Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/2a09c30d-2c81-382a-862b-3536b8bd90ff.roa
File:                     2a09c30d-2c81-382a-862b-3536b8bd90ff.roa (raw, json)
Hash identifier:          qjSHpshwOeEmFf1pvlVHIhv+wl3g9KZ883rnG91xwIQ=
Subject key identifier:   77:78:92:56:FC:E6:E8:7D:A2:8B:5C:83:6F:AA:82:4D:C5:D3:B1:24
Certificate issuer:       /CN=fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0
Certificate serial:       010D0C9F4328584E1CEBB27FE20EF10A49AD6080
Authority key identifier: B9:F5:A2:51:A2:3B:EA:C4:B0:0F:52:FC:86:69:BA:2E:34:51:E4:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/2a09c30d-2c81-382a-862b-3536b8bd90ff.roa
Signing time:             Tue 09 Jun 2026 09:26:03 +0000
ROA not before:           Tue 09 Jun 2026 09:26:03 +0000
ROA not after:            Mon 31 Aug 2026 18:52:58 +0000
asID:                     26347
IP address blocks:        205.196.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1c:eb:b2:7f:e2:0e:f1:0a:49:ad:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0
        Validity
            Not Before: Jun  9 09:26:03 2026 GMT
            Not After : Aug 31 18:52:58 2026 GMT
        Subject: CN=1188685a-2822-40ca-8ff3-66c4733f98cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:23:7a:80:e1:52:1b:f3:5b:b3:04:51:6e:51:
                    a0:31:45:f0:c5:f2:98:2f:76:4a:c9:fe:83:27:89:
                    d1:c1:78:db:c6:12:ee:74:23:e3:f1:6a:02:ab:89:
                    55:c1:db:e3:39:33:6c:08:67:d5:26:ee:de:bb:96:
                    d5:73:69:38:6a:0f:78:da:11:31:cc:aa:44:96:ab:
                    b6:7d:88:1d:c2:d6:60:df:49:88:a8:f9:38:6e:44:
                    f0:25:ba:5d:2a:c2:37:fb:86:93:a6:14:08:31:ab:
                    75:f9:87:85:d8:82:48:9d:74:fd:81:72:aa:4f:07:
                    e7:4f:8d:37:bd:22:2a:6c:a1:3e:e3:e2:af:0f:fd:
                    a1:79:99:b9:ff:17:c2:db:cd:78:98:d8:3a:a7:3e:
                    1f:d1:7e:c7:0c:aa:cc:14:1d:ce:1d:10:62:33:99:
                    62:c8:f2:10:0b:be:5c:d8:aa:55:f9:68:6d:5f:3c:
                    9f:fb:13:f4:90:c1:39:55:82:c2:5a:c0:52:fd:77:
                    50:46:b1:d6:68:5c:94:75:51:77:72:8d:f2:2a:7b:
                    a1:40:74:77:fd:e4:2e:09:cd:78:cd:5f:e3:ad:0a:
                    a4:3e:ca:7c:78:8c:53:40:7e:96:d3:46:c7:63:cb:
                    0e:b0:db:dd:e3:5a:7f:f5:27:15:76:ad:5c:58:73:
                    99:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:78:92:56:FC:E6:E8:7D:A2:8B:5C:83:6F:AA:82:4D:C5:D3:B1:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/2a09c30d-2c81-382a-862b-3536b8bd90ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.crl

            X509v3 Authority Key Identifier:
                keyid:B9:F5:A2:51:A2:3B:EA:C4:B0:0F:52:FC:86:69:BA:2E:34:51:E4:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.196.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:86:d4:1e:e9:38:07:e2:de:d0:d7:e8:f5:2b:a2:2f:8f:2a:
         eb:70:cd:8e:fc:8c:84:3d:32:84:6b:a6:a9:81:d6:eb:ce:62:
         c9:e5:03:cf:de:56:cd:65:ed:0c:8b:02:f8:1a:ab:ed:d1:c3:
         b4:9a:00:2b:44:6b:60:36:d4:1f:55:af:0a:20:92:fa:ca:e4:
         10:02:bf:c0:13:91:ec:b3:02:55:4a:53:ae:0f:25:a5:93:fd:
         cf:42:ac:ed:63:7a:3f:34:99:09:63:91:ef:8c:3c:2a:d7:33:
         5e:66:4d:87:cd:99:3e:4a:e2:5e:6f:01:ca:16:e9:4b:07:1f:
         6d:73:b4:8d:fd:a5:a9:0a:5c:c3:43:1f:41:a2:4a:e9:40:c8:
         ad:be:53:cb:6d:e9:38:d4:f7:9c:57:dc:62:8a:cb:45:4a:c6:
         39:5d:4e:02:b6:57:2b:81:b2:09:63:da:bb:f3:8e:95:bc:79:
         ce:0c:9b:d9:5f:6b:48:98:76:f0:ce:2e:3f:c2:5a:ae:b5:c7:
         8e:ca:e2:cb:f4:b8:e4:ec:a8:f2:66:52:55:f1:85:ff:21:89:
         f4:0f:f7:cf:a8:73:3a:a6:bf:d3:06:32:4a:47:5e:2f:3e:84:
         d4:74:85:66:7f:62:31:54:36:97:a1:c3:f4:b4:59:90:03:a9:
         88:03:f7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:05:48 2026 by rpki-client