Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/7a4e53c5-e448-3313-b055-eb9b8e0387d2.roa
File:                     7a4e53c5-e448-3313-b055-eb9b8e0387d2.roa (raw, json)
Hash identifier:          xgmC8FaC1sKlToKlyt+mPl8zUIXfLqAqjHRHm/11X+g=
Subject key identifier:   33:D1:60:94:40:69:CD:34:D7:6A:6D:16:7D:24:D7:89:DB:98:86:39
Certificate issuer:       /CN=e60884f4-fa14-4a13-ac3b-efb7c9412082
Certificate serial:       010D0C9F4328584F2EED1A24A47E90A375157700
Authority key identifier: 0C:9A:7C:E9:6D:8C:38:48:9A:F3:3B:CA:41:66:F3:89:47:7D:49:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/7a4e53c5-e448-3313-b055-eb9b8e0387d2.roa
Signing time:             Tue 15 Sep 2026 13:00:12 +0000
ROA not before:           Tue 15 Sep 2026 13:00:12 +0000
ROA not after:            Mon 14 Dec 2026 14:00:12 +0000
asID:                     36184
IP address blocks:        209.160.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e60884f4-fa14-4a13-ac3b-efb7c9412082.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e60884f4-fa14-4a13-ac3b-efb7c9412082.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2e:ed:1a:24:a4:7e:90:a3:75:15:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e60884f4-fa14-4a13-ac3b-efb7c9412082
        Validity
            Not Before: Sep 15 13:00:12 2026 GMT
            Not After : Dec 14 14:00:12 2026 GMT
        Subject: CN=071b7b8d-be2f-4d5c-a2c8-a64250993339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a6:ae:c3:14:dc:d3:84:21:96:82:ac:15:1c:
                    3d:14:f9:2b:8b:88:8b:5f:82:01:77:85:25:04:2b:
                    af:38:13:b7:1d:f8:3d:0f:23:3c:b6:55:dc:e6:52:
                    c0:c6:ae:4c:29:46:72:31:6f:ed:07:d0:21:20:3b:
                    44:fd:49:15:76:e8:21:ff:e8:02:fb:37:d2:28:bc:
                    dc:e8:f8:32:fc:85:e1:59:0e:43:c6:9c:40:c8:0c:
                    66:d9:a0:75:75:70:ca:2e:1c:9a:c2:ff:64:28:a0:
                    ee:10:f9:61:cf:c4:d6:6c:67:fc:24:b2:f4:12:99:
                    c3:7e:29:c0:dd:38:2b:d2:f7:0b:16:9e:00:4d:3f:
                    12:bd:9a:71:21:20:bb:b5:64:47:fb:4c:49:55:02:
                    0d:da:49:a5:a9:1c:66:ad:b1:e0:61:e2:4a:80:39:
                    1b:57:8c:d2:1e:74:e6:3c:94:5f:3c:0d:ef:5b:8f:
                    76:99:56:9e:29:6b:e8:8e:84:1e:90:8b:33:31:9c:
                    6e:62:9c:a2:a5:ad:28:13:3b:4d:f2:6c:c4:0f:fc:
                    23:47:84:67:93:26:cc:7d:dc:79:c2:ee:8a:00:34:
                    b5:38:44:ec:38:08:0a:85:eb:a7:ea:b7:2b:41:13:
                    6a:ba:38:a3:31:a8:bf:5c:92:0e:cc:6d:4a:ed:bd:
                    26:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:D1:60:94:40:69:CD:34:D7:6A:6D:16:7D:24:D7:89:DB:98:86:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/7a4e53c5-e448-3313-b055-eb9b8e0387d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e60884f4-fa14-4a13-ac3b-efb7c9412082.crl

            X509v3 Authority Key Identifier:
                keyid:0C:9A:7C:E9:6D:8C:38:48:9A:F3:3B:CA:41:66:F3:89:47:7D:49:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.160.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:8c:43:e5:48:95:fa:bc:43:1a:9b:57:3d:6f:59:39:ef:74:
         ac:af:57:8d:4e:01:24:24:32:4d:4a:b5:26:e3:f2:af:c6:24:
         b8:4a:f2:7b:62:fb:3e:26:e0:0d:93:27:12:26:74:33:c1:93:
         2f:7b:14:4a:a9:61:78:3f:3f:29:b6:1e:e8:af:ce:b7:b2:6c:
         25:f5:ca:60:22:aa:e6:88:1a:66:6c:67:ad:ae:f4:fd:31:cf:
         2b:bf:87:6b:98:b9:77:75:dd:fa:80:65:9b:4b:b6:92:bd:9c:
         e3:a4:5c:b2:f6:7f:cf:30:04:23:83:d1:f2:0c:5d:39:2b:27:
         7b:7e:b8:38:76:50:4d:99:6e:3a:a8:e5:b8:04:b0:2c:5c:87:
         c0:18:e9:a7:10:79:be:13:a8:83:36:fb:bf:79:f5:eb:0c:1e:
         92:32:f9:10:75:ea:52:0c:1d:42:ea:29:3e:23:a1:51:b5:f9:
         f0:17:f4:1e:fe:86:72:96:a9:f7:18:f9:4d:c8:cd:2e:da:ae:
         47:be:ba:23:18:4f:c4:68:26:d8:35:1f:e7:09:64:b5:83:01:
         d3:34:ac:ce:e9:d3:62:5b:fe:de:f2:ed:0c:61:a9:b8:7d:01:
         a7:53:90:37:ef:84:34:a6:ea:fe:19:fa:52:de:3d:b1:43:2b:
         d7:0d:cf:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:30:08 2026 by rpki-client