Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f411593b-365b-40a2-ae58-c8e00500c940/2b02954c-0e08-3591-8867-80d9787cb045.roa
File:                     2b02954c-0e08-3591-8867-80d9787cb045.roa (raw, json)
Hash identifier:          wBbrxCHCvkpnkPfPSm1CAzYqHOk3YheFcRJMY+A1dYQ=
Subject key identifier:   86:78:A3:66:DF:F7:47:9E:53:5E:42:7E:FC:74:1E:F4:7B:28:6C:F9
Certificate issuer:       /CN=f411593b-365b-40a2-ae58-c8e00500c940
Certificate serial:       010D0C9F4328584F4974FB9F7D1C42FC6DC63D80
Authority key identifier: 43:64:1D:EB:7D:56:29:96:C1:61:39:B7:DA:1B:F5:A1:93:5E:81:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f411593b-365b-40a2-ae58-c8e00500c940.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f411593b-365b-40a2-ae58-c8e00500c940/2b02954c-0e08-3591-8867-80d9787cb045.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     395462
IP address blocks:        204.225.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f411593b-365b-40a2-ae58-c8e00500c940/f411593b-365b-40a2-ae58-c8e00500c940.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f411593b-365b-40a2-ae58-c8e00500c940/f411593b-365b-40a2-ae58-c8e00500c940.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f411593b-365b-40a2-ae58-c8e00500c940.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:fb:9f:7d:1c:42:fc:6d:c6:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f411593b-365b-40a2-ae58-c8e00500c940
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ab25e4a5-5ef8-4970-966a-6ae875b5a18b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:dd:aa:7f:8c:5b:68:fc:9b:b6:96:dc:1d:28:
                    b1:7f:82:e8:66:df:ed:bf:cf:dc:b7:b4:86:a5:9e:
                    dd:5d:a0:21:29:34:6e:c1:3c:06:c2:45:dd:c3:7d:
                    f6:2d:c2:f9:2a:e8:7c:bf:6f:f0:e0:84:c1:35:d9:
                    6c:95:f0:b4:35:e9:f8:10:42:2f:1b:d3:4b:6b:c3:
                    41:5d:28:39:81:c9:45:be:0a:36:2e:19:3c:0f:75:
                    91:08:ef:02:1c:ef:08:91:f1:8d:59:ed:71:23:aa:
                    1e:f1:40:02:1e:17:26:89:07:28:fa:41:42:02:50:
                    bf:9a:92:63:8b:14:d4:b5:35:cb:da:34:d9:ab:c0:
                    52:83:61:38:fd:8d:d2:95:b3:65:de:13:c3:87:87:
                    f4:5e:35:e3:a2:b5:8d:d2:52:02:c1:60:96:68:a0:
                    83:0e:64:d6:e6:97:d6:17:94:2e:9f:bd:76:45:bc:
                    bf:c4:29:97:04:41:25:41:09:67:81:ec:1b:29:12:
                    4d:42:1c:a9:62:3d:eb:2d:4f:89:64:cf:49:88:46:
                    09:f1:cd:b3:fc:61:51:5f:7e:db:23:4a:6d:bd:a9:
                    02:f9:0f:53:dc:83:f5:fe:bc:75:a4:19:cd:a5:f9:
                    3d:f0:d8:00:fd:95:37:a2:e3:34:5b:71:e8:06:46:
                    07:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:78:A3:66:DF:F7:47:9E:53:5E:42:7E:FC:74:1E:F4:7B:28:6C:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f411593b-365b-40a2-ae58-c8e00500c940/2b02954c-0e08-3591-8867-80d9787cb045.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f411593b-365b-40a2-ae58-c8e00500c940/f411593b-365b-40a2-ae58-c8e00500c940.crl

            X509v3 Authority Key Identifier:
                keyid:43:64:1D:EB:7D:56:29:96:C1:61:39:B7:DA:1B:F5:A1:93:5E:81:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f411593b-365b-40a2-ae58-c8e00500c940.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.225.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:f8:ec:d8:95:5e:07:59:78:60:9b:77:ce:14:ee:b3:f3:ea:
         69:5f:8d:e8:c4:75:55:ef:76:93:9f:9f:07:b3:0f:e2:5b:3a:
         f8:6e:9c:ec:a5:fd:2c:a2:4e:50:d1:73:c9:cb:4a:fb:04:76:
         86:26:59:20:04:34:7e:b9:3c:d1:39:18:4e:f3:ca:28:bb:cf:
         36:1d:ca:f5:ea:b8:3d:d8:90:98:ac:5e:79:a8:d8:86:6e:33:
         0b:36:d7:19:1a:a1:76:ed:3a:91:9d:11:ea:8b:3d:ef:97:51:
         97:11:25:e2:d4:34:81:3c:89:a9:23:2c:35:4b:c1:d8:0e:41:
         bc:d4:9f:45:b1:4b:64:4c:16:19:86:6f:48:84:d0:1f:ab:31:
         36:3f:cf:92:35:a7:7b:35:60:bb:81:75:fe:d9:a4:cd:c7:5b:
         cf:44:c0:32:6d:1a:31:59:c4:3d:1d:69:14:68:1a:00:67:e6:
         84:46:d1:88:f5:e1:a4:0f:8b:3f:4f:fe:26:9e:de:c4:8c:c7:
         ab:cf:63:26:24:bd:aa:05:d9:62:81:29:62:1d:20:64:a6:73:
         a3:1b:9c:13:26:88:fd:5b:0f:ac:19:70:bb:fb:d0:b1:05:e1:
         35:13:37:27:09:73:fd:3a:71:b2:a8:74:bc:7e:0e:9b:6d:0f:
         1b:e1:e0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:49:07 2026 by rpki-client