Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/fba2e308-be4e-3229-8b78-9b0e6ab1a693.roa
File:                     fba2e308-be4e-3229-8b78-9b0e6ab1a693.roa (raw, json)
Hash identifier:          g8OYF/YILAwDXDBB1VTZHjS/S2dw+E2OwHLMBivTgFY=
Subject key identifier:   15:1C:6F:76:1F:F5:00:B3:DC:30:27:09:FE:1D:E8:31:40:49:96:4C
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584DF4DBA47B7E654C7BB4E28E80
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/fba2e308-be4e-3229-8b78-9b0e6ab1a693.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     81
IP address blocks:        198.86.106.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:a4:7b:7e:65:4c:7b:b4:e2:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=6abee895-c7a1-40b2-9fc3-d97aaf7656d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:23:6c:e5:3f:e3:19:11:4e:67:59:1d:87:f7:
                    e8:aa:a3:d2:5c:79:41:f5:99:77:37:4c:2d:b6:34:
                    ad:db:d2:32:2d:2f:99:22:75:0f:a0:f1:d4:02:41:
                    d2:b8:64:0e:1a:eb:6e:a2:d5:17:56:1d:49:cf:d9:
                    09:57:9b:79:6f:7e:26:1f:1e:95:e4:54:c7:7e:ce:
                    7d:08:c0:ca:7c:c4:6d:11:fd:c7:a6:0f:9f:75:30:
                    e4:2a:b6:b5:5d:1d:9d:3f:30:06:92:75:65:a6:83:
                    6c:e7:10:57:74:4f:f8:e7:91:81:1a:83:c7:68:9b:
                    d7:66:52:5d:a9:bf:72:8a:31:c7:e6:43:78:6e:b6:
                    fa:7f:27:c2:64:f5:d5:4e:de:cf:23:bf:78:7e:ec:
                    05:04:c8:80:2b:50:cf:a0:b3:54:34:0e:9e:9f:59:
                    e7:7a:27:55:5d:c0:85:32:0b:d9:31:95:18:fd:11:
                    a9:76:36:06:f1:c0:40:56:a6:93:aa:f4:95:d5:c4:
                    42:66:e0:d0:40:c6:31:db:0e:24:fc:b1:26:80:a7:
                    94:66:2f:b0:ae:a8:ac:55:9a:a1:39:65:c0:12:88:
                    55:a2:43:72:25:60:99:0e:7e:aa:f8:76:8e:cf:c1:
                    5b:0f:9e:27:27:82:fe:5a:d2:a4:40:db:e1:41:7d:
                    7c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:1C:6F:76:1F:F5:00:B3:DC:30:27:09:FE:1D:E8:31:40:49:96:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/fba2e308-be4e-3229-8b78-9b0e6ab1a693.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.86.106.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:c3:cc:2e:e6:ae:ad:76:bf:ce:e3:58:22:22:3c:33:8f:32:
         c2:08:29:d7:a8:b1:19:a9:f6:3d:ee:fd:bd:e8:ba:00:8f:ad:
         af:5a:9a:c4:cd:89:e9:aa:41:65:0f:34:d5:f0:1d:c4:f2:d0:
         a0:bd:c4:aa:71:a6:79:a9:5a:af:18:8f:83:a6:a6:d0:77:7e:
         51:59:b5:24:e8:ce:7e:70:f0:39:e3:f0:bd:65:27:44:88:41:
         1d:84:d8:ad:ed:c9:3a:82:16:83:72:ba:ad:b4:b4:9a:7a:6e:
         19:f7:3a:97:95:08:6e:b2:79:f4:e2:6c:6c:91:13:c8:ce:1a:
         54:a6:64:f3:23:03:e0:f2:f7:58:e8:17:29:d4:f8:bc:2e:d8:
         df:8e:c1:af:28:76:0e:3f:15:e9:ba:49:9d:b8:04:f8:18:d9:
         cb:f5:d2:ef:11:5c:ea:f5:36:56:2b:39:15:85:a3:4e:c7:2a:
         aa:e6:cd:cd:76:1e:34:66:82:94:9a:f7:d3:82:c9:98:04:26:
         1b:2f:d2:c7:a4:01:23:59:a5:80:b1:93:49:71:f1:66:21:d8:
         73:4a:ef:92:2e:e8:f6:b8:50:fc:fb:1c:76:92:1a:63:8f:ec:
         b8:ea:d2:0c:a9:4e:96:89:29:1e:ad:0d:31:5b:ea:1b:72:12:
         a4:f9:0e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:00:26 2026 by rpki-client