Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6fabae2d-fab4-4ccf-be2c-bbe98c45bb36/2d5abfe1-6059-38ce-973d-8016519149fe.roa
File:                     2d5abfe1-6059-38ce-973d-8016519149fe.roa (raw, json)
Hash identifier:          ZSmXBPH/J2SucAKgwFWgFgdsfduow8R7iQmmUireJic=
Subject key identifier:   54:A6:97:E3:D0:CE:40:C3:4A:E9:4C:E8:5A:09:65:87:BF:6B:B8:94
Certificate issuer:       /CN=6fabae2d-fab4-4ccf-be2c-bbe98c45bb36
Certificate serial:       010D0C9F4328584EEA8753599200FF5B5A110D00
Authority key identifier: 0C:5E:08:39:C1:24:2C:94:E4:F9:B9:5B:94:A5:BA:11:A4:6C:F8:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6fabae2d-fab4-4ccf-be2c-bbe98c45bb36.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6fabae2d-fab4-4ccf-be2c-bbe98c45bb36/2d5abfe1-6059-38ce-973d-8016519149fe.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     10242
IP address blocks:        204.57.232.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6fabae2d-fab4-4ccf-be2c-bbe98c45bb36/6fabae2d-fab4-4ccf-be2c-bbe98c45bb36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6fabae2d-fab4-4ccf-be2c-bbe98c45bb36/6fabae2d-fab4-4ccf-be2c-bbe98c45bb36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6fabae2d-fab4-4ccf-be2c-bbe98c45bb36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:53:59:92:00:ff:5b:5a:11:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fabae2d-fab4-4ccf-be2c-bbe98c45bb36
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=31c100db-a9b3-4292-93b1-6836981d2963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:90:cf:cc:39:a8:b1:12:c2:9a:61:08:d7:e6:
                    fc:b7:f8:3a:f5:b3:9c:0a:c9:2d:93:f9:11:11:5d:
                    e4:f3:ba:f7:95:45:2c:7b:be:05:c0:6a:ba:4a:62:
                    f3:16:f6:3e:85:d4:f9:e6:67:80:91:e9:7b:b3:e9:
                    fa:47:a0:f6:cf:a4:2b:f5:e3:72:9c:07:ec:e9:96:
                    0e:a3:c9:f6:a1:42:b7:2c:e5:b3:6e:23:2b:01:6a:
                    09:d4:d5:2b:7c:10:9f:5d:da:2b:04:dc:38:34:b7:
                    55:fd:4f:72:eb:a5:94:df:f2:71:5d:62:87:1f:f6:
                    e1:8d:55:63:c8:64:fb:29:68:d0:1c:0f:49:96:8e:
                    2d:9b:a8:9c:be:d2:ec:26:93:4f:ee:90:20:88:70:
                    63:66:4d:4d:c5:8e:57:8e:2b:71:77:e5:69:ae:44:
                    60:7f:c3:38:62:5d:b1:fd:d2:0d:95:a5:55:56:60:
                    2d:14:7b:f5:aa:cd:a5:4c:b6:9e:c2:85:fa:ca:1e:
                    b1:62:1f:5f:c2:22:10:1e:82:9b:b2:32:84:b9:bd:
                    8f:74:8b:ae:38:ba:8f:63:d0:53:73:50:df:e9:31:
                    99:d2:df:d9:f4:af:5a:ff:9f:ee:bd:97:a6:a1:3d:
                    1f:3b:d7:89:c3:dd:7c:66:ac:1a:99:39:51:1d:0e:
                    5c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:A6:97:E3:D0:CE:40:C3:4A:E9:4C:E8:5A:09:65:87:BF:6B:B8:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6fabae2d-fab4-4ccf-be2c-bbe98c45bb36/2d5abfe1-6059-38ce-973d-8016519149fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6fabae2d-fab4-4ccf-be2c-bbe98c45bb36/6fabae2d-fab4-4ccf-be2c-bbe98c45bb36.crl

            X509v3 Authority Key Identifier:
                keyid:0C:5E:08:39:C1:24:2C:94:E4:F9:B9:5B:94:A5:BA:11:A4:6C:F8:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6fabae2d-fab4-4ccf-be2c-bbe98c45bb36.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.57.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ef:06:dc:63:64:2b:ee:d2:12:c0:97:47:8f:7f:da:03:75:a7:
         4c:9f:a2:3b:34:cd:dd:c3:e5:80:2c:9e:3c:d7:1e:e7:ae:18:
         52:f9:e4:3c:9a:f6:89:cc:3c:34:74:d9:03:09:44:d7:5a:6e:
         58:8f:2b:ab:d2:2c:f7:b6:9c:36:36:70:d7:d1:04:aa:48:cb:
         c8:6f:e3:2b:49:fc:9b:3c:d1:87:70:ff:b4:eb:da:0e:95:b2:
         1b:28:1f:04:fd:92:51:06:bf:cd:6b:25:5c:e0:d5:68:0f:c5:
         b3:5c:4b:1c:89:3d:46:70:6f:5d:11:d3:df:9c:fd:05:16:09:
         b5:80:01:b2:83:d7:d8:a4:c4:97:b8:7e:66:76:77:23:34:f5:
         5e:fa:8c:de:9c:44:39:38:1b:93:60:3d:ee:01:e4:73:41:ef:
         8c:e1:35:6a:7d:f6:5e:46:9b:02:0a:c6:76:46:b4:af:88:fc:
         81:cf:c2:40:59:26:3c:cb:7b:e5:2d:f5:2c:a5:3a:82:00:73:
         07:93:57:c4:a9:24:10:e0:ac:ab:5a:c7:8a:2a:5c:f4:3e:c4:
         42:c8:a6:a7:99:06:2d:c8:3a:e9:4d:00:f5:e4:32:72:cc:63:
         b8:20:ea:44:82:70:75:9d:ca:bd:9e:e6:3d:da:31:ca:f0:91:
         51:67:98:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:47:35 2026 by rpki-client