Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/22a1bef2-1f86-4bf5-9b8c-8dcc6c18ae82/1c93dd61-9eeb-31ee-be47-596c58b4945e.roa
File:                     1c93dd61-9eeb-31ee-be47-596c58b4945e.roa (raw, json)
Hash identifier:          MZB5KOzt784OEYIyChj1Kg3BDYK4uRa6V8jgbUbIako=
Subject key identifier:   B0:B9:7D:8E:FA:65:8D:DC:02:F8:AB:07:67:1B:85:2D:C8:7B:71:FB
Certificate issuer:       /CN=22a1bef2-1f86-4bf5-9b8c-8dcc6c18ae82
Certificate serial:       010D0C9F4328584F0B2F65B9CAC079EDD1241120
Authority key identifier: 47:E1:DB:9B:5B:F8:D4:E1:E8:DB:3D:8E:41:51:E9:C5:23:C4:E8:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/22a1bef2-1f86-4bf5-9b8c-8dcc6c18ae82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/22a1bef2-1f86-4bf5-9b8c-8dcc6c18ae82/1c93dd61-9eeb-31ee-be47-596c58b4945e.roa
Signing time:             Wed 02 Sep 2026 17:44:50 +0000
ROA not before:           Wed 02 Sep 2026 17:44:50 +0000
ROA not after:            Tue 01 Dec 2026 18:44:50 +0000
asID:                     29997
IP address blocks:        204.16.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/22a1bef2-1f86-4bf5-9b8c-8dcc6c18ae82/22a1bef2-1f86-4bf5-9b8c-8dcc6c18ae82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/22a1bef2-1f86-4bf5-9b8c-8dcc6c18ae82/22a1bef2-1f86-4bf5-9b8c-8dcc6c18ae82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/22a1bef2-1f86-4bf5-9b8c-8dcc6c18ae82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0b:2f:65:b9:ca:c0:79:ed:d1:24:11:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22a1bef2-1f86-4bf5-9b8c-8dcc6c18ae82
        Validity
            Not Before: Sep  2 17:44:50 2026 GMT
            Not After : Dec  1 18:44:50 2026 GMT
        Subject: CN=e9d41ed7-3200-4a70-ac4a-c5ba9a411ad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:1f:71:14:8a:fd:f1:54:6a:aa:e4:bd:9f:94:
                    df:9a:51:64:81:1a:f9:63:35:c8:5d:a6:40:f9:f5:
                    d2:82:ff:e2:db:2f:52:ce:02:53:c8:d8:0f:2d:f1:
                    f0:d0:22:47:81:7e:1e:8a:98:4b:b7:8c:0c:b6:99:
                    0c:69:08:80:e3:77:d5:80:f7:e0:17:b9:c8:83:3b:
                    f4:41:e8:e5:e4:40:2e:31:05:a0:e0:86:1c:18:ab:
                    c1:f5:3f:d2:4c:79:77:5d:48:f2:35:97:e4:cd:2e:
                    59:5a:6c:31:3f:5f:92:77:b0:d4:d8:5c:52:a2:27:
                    c5:20:40:f5:57:da:e4:8c:94:d7:1a:39:5f:ad:b2:
                    d6:0f:79:c6:ac:22:83:d0:82:27:5e:47:6e:43:2b:
                    a3:26:da:68:b0:63:7d:01:7c:20:06:0b:6c:76:1a:
                    c5:8b:12:f2:01:ec:d2:e0:4d:73:4b:61:51:d7:86:
                    94:d0:cc:3c:28:22:88:c1:18:8c:b8:7a:b8:f5:a7:
                    0b:71:86:2a:71:c9:05:3a:db:4a:05:f6:7c:f4:3c:
                    63:2a:b1:d6:9e:27:14:fc:0a:82:c6:f5:41:01:d0:
                    7f:80:16:a1:9c:82:d2:b4:c5:ed:fa:87:bf:5e:14:
                    27:74:01:c6:ca:6b:06:a5:6e:4c:a2:8b:a0:08:45:
                    95:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B9:7D:8E:FA:65:8D:DC:02:F8:AB:07:67:1B:85:2D:C8:7B:71:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/22a1bef2-1f86-4bf5-9b8c-8dcc6c18ae82/1c93dd61-9eeb-31ee-be47-596c58b4945e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/22a1bef2-1f86-4bf5-9b8c-8dcc6c18ae82/22a1bef2-1f86-4bf5-9b8c-8dcc6c18ae82.crl

            X509v3 Authority Key Identifier:
                keyid:47:E1:DB:9B:5B:F8:D4:E1:E8:DB:3D:8E:41:51:E9:C5:23:C4:E8:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/22a1bef2-1f86-4bf5-9b8c-8dcc6c18ae82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.16.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:19:4f:42:16:05:aa:cc:76:6f:6c:00:70:4c:45:d1:1d:87:
         e8:d9:88:5b:dd:3c:27:02:59:f5:fd:8c:22:d8:55:4b:8c:8d:
         0d:58:20:f8:24:7f:7b:56:d3:a4:91:8b:d9:ca:18:54:dc:90:
         9f:3e:c5:cd:28:be:2b:c2:d6:20:77:55:aa:ee:2f:be:d3:c6:
         61:1c:51:7d:d1:ae:8b:7f:62:f8:22:75:09:ec:e3:1a:d0:82:
         ac:68:c1:e0:9f:bf:78:b7:a9:f6:a8:2b:8f:4b:d8:23:dd:17:
         82:13:82:e9:09:26:0c:57:f0:c2:e9:e9:91:8b:98:e1:d7:41:
         28:8c:6f:84:c2:6d:59:c7:f5:37:e6:3d:2c:bd:22:bf:04:04:
         af:9d:db:9b:c9:3d:97:fe:13:f6:7d:57:b7:2a:8a:50:6d:4b:
         9b:50:8f:e4:70:ee:d7:2c:00:d8:bc:86:91:2e:e4:f7:20:cf:
         61:3b:59:ad:d7:86:01:8c:1c:ef:79:ec:14:ab:14:14:3e:36:
         2f:ea:ba:f7:1c:39:76:53:d2:c2:ed:9f:a9:fb:4d:2f:1a:b8:
         b9:e7:b1:e5:bb:44:1f:5a:46:7b:26:7f:97:02:7c:62:75:9d:
         3e:b0:06:04:40:f8:fd:c0:8c:a8:a0:4e:ea:17:45:46:f8:f2:
         c7:88:5d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:27:06 2026 by rpki-client