Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8c5a0aa1-9a7b-325c-a274-73a4cd8bb005.roa
File:                     8c5a0aa1-9a7b-325c-a274-73a4cd8bb005.roa (raw, json)
Hash identifier:          foHwiqShUIAHEXDZA38siHCX/3gFnZz8kBpMxWq8jeU=
Subject key identifier:   27:A0:A4:7C:4A:B8:61:BE:4A:53:D1:2B:1A:0E:F5:AD:F8:9A:D2:67
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584DF4DBA4653FAE033DD6985540
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8c5a0aa1-9a7b-325c-a274-73a4cd8bb005.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     81
IP address blocks:        198.86.104.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:a4:65:3f:ae:03:3d:d6:98:55:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=81de56ba-4272-4020-9d72-031f1fdd6efb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8c:2a:f6:7e:32:39:6c:8e:0b:ff:98:f4:06:
                    ff:83:d9:39:4b:ea:24:22:8f:75:4f:6d:cb:27:26:
                    51:6f:9d:3b:16:48:98:93:c4:9e:e3:1b:c8:af:02:
                    37:c2:0c:44:6d:9e:4e:68:5d:51:b7:07:7d:43:a0:
                    b6:3b:a9:67:9a:d6:5b:ad:d9:a4:de:df:c0:7a:2c:
                    c8:2b:95:ba:cb:41:45:ed:9e:d9:b0:32:df:2b:06:
                    04:67:8d:5e:06:d1:f4:b2:d2:b8:d2:1f:32:a9:be:
                    b7:cc:2a:fb:46:36:4a:65:57:37:d2:25:76:87:3b:
                    d3:50:21:7a:4c:88:07:de:e4:96:f5:35:94:e6:07:
                    5d:f0:43:c5:6c:05:38:17:47:4a:b3:2b:05:26:15:
                    40:bc:69:7b:70:03:c3:32:73:7b:cc:44:b1:63:53:
                    8b:4d:4a:8a:e9:3f:48:76:58:ae:81:b4:65:6c:6c:
                    31:6b:62:df:79:0c:ba:c4:ae:41:59:58:92:eb:8b:
                    71:6e:18:44:4b:ca:40:d9:09:65:db:f3:9c:56:5f:
                    57:67:f6:34:8f:7d:3a:4c:9d:1a:cc:db:4e:b8:e8:
                    5e:f6:67:e1:2f:ce:1a:b7:67:55:70:22:65:0d:f2:
                    06:89:01:cf:aa:71:c2:3d:48:0a:ec:f9:82:b5:c4:
                    98:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A0:A4:7C:4A:B8:61:BE:4A:53:D1:2B:1A:0E:F5:AD:F8:9A:D2:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8c5a0aa1-9a7b-325c-a274-73a4cd8bb005.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.86.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:69:8c:b9:1b:4c:de:e8:ac:25:14:f9:d9:0f:c8:eb:0f:c7:
         91:35:e6:5b:6a:a7:82:f3:e9:f2:75:30:49:4f:1e:16:6c:85:
         4c:16:41:4a:6f:08:de:90:54:35:ac:5d:b8:81:ce:80:c2:bf:
         a0:0d:ac:24:e3:7c:0e:d6:ca:8c:85:f0:34:24:0d:f0:d6:28:
         0f:2a:3c:c7:d9:0e:75:da:48:f7:59:11:80:b2:0e:d9:47:fb:
         01:22:c2:7c:e5:ca:5c:3a:d4:48:09:6d:ef:70:0b:8c:a4:78:
         59:67:7b:d2:f9:5a:32:57:6f:18:c6:44:af:a7:02:46:6e:b5:
         57:09:b1:0f:cb:1c:24:ca:a3:05:c2:2e:0e:2f:a9:70:d9:51:
         cd:43:91:76:29:1b:24:68:34:59:42:5d:00:a5:76:d2:de:9c:
         bc:35:2e:84:0a:41:fc:ce:17:92:5e:57:0f:93:cc:91:af:e1:
         79:45:35:05:f8:86:6e:a6:b4:56:5f:69:c2:86:a8:97:5f:c2:
         d1:48:23:36:9a:a3:dd:90:d6:6f:e8:e1:48:bb:c0:63:4b:73:
         f2:58:6d:e6:0c:ef:4a:7e:8f:02:c8:70:b5:5f:43:1a:3b:35:
         db:fa:2a:2d:1d:77:d3:99:f9:7a:63:bc:3a:05:ae:18:7a:c1:
         3f:51:ae:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:43:27 2026 by rpki-client