Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/91fa3f7f-9f28-3835-a2a7-45df52217cfd.roa
File:                     91fa3f7f-9f28-3835-a2a7-45df52217cfd.roa (raw, json)
Hash identifier:          i8ngK61UNj78MYrsFhY+gxsMEhnAlsy5DtkTvqjpt1Y=
Subject key identifier:   9D:ED:BF:85:46:B4:33:E5:28:E2:CF:92:D9:F7:1B:5D:B8:AF:F1:09
Certificate issuer:       /CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d
Certificate serial:       010D0C9F4328584F3CE29D20ABB5E59E3FB4D680
Authority key identifier: BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/91fa3f7f-9f28-3835-a2a7-45df52217cfd.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     33362
IP address blocks:        198.174.212.0/23 maxlen: 24
                          198.174.214.0/23 maxlen: 24
                          204.221.17.0/24 maxlen: 24
                          204.221.18.0/23 maxlen: 24
                          204.221.144.0/22 maxlen: 24
                          206.9.80.0/24 maxlen: 24
                          206.145.178.0/23 maxlen: 24
                          206.145.224.0/23 maxlen: 24
                          206.146.48.0/22 maxlen: 24
                          209.32.64.0/21 maxlen: 24
                          209.32.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:9d:20:ab:b5:e5:9e:3f:b4:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=70ab2ad6-f8f9-4112-9645-48c83faa1c15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:5b:09:bc:db:01:c8:14:fe:af:57:e8:f2:75:
                    a1:c9:ee:7e:1b:fc:5d:7e:d7:16:04:36:e5:4f:ca:
                    92:17:3e:03:58:90:ce:ad:84:18:b3:c7:3e:e5:bb:
                    04:a5:33:71:05:db:d4:1e:f0:7c:bf:d6:1b:2e:01:
                    cf:61:8a:22:c2:c6:a8:5f:cd:53:8f:79:48:3c:46:
                    c8:14:26:bf:5e:29:82:7f:2c:c1:94:7e:85:8b:d4:
                    4b:12:63:53:f8:22:84:a7:73:f7:78:ce:c0:2d:bf:
                    a7:d4:49:16:51:36:94:b2:83:99:b0:10:54:29:be:
                    4c:0d:4e:83:05:28:8b:c2:34:db:e4:27:28:4d:db:
                    26:75:11:d1:6a:ed:8e:21:29:43:6e:27:26:0e:fb:
                    9a:fb:bb:bb:df:72:84:07:1f:f2:86:cc:83:09:8f:
                    92:87:19:cd:86:8a:54:33:14:cb:26:af:95:ad:d6:
                    0d:8a:f5:02:80:f5:76:dd:95:8a:7b:4c:71:82:be:
                    08:21:c4:5a:f4:ab:fc:a2:ef:e8:ad:0d:4a:57:fc:
                    b2:b6:0a:42:3b:6a:5f:c4:c3:9f:51:41:88:bc:88:
                    25:e0:cb:f6:f4:1d:83:7b:e2:bd:1b:4e:82:76:93:
                    47:5a:1b:3b:37:46:0a:d6:38:06:e1:78:a4:63:27:
                    aa:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:ED:BF:85:46:B4:33:E5:28:E2:CF:92:D9:F7:1B:5D:B8:AF:F1:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/91fa3f7f-9f28-3835-a2a7-45df52217cfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl

            X509v3 Authority Key Identifier:
                keyid:BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.174.212.0/22
                  204.221.17.0-204.221.19.255
                  204.221.144.0/22
                  206.9.80.0/24
                  206.145.178.0/23
                  206.145.224.0/23
                  206.146.48.0/22
                  209.32.64.0/21
                  209.32.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:b8:c1:d2:ea:85:5b:c5:ab:88:38:d8:64:ca:a6:c3:a9:37:
         55:c4:c4:dc:6c:d9:89:de:e5:ed:35:69:ee:b5:7a:7e:81:8f:
         03:76:a1:91:bd:e5:d3:96:bd:23:a7:10:a6:ff:8a:35:20:c2:
         b1:1e:39:99:23:58:61:d7:2f:36:da:a0:17:59:48:b2:ba:31:
         4a:7c:bd:3e:38:50:3d:b4:1f:4f:d8:ca:a7:b6:44:57:23:2c:
         a9:30:b4:65:47:9a:50:2c:58:2b:1b:88:4d:2a:05:6b:0e:3d:
         c8:e6:ad:e8:6b:7e:da:4f:9f:0b:76:8f:c9:9f:65:a9:8e:25:
         2f:c3:4c:23:59:3f:c7:c6:1f:ec:84:7f:36:56:b4:62:6c:98:
         23:a1:d0:2d:c1:c6:dc:e2:51:f7:e3:68:43:0a:f2:41:e6:f1:
         d0:f8:01:56:97:44:22:6b:e5:87:4d:2d:e9:0a:7a:4e:75:26:
         9d:f3:82:c2:ca:97:c0:e7:af:77:c3:74:99:08:0a:7e:4c:d4:
         14:4a:2a:d1:d7:f5:47:ba:48:ee:59:6f:3c:22:0b:6c:65:ef:
         51:fe:ad:da:18:01:84:8c:9b:75:12:e1:1c:55:3a:a0:47:63:
         43:06:25:63:cb:21:0d:ef:75:9f:ce:4c:a4:87:64:e2:c8:85:
         f6:1d:2b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:14:00 2026 by rpki-client