Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f952e113-8fae-44f8-9d98-a496f4e2fdc6/99b6768c-982a-3abf-aa3d-36ee5325e2f2.roa
File:                     99b6768c-982a-3abf-aa3d-36ee5325e2f2.roa (raw, json)
Hash identifier:          bTiL5SBFbCnA3jAK10AxmP7bwfi9T8T34JNQFhGPQGM=
Subject key identifier:   E4:23:3C:FB:2D:63:0B:81:7E:47:4E:4E:E1:CC:A7:CF:2C:28:64:B6
Certificate issuer:       /CN=f952e113-8fae-44f8-9d98-a496f4e2fdc6
Certificate serial:       010D0C9F4328584F15CCEE8F2EB5DCEFF3E00080
Authority key identifier: 6A:B0:45:6B:89:75:14:9C:61:DD:E1:81:6E:F1:23:F2:97:8A:E7:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f952e113-8fae-44f8-9d98-a496f4e2fdc6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f952e113-8fae-44f8-9d98-a496f4e2fdc6/99b6768c-982a-3abf-aa3d-36ee5325e2f2.roa
Signing time:             Sun 06 Sep 2026 13:00:12 +0000
ROA not before:           Sun 06 Sep 2026 13:00:12 +0000
ROA not after:            Sat 05 Dec 2026 14:00:12 +0000
asID:                     11714
IP address blocks:        205.202.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f952e113-8fae-44f8-9d98-a496f4e2fdc6/f952e113-8fae-44f8-9d98-a496f4e2fdc6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f952e113-8fae-44f8-9d98-a496f4e2fdc6/f952e113-8fae-44f8-9d98-a496f4e2fdc6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f952e113-8fae-44f8-9d98-a496f4e2fdc6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:15:cc:ee:8f:2e:b5:dc:ef:f3:e0:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952e113-8fae-44f8-9d98-a496f4e2fdc6
        Validity
            Not Before: Sep  6 13:00:12 2026 GMT
            Not After : Dec  5 14:00:12 2026 GMT
        Subject: CN=6ed7ed6b-7337-440a-a7ad-0b3d70d8d8b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:5a:fe:89:a7:6b:c2:1f:9d:3b:ef:a4:5f:8d:
                    9d:13:c0:3a:d8:d9:46:eb:a8:a3:7d:58:f4:af:98:
                    d6:1f:02:43:54:25:05:2d:48:89:f9:98:8f:bd:06:
                    10:d6:ac:d5:a6:38:af:55:e8:17:7b:e8:6d:f0:34:
                    8a:b8:81:76:09:54:4d:a1:c8:8d:c8:72:03:17:19:
                    6e:8a:a7:21:97:bd:dc:27:ed:97:73:49:1a:e1:40:
                    f9:00:44:06:b3:60:33:5b:32:ad:21:fb:3b:bf:87:
                    30:5a:5d:1e:51:d5:1e:81:92:e2:36:2d:fe:d7:82:
                    43:e9:db:98:b5:7d:f5:a8:11:3e:a4:d3:01:01:35:
                    48:5d:86:77:29:81:20:5c:f2:ae:97:9b:81:33:a9:
                    c2:52:4d:63:99:56:96:51:ff:8b:f7:19:4e:ad:21:
                    4c:bc:16:29:f6:6a:bb:25:9e:d9:ec:6a:3a:b8:c4:
                    9f:7b:5e:53:23:26:b6:72:1f:4e:61:05:ec:dd:7b:
                    76:ba:59:64:75:4a:73:12:9b:71:62:2c:09:24:7a:
                    54:b6:d7:e5:c6:f3:98:8b:95:ac:d3:6a:0d:07:7b:
                    48:02:92:b8:37:97:7e:63:1f:ca:b4:ff:49:6a:0d:
                    96:78:73:b4:e5:b4:82:2c:a9:66:10:98:ba:4f:99:
                    24:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:23:3C:FB:2D:63:0B:81:7E:47:4E:4E:E1:CC:A7:CF:2C:28:64:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f952e113-8fae-44f8-9d98-a496f4e2fdc6/99b6768c-982a-3abf-aa3d-36ee5325e2f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f952e113-8fae-44f8-9d98-a496f4e2fdc6/f952e113-8fae-44f8-9d98-a496f4e2fdc6.crl

            X509v3 Authority Key Identifier:
                keyid:6A:B0:45:6B:89:75:14:9C:61:DD:E1:81:6E:F1:23:F2:97:8A:E7:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f952e113-8fae-44f8-9d98-a496f4e2fdc6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.202.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:6c:66:eb:72:d5:80:af:48:07:a4:0d:00:eb:bd:06:4a:35:
         cc:c6:1e:f7:b2:91:97:7f:90:74:a4:48:9b:c1:f8:5e:6a:8f:
         8b:5f:2f:4f:63:d0:25:3a:da:bd:ae:20:a2:05:0c:45:58:92:
         e0:de:38:06:fa:15:77:ec:e0:f2:e6:3a:f5:43:07:d4:47:a7:
         d4:fd:e8:32:6e:9c:14:a9:14:ab:19:23:39:07:ca:f1:c6:99:
         00:96:b4:63:82:19:61:b2:71:0e:4d:65:89:a2:63:eb:39:73:
         7b:48:fc:01:10:6e:5f:2d:4b:a5:e6:b3:12:6a:cf:5f:38:32:
         0d:d4:e2:62:55:4c:56:a1:f3:4d:94:6c:3b:c0:61:ea:2f:5b:
         13:63:17:09:de:d3:38:bb:51:db:70:ef:1a:cd:9f:95:0c:38:
         5b:0c:61:ba:e8:f7:ec:e0:a8:0a:cb:ff:ee:77:e8:62:fb:01:
         aa:9e:68:81:fc:db:9b:cf:5f:d9:bd:2f:b0:c5:8d:7d:29:b1:
         bc:e5:6c:63:1c:e1:b4:40:4a:56:63:f8:7c:f9:49:2b:f4:bb:
         bd:23:5e:26:49:9f:00:ce:45:b2:a6:da:a8:78:d7:71:a8:1c:
         48:b3:fa:91:69:52:3f:d7:c5:04:28:ee:14:44:05:f1:5e:19:
         48:a6:f4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:35:31 2026 by rpki-client