Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/d697481b-b5bb-3b5f-9891-cd312665a38a.roa
File:                     d697481b-b5bb-3b5f-9891-cd312665a38a.roa (raw, json)
Hash identifier:          LSw/cq/+Gn1rXov4FiPWb4+CFdWG9nV7E11Q/LlRid0=
Subject key identifier:   3A:8B:5A:DC:35:2F:40:4B:5F:82:1E:E3:E1:39:ED:7B:AD:B9:FA:38
Certificate issuer:       /CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8
Certificate serial:       010D0C9F4328584F34813829FD76CA6CC2ACE380
Authority key identifier: A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/d697481b-b5bb-3b5f-9891-cd312665a38a.roa
Signing time:             Thu 17 Sep 2026 12:57:51 +0000
ROA not before:           Thu 17 Sep 2026 12:57:51 +0000
ROA not after:            Wed 16 Dec 2026 13:57:51 +0000
asID:                     0
IP address blocks:        206.80.239.0/24 maxlen: 24
                          2001:504:37:20::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:34:81:38:29:fd:76:ca:6c:c2:ac:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8
        Validity
            Not Before: Sep 17 12:57:51 2026 GMT
            Not After : Dec 16 13:57:51 2026 GMT
        Subject: CN=79dd9436-a1c0-461a-9f85-185397d6ad85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:33:b0:79:16:d6:b7:a9:f0:b6:cd:91:07:4f:
                    b4:04:9f:74:ad:d5:12:3f:20:f4:21:9b:a5:b8:0c:
                    18:39:7d:8c:cb:24:81:d5:d8:90:fc:80:08:cf:8f:
                    74:54:15:68:18:aa:12:de:cd:06:32:32:ca:53:1e:
                    db:8c:ad:47:77:91:41:83:c8:88:67:0a:f2:ad:a4:
                    2e:97:f2:43:ad:4d:d6:95:86:ce:0e:4a:52:44:b3:
                    c5:4b:a7:0f:38:56:3a:50:e0:a5:71:37:af:be:0b:
                    f5:65:86:a1:a9:ba:e0:48:0c:7b:0d:83:88:3a:c5:
                    fe:f7:a3:44:65:71:29:f0:62:d7:c7:b1:e0:b1:e7:
                    23:14:0a:96:6a:f6:18:41:e8:2e:3f:4f:10:b5:b0:
                    7b:8f:72:4f:8d:5e:9b:df:02:9a:ee:bb:fd:c0:83:
                    93:a2:22:1b:11:c4:0e:e0:ae:27:3d:5f:81:96:44:
                    9c:e5:f0:33:33:1e:07:4e:15:ec:75:26:0d:87:6b:
                    61:54:fe:44:32:81:51:6f:90:7f:9e:3f:21:c2:66:
                    36:ca:fe:40:12:22:63:f0:0c:ab:b3:07:43:9c:9a:
                    68:4a:05:46:8a:4c:19:17:95:5e:80:e6:27:e9:f1:
                    38:75:e0:47:65:1c:d0:5d:64:8d:d9:01:fc:ba:ea:
                    87:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:8B:5A:DC:35:2F:40:4B:5F:82:1E:E3:E1:39:ED:7B:AD:B9:FA:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/d697481b-b5bb-3b5f-9891-cd312665a38a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl

            X509v3 Authority Key Identifier:
                keyid:A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.80.239.0/24
                IPv6:
                  2001:504:37:20::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:b0:bb:6e:e0:02:67:d8:d4:44:4a:a8:38:30:03:cb:48:a6:
         db:35:f5:f6:2e:6c:d0:4b:1a:50:9b:f2:12:b4:21:a0:c3:f9:
         58:64:ab:40:b7:04:a5:c0:e3:7b:30:b3:f5:5e:ea:7f:ae:58:
         df:43:cb:b3:4b:e5:0c:16:2c:46:ec:2f:46:3a:3e:fe:db:8f:
         c6:8d:c4:52:8a:0b:ab:77:13:11:71:56:da:7f:a3:db:4a:a6:
         36:ae:85:07:15:a8:7d:68:65:cc:50:2a:c0:ea:7c:bb:ad:9c:
         57:4a:c1:50:54:66:e5:42:43:8d:e0:4f:74:18:8e:ef:7a:4f:
         99:a4:f9:02:67:b7:03:e7:2f:d2:a7:11:6b:ad:ea:2a:c9:1a:
         9a:a3:04:e0:f1:7e:f2:53:fa:71:fe:6a:e0:d3:65:6e:24:f0:
         8d:8d:39:50:c9:40:67:e6:18:cb:29:ec:f9:45:99:75:85:dc:
         a6:bd:df:b3:52:07:34:1f:f6:5d:f3:47:b3:88:14:dc:8c:11:
         b6:93:ad:96:78:af:2f:ec:da:f8:03:a9:a6:29:cb:1e:4f:41:
         4e:3e:4f:0b:17:0e:65:4b:7d:b2:73:8b:99:7e:ac:1a:3a:90:
         ba:43:9e:46:1b:62:97:95:08:ae:8a:cd:54:b3:4e:7a:f8:2a:
         f9:a1:85:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:12:35 2026 by rpki-client