Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/6efd4229-5e7f-3dea-9b7c-81d9f27635a4.roa
File:                     6efd4229-5e7f-3dea-9b7c-81d9f27635a4.roa (raw, json)
Hash identifier:          psrTu9mk+uhyfgRPIn62IhQNkR0VKL8F6Mu78C6W8lo=
Subject key identifier:   B8:D4:EF:64:8B:C0:0F:CF:9E:4D:EF:91:68:88:52:BA:B9:D5:A6:7E
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584EF1EB53575EFBFFB88F5BC600
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/6efd4229-5e7f-3dea-9b7c-81d9f27635a4.roa
Signing time:             Mon 24 Aug 2026 16:32:29 +0000
ROA not before:           Mon 24 Aug 2026 16:32:29 +0000
ROA not after:            Sun 22 Nov 2026 17:32:29 +0000
asID:                     81
IP address blocks:        204.85.198.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f1:eb:53:57:5e:fb:ff:b8:8f:5b:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Aug 24 16:32:29 2026 GMT
            Not After : Nov 22 17:32:29 2026 GMT
        Subject: CN=029b86e4-bb43-4657-8b80-e37922090d27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a8:72:58:fa:60:9b:61:fb:83:c0:65:eb:27:
                    2c:27:10:d9:74:67:6a:6e:2d:51:db:d1:1d:b4:5e:
                    40:b2:84:11:07:d7:c4:11:d3:54:70:b3:05:6a:82:
                    a2:7d:77:45:49:ba:df:04:06:ad:c5:7d:16:04:7f:
                    90:d2:13:ab:75:f4:bd:e4:f2:12:d5:fd:d9:99:ea:
                    5d:9c:b8:74:bc:99:87:d5:d8:56:2e:0d:c7:70:18:
                    8e:07:e5:b7:df:1b:ff:23:24:c4:d1:23:9b:b8:1c:
                    68:62:f3:df:d8:61:8a:51:13:d3:90:50:12:ed:82:
                    87:3b:7a:8c:a7:3d:5c:71:52:8d:9a:c4:1a:fb:e0:
                    a5:69:da:86:44:78:f3:bf:05:65:7e:18:9d:c9:4f:
                    0e:8a:94:93:09:a6:f5:05:d6:84:19:a1:62:5a:de:
                    6c:81:6e:2c:e2:72:8f:82:a6:ab:d2:cd:d3:ac:c5:
                    1f:a2:c4:64:de:6a:80:7e:46:dd:db:b8:30:90:96:
                    7b:9c:ec:a2:6c:d6:1d:5b:89:ef:3d:7a:02:d2:30:
                    33:fd:e5:3c:50:cb:83:20:08:b3:c3:97:d9:b9:4d:
                    32:66:8b:94:88:11:ba:e7:67:8d:dc:1e:c2:9f:bd:
                    13:86:31:0d:da:94:e0:11:93:84:34:e8:97:d0:01:
                    3e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D4:EF:64:8B:C0:0F:CF:9E:4D:EF:91:68:88:52:BA:B9:D5:A6:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/6efd4229-5e7f-3dea-9b7c-81d9f27635a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.85.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:ce:91:37:3a:9f:2c:9d:34:88:f1:73:b3:eb:7b:ee:82:8d:
         f2:31:b9:ab:19:65:a5:f6:fc:11:c9:a9:25:04:f5:4b:a5:c8:
         4e:02:2c:f1:23:88:5b:d3:37:ac:50:20:f2:7b:a9:59:cb:06:
         00:1a:b4:a2:7c:80:b9:28:15:f0:49:60:37:73:ce:d9:3d:a7:
         99:c9:9a:aa:1a:1c:e4:32:91:9b:bf:d4:ac:43:35:60:93:3e:
         cc:4d:5b:b8:b4:17:23:80:32:09:91:d9:bc:c4:37:e9:f1:f2:
         79:d0:b0:3d:4c:a5:dc:d0:fa:ad:50:92:6f:f2:a8:7b:93:07:
         29:4f:ce:7b:b8:25:5f:6b:51:f2:e5:0d:bc:2d:7f:89:d6:e3:
         28:14:3d:c6:bc:c9:44:b9:99:47:9d:6f:7a:12:3f:ef:dc:92:
         e2:88:a2:76:45:8a:d5:0f:fd:a0:8d:ca:90:d6:d0:57:88:03:
         c5:43:8c:2b:2c:cb:aa:2b:62:56:1a:8f:6f:59:f0:98:67:7f:
         d4:da:a1:1e:e1:32:2a:e1:5b:12:41:30:cf:f5:82:9a:b6:ac:
         1f:76:03:c1:91:b1:f2:9c:74:0b:e1:e8:7f:b9:a8:e9:bf:7d:
         b3:f1:de:6f:53:fc:5e:26:e4:92:1f:1b:9e:92:af:e5:af:5e:
         98:b4:91:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:02:10 2026 by rpki-client