Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1800ff78-68d8-4b96-898c-955f1a97d2f5/2c6b3dbe-65ff-38a8-8656-d90f1fe7a692.roa
File:                     2c6b3dbe-65ff-38a8-8656-d90f1fe7a692.roa (raw, json)
Hash identifier:          5PVCyZZsAss8B/lD1G5uwisPdYAqvQhliYlBHbRQ/qE=
Subject key identifier:   56:E5:EB:A8:0C:A5:2B:8A:6F:75:7E:57:CC:73:58:85:71:2D:FF:E2
Certificate issuer:       /CN=1800ff78-68d8-4b96-898c-955f1a97d2f5
Certificate serial:       010D0C9F4328584EF87CB2250E3AD04238818590
Authority key identifier: 57:9C:3F:BA:4A:39:48:DC:1A:5C:60:43:5F:48:7A:EF:51:9C:E9:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1800ff78-68d8-4b96-898c-955f1a97d2f5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1800ff78-68d8-4b96-898c-955f1a97d2f5/2c6b3dbe-65ff-38a8-8656-d90f1fe7a692.roa
Signing time:             Thu 27 Aug 2026 01:00:12 +0000
ROA not before:           Thu 27 Aug 2026 01:00:12 +0000
ROA not after:            Wed 25 Nov 2026 02:00:12 +0000
asID:                     53863
IP address blocks:        142.202.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1800ff78-68d8-4b96-898c-955f1a97d2f5/1800ff78-68d8-4b96-898c-955f1a97d2f5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1800ff78-68d8-4b96-898c-955f1a97d2f5/1800ff78-68d8-4b96-898c-955f1a97d2f5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1800ff78-68d8-4b96-898c-955f1a97d2f5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f8:7c:b2:25:0e:3a:d0:42:38:81:85:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1800ff78-68d8-4b96-898c-955f1a97d2f5
        Validity
            Not Before: Aug 27 01:00:12 2026 GMT
            Not After : Nov 25 02:00:12 2026 GMT
        Subject: CN=dbd21db4-32f5-4d04-be9b-af6a202e5e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:73:c4:99:40:82:a3:7e:f8:e6:22:91:a8:9a:
                    32:ab:0b:fe:56:5d:b2:a1:0d:9c:c6:cc:9a:96:d8:
                    06:5d:c8:7d:64:b3:d8:48:99:e9:db:05:d5:35:b4:
                    62:6f:3c:ad:47:a2:21:e9:78:23:96:d5:0c:f7:a5:
                    37:a6:f8:ed:04:da:84:e5:4d:51:12:6a:54:a0:2c:
                    58:d1:27:03:c2:1b:d0:1a:61:d3:4b:3a:16:c1:31:
                    e8:34:47:f9:33:e8:ce:9e:9d:29:9c:27:96:65:bf:
                    d7:c9:02:2a:c5:ae:cc:ae:2a:83:a0:29:53:fb:95:
                    c0:08:f6:aa:73:9a:60:b4:00:04:cd:4b:61:aa:ae:
                    f1:17:da:e6:f9:0a:3b:0b:5e:4e:7d:41:9b:52:a7:
                    9f:6e:79:81:e6:72:5e:4d:17:0e:ce:a7:7f:4b:1c:
                    f2:b0:e1:bd:00:01:90:73:f0:c6:e0:e7:dd:df:11:
                    b9:29:08:d1:e6:01:18:3d:16:8e:f3:4c:b0:2e:d2:
                    28:09:df:68:cf:2b:1a:4a:63:6a:30:9e:a6:38:5e:
                    f2:d6:f8:a7:59:29:ee:60:73:54:a3:15:02:41:1c:
                    f0:5a:37:0d:d0:a1:09:86:04:6a:aa:4b:59:f6:3c:
                    42:5b:ac:c0:b3:cd:41:03:70:d2:af:88:50:74:f4:
                    52:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E5:EB:A8:0C:A5:2B:8A:6F:75:7E:57:CC:73:58:85:71:2D:FF:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1800ff78-68d8-4b96-898c-955f1a97d2f5/2c6b3dbe-65ff-38a8-8656-d90f1fe7a692.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1800ff78-68d8-4b96-898c-955f1a97d2f5/1800ff78-68d8-4b96-898c-955f1a97d2f5.crl

            X509v3 Authority Key Identifier:
                keyid:57:9C:3F:BA:4A:39:48:DC:1A:5C:60:43:5F:48:7A:EF:51:9C:E9:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1800ff78-68d8-4b96-898c-955f1a97d2f5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:ff:9b:24:1e:af:28:20:b5:58:34:b9:df:7f:9e:04:63:22:
         a8:53:4f:40:f6:eb:99:e9:38:b3:11:bb:5e:6b:87:12:40:5c:
         62:21:e9:de:d0:c8:37:57:de:fd:6f:ee:62:22:f5:0c:ea:06:
         53:25:eb:ba:df:e4:7b:ae:ac:03:1c:5d:f6:e6:71:47:02:39:
         bb:b0:bf:22:23:3d:c1:9c:73:b8:ef:55:dd:4d:88:a0:82:9f:
         cb:e7:c6:79:46:e5:aa:c4:c1:1e:90:cf:4b:9f:a0:aa:6f:6f:
         75:8c:f7:de:d5:78:41:8d:eb:6d:35:a3:1f:11:64:71:ca:e1:
         f8:3f:e1:66:d6:a6:a3:38:e1:ca:2b:fe:21:66:c1:99:93:7a:
         f9:74:49:a8:21:25:ff:6a:39:ec:6c:70:7e:0e:6f:3c:40:f5:
         0b:57:f0:c4:87:55:17:74:71:24:73:6b:e9:43:e2:94:00:21:
         5f:14:e7:29:aa:af:b1:b1:e4:6d:44:7b:98:36:25:63:de:6d:
         42:67:0e:63:88:09:36:73:e1:2a:80:fb:8d:e0:25:01:94:1f:
         6a:36:95:b2:d7:18:14:5d:b9:04:8b:35:b7:06:ce:d8:01:a1:
         e2:e7:d3:b5:4b:8f:42:54:8e:34:f9:7f:53:d2:3d:08:88:47:
         b2:8d:ef:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:58:55 2026 by rpki-client