268EFC2B3CF00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fcd8eeb1-df7b-35e2-ab72-7f8b903d60b9.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     7122
IP address blocks:        206.45.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:96:b2:65:e2:68:ef:c2:b3:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=22c8c399-2aa1-4361-81ea-2249b28942d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:cd:aa:fd:26:f2:80:d6:d0:8c:14:c3:d9:18:
                    ee:be:d0:6c:1e:b1:99:21:99:fd:4e:c2:04:ac:09:
                    78:a5:86:da:b6:32:c3:e5:0d:81:5f:10:f0:66:32:
                    bb:ca:ad:de:3e:b2:38:9b:d4:7e:d8:df:9c:5c:1a:
                    3e:e4:1d:36:85:25:25:57:05:00:80:f1:7f:63:79:
                    27:ba:4d:41:8f:33:ca:04:6b:d3:dc:e7:50:2c:c0:
                    c4:b7:4f:ec:fa:90:a5:65:02:0c:71:3e:b0:d7:6c:
                    85:5a:49:22:a0:d8:f4:f7:35:9c:a3:e9:b6:d0:b2:
                    e5:bd:65:4d:50:0a:e9:e1:a5:bb:c0:a2:b0:01:c8:
                    2b:46:3a:3a:77:9f:6c:c3:d9:13:ad:e2:d0:49:d4:
                    e8:22:92:21:34:0a:db:e4:ea:14:5a:c3:83:08:88:
                    b2:7f:48:4e:e9:17:2a:09:58:84:a0:85:50:5e:f3:
                    ea:0b:e7:22:3e:27:35:2a:58:2d:65:ba:e5:a9:14:
                    8c:e6:c9:82:39:3b:c1:4f:75:47:14:b0:2e:1e:e4:
                    2f:3d:43:dc:38:d5:fb:f8:0b:3e:64:ce:19:c1:e0:
                    55:81:aa:4e:9c:d8:1c:51:9f:da:ef:8b:95:f9:e6:
                    ca:b3:9f:76:0b:e3:c9:44:43:b2:65:6b:e7:ff:8a:
                    f4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:CA:FB:96:35:94:24:3A:41:60:2B:13:A5:77:64:0D:57:B0:92:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fcd8eeb1-df7b-35e2-ab72-7f8b903d60b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.45.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:a2:4d:36:63:63:e2:d2:fe:fe:73:60:69:ac:ca:ed:f2:5d:
         8b:5c:59:e6:1b:f2:7f:11:91:7a:76:e7:07:a4:b4:b6:c7:ff:
         96:0a:f5:24:42:d9:82:e4:f1:d0:6c:0e:fa:70:13:83:e7:b6:
         dc:09:93:65:ba:20:e2:30:38:df:63:81:2b:ea:68:24:cc:57:
         78:62:ab:07:34:e0:9f:ba:2f:31:bd:b4:e0:d0:00:ab:d3:df:
         81:08:f3:81:56:f6:77:39:a8:22:03:cd:d2:bf:13:f9:35:01:
         01:12:24:35:90:fc:e6:a6:2a:91:83:d5:8b:5b:0e:16:a4:7d:
         9e:8b:08:f0:e9:69:0e:07:47:bf:c2:4e:8c:d5:ae:1d:f6:b1:
         94:b2:fc:3c:e6:d6:c0:ed:8f:92:e0:09:82:61:a2:a0:cb:0e:
         d5:00:18:1d:d0:79:bf:ef:27:d5:0c:b0:f9:12:d4:f0:e3:49:
         f5:a6:55:86:e2:19:5a:64:f3:70:50:39:bd:ff:53:1c:48:36:
         c6:4d:9d:58:18:72:da:16:d4:64:cd:e6:96:dc:e6:5d:5e:45:
         0c:a5:b5:5d:07:cf:98:e2:68:0f:b6:f8:bf:ec:8b:93:d8:8c:
         dd:19:bd:c4:8f:24:00:de:62:a8:ee:b8:24:a8:ea:2b:50:f3:
         fa:b8:5a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 11:35:49 2026 by rpki-client