Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/57edd75e-10ef-3f34-b3ae-1736a99821e0.roa
File:                     57edd75e-10ef-3f34-b3ae-1736a99821e0.roa (raw, json)
Hash identifier:          8RlYGQ8FqQnGt122c8Jdm4jBtIaRLCiqicOLGYFo/TU=
Subject key identifier:   E4:C6:E1:1E:57:8E:61:2C:E4:26:90:36:8E:29:DE:D8:A7:E7:9D:A0
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584F51D2A01F8B2458D630DD4180
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/57edd75e-10ef-3f34-b3ae-1736a99821e0.roa
Signing time:             Mon 28 Sep 2026 01:00:12 +0000
ROA not before:           Mon 28 Sep 2026 01:00:12 +0000
ROA not after:            Sun 27 Dec 2026 02:00:12 +0000
asID:                     81
IP address blocks:        204.84.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:51:d2:a0:1f:8b:24:58:d6:30:dd:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Sep 28 01:00:12 2026 GMT
            Not After : Dec 27 02:00:12 2026 GMT
        Subject: CN=fb8174cc-dcd6-47fb-9496-dcacad78b1c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bf:b4:55:18:4c:25:b1:d9:ad:4c:81:e9:22:
                    c7:11:3e:f1:d6:29:d5:43:0e:96:6d:65:15:7a:60:
                    18:c5:b5:44:42:50:03:a2:2d:f4:9a:0c:da:b9:fc:
                    27:5e:5e:4d:d3:5a:e6:87:f7:40:dc:f1:0c:7c:bc:
                    86:e2:8f:7c:c4:fe:f4:86:39:ef:0a:62:2d:1d:23:
                    1e:de:c9:53:1a:a0:47:38:89:fa:85:d0:2a:77:60:
                    ba:8f:0a:5b:6d:7b:4f:86:9b:48:2f:8f:59:81:90:
                    d3:3e:17:d6:6d:a9:dd:82:91:43:d8:e8:a2:fc:b2:
                    ef:f7:12:b6:dc:33:20:d0:52:a3:21:6d:7e:7d:25:
                    b5:18:d8:27:dd:af:ac:a8:e0:d8:61:0a:93:df:e9:
                    40:49:bb:86:38:08:6f:67:90:11:89:ab:c8:be:f8:
                    0c:3a:fb:7a:57:0d:c1:e8:c7:f4:a8:5a:d9:0e:75:
                    bf:7c:2d:31:6a:09:1b:19:d7:03:35:f1:24:96:38:
                    33:dd:a1:f9:7f:5b:ae:80:49:00:e1:b1:fc:d8:6f:
                    57:e2:77:88:ae:8b:43:04:6f:6a:91:27:27:20:3d:
                    b1:b3:74:6e:d5:30:14:a2:e3:8c:f3:c7:ff:23:8f:
                    19:7a:e1:5d:54:51:9c:43:84:d1:90:d0:38:41:0d:
                    d8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C6:E1:1E:57:8E:61:2C:E4:26:90:36:8E:29:DE:D8:A7:E7:9D:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/57edd75e-10ef-3f34-b3ae-1736a99821e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.84.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:83:58:7d:d6:06:ef:c7:dd:a8:51:7e:d8:43:64:a8:01:e7:
         b4:a9:70:9d:5c:47:ce:7a:a8:6a:a7:eb:8e:85:2d:c8:e9:4c:
         ca:4b:20:df:db:9c:28:0d:5e:88:19:06:75:ce:01:59:1a:47:
         2a:69:53:41:fd:eb:77:68:c5:c6:db:11:30:df:68:d8:91:45:
         7b:c6:b0:60:50:66:d3:e4:42:df:0f:d6:50:45:b2:0c:53:ea:
         b7:3c:f9:0f:77:d2:82:d1:fe:41:df:4d:15:6d:88:26:13:75:
         ee:c5:36:4b:4c:d3:78:22:22:96:8e:e7:e7:93:07:cc:0d:f6:
         f7:88:dc:26:c4:e5:1c:c4:4a:c2:a3:0e:df:c3:04:3e:b8:1a:
         30:3d:55:b7:97:4e:be:90:5c:72:c5:b8:f8:d6:d3:b2:d4:61:
         dd:c6:41:d9:eb:ad:8d:3a:47:e3:f2:7d:cb:97:19:4d:54:87:
         05:70:de:c8:b8:2e:84:e3:c2:7c:ff:cf:a1:5a:fe:64:1f:67:
         1c:b0:4c:e3:14:14:c5:82:3c:11:6a:90:76:d7:3c:e6:89:09:
         88:89:95:c8:f3:ab:85:c8:be:e3:5f:53:fe:d8:a3:a5:8b:69:
         c6:f0:47:1b:81:da:2e:88:cf:1c:12:7b:98:e1:a0:ec:b2:8d:
         38:44:30:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 01:38:32 2026 by rpki-client