Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0bbdf029-368f-3c2c-abf2-aa3c89aae18d.roa
File:                     0bbdf029-368f-3c2c-abf2-aa3c89aae18d.roa (raw, json)
Hash identifier:          dywjXK/+JsUdnUbq5dKrRniCpdzuBCItnflAxZeLx68=
Subject key identifier:   53:AB:D5:D5:35:53:5E:66:8B:02:90:83:C5:93:AC:F4:38:59:D2:26
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584F4973C70D9E7F9C053F894380
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0bbdf029-368f-3c2c-abf2-aa3c89aae18d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     852
IP address blocks:        206.162.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:c7:0d:9e:7f:9c:05:3f:89:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=e4cbc475-e0e2-4516-9805-17fe54053a6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:09:ed:59:e9:22:61:ae:83:96:2e:d6:a7:5e:
                    08:11:11:24:fd:53:01:b9:06:b3:cf:f2:1c:2c:5d:
                    5f:f7:84:43:c0:66:c0:c8:42:2a:8c:82:43:bb:2f:
                    f3:d6:d2:0a:2a:0c:44:84:58:69:d4:95:e4:c9:bd:
                    30:af:21:e6:4b:41:26:dd:85:f4:2e:66:21:f6:ec:
                    8e:dc:53:62:bd:aa:e5:43:1f:e6:6e:c4:de:74:dd:
                    18:7d:0c:94:45:66:76:4e:d6:ec:45:e8:81:b0:76:
                    b4:0c:24:1b:ff:98:85:c1:7c:3b:c4:02:b4:2e:95:
                    38:ee:bf:cd:e5:2e:d3:31:75:cf:78:15:9b:52:18:
                    52:3d:e2:43:f3:c6:4f:b0:d8:b2:d1:18:05:d3:28:
                    72:c1:e7:3a:36:4e:4a:cc:80:1f:1a:21:09:09:d6:
                    84:44:44:2b:c6:ad:f5:be:38:8c:7a:15:1a:cc:1f:
                    c2:e7:fa:53:ab:46:a1:e0:af:ce:ef:45:58:8f:e7:
                    cd:58:2f:c8:9c:0c:c9:37:38:de:c2:e6:fd:24:d5:
                    ae:9a:69:b2:24:a6:4d:13:06:b9:f5:d6:b6:fe:83:
                    97:c4:77:3a:2a:35:f0:2d:ab:bf:7f:04:ee:37:20:
                    7e:32:47:7c:9b:90:1c:e5:8a:09:dd:b5:6e:e9:fb:
                    fa:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:AB:D5:D5:35:53:5E:66:8B:02:90:83:C5:93:AC:F4:38:59:D2:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0bbdf029-368f-3c2c-abf2-aa3c89aae18d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.162.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:5f:00:d3:2f:a5:fd:42:01:23:dc:73:f1:0f:7e:84:14:51:
         7c:a8:3d:7e:1b:43:90:d2:20:ff:19:7d:88:88:32:28:0f:9f:
         d7:26:aa:90:bb:bf:be:1a:5d:c4:11:04:ea:21:13:51:0a:15:
         66:ef:d0:43:c9:88:6b:ed:09:f6:9c:c4:c4:72:b2:57:5e:e3:
         b6:2a:8d:cf:4c:ef:ce:6f:36:f0:c0:b7:ab:dc:24:9c:51:51:
         24:ac:a6:6b:51:6d:c0:83:95:96:77:3a:5a:45:05:0d:9b:99:
         41:f9:59:67:09:76:35:06:b5:5c:48:fb:41:9a:08:37:16:88:
         2c:d9:39:1d:ca:15:1d:df:ca:b1:e2:a6:82:97:9a:a4:2c:29:
         c8:30:46:fd:88:51:9a:d4:cc:5c:bf:3d:5c:51:55:25:ca:7c:
         a9:0d:47:df:60:b0:60:bb:e7:d3:ab:98:74:4a:ce:d9:b0:44:
         84:4e:18:7c:67:f9:8c:c7:8d:ee:29:bf:97:aa:d8:19:3a:e6:
         ef:1e:97:a1:9a:56:6f:e4:54:75:61:b5:76:c8:89:ba:9b:93:
         6e:20:f9:b2:d1:11:3b:ea:d4:2d:74:cb:04:a9:7e:66:e1:c9:
         52:86:27:1c:32:76:50:84:e7:1e:09:40:df:8d:1e:96:61:74:
         ea:10:3e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:24:55 2026 by rpki-client