Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ee3f3174-a1bd-4f5c-859c-ad3cfc0e05c0/6a7318f7-7a14-32ca-a45a-652fedbebcf1.roa
File:                     6a7318f7-7a14-32ca-a45a-652fedbebcf1.roa (raw, json)
Hash identifier:          R+e0gB67p1SNLMIaDKbYYtkUFuF0gzTxzSlz3gV77xo=
Subject key identifier:   9C:CA:60:49:2D:85:F8:9B:14:EC:ED:26:C5:FA:76:BD:CD:E1:14:03
Certificate issuer:       /CN=ee3f3174-a1bd-4f5c-859c-ad3cfc0e05c0
Certificate serial:       010D0C9F4328584F0D0D6B6D127E3E600E04ED80
Authority key identifier: 2E:7B:FC:DB:33:BB:51:D0:4E:F6:CA:E5:E0:67:53:DD:08:AA:24:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ee3f3174-a1bd-4f5c-859c-ad3cfc0e05c0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ee3f3174-a1bd-4f5c-859c-ad3cfc0e05c0/6a7318f7-7a14-32ca-a45a-652fedbebcf1.roa
Signing time:             Thu 03 Sep 2026 09:48:00 +0000
ROA not before:           Thu 03 Sep 2026 09:48:00 +0000
ROA not after:            Wed 02 Dec 2026 10:48:00 +0000
asID:                     3257
IP address blocks:        169.128.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ee3f3174-a1bd-4f5c-859c-ad3cfc0e05c0/ee3f3174-a1bd-4f5c-859c-ad3cfc0e05c0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ee3f3174-a1bd-4f5c-859c-ad3cfc0e05c0/ee3f3174-a1bd-4f5c-859c-ad3cfc0e05c0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ee3f3174-a1bd-4f5c-859c-ad3cfc0e05c0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:0d:6b:6d:12:7e:3e:60:0e:04:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee3f3174-a1bd-4f5c-859c-ad3cfc0e05c0
        Validity
            Not Before: Sep  3 09:48:00 2026 GMT
            Not After : Dec  2 10:48:00 2026 GMT
        Subject: CN=696b8f5e-0cb2-439d-9e73-a1aa5f648620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:bc:cb:17:71:a8:a5:f3:9d:6b:33:41:5e:2a:
                    3c:4b:4e:49:0b:df:40:18:2d:2f:57:b4:81:59:4a:
                    39:aa:7c:a4:0a:0f:d0:92:bd:e3:7a:24:ca:b9:9b:
                    2d:cc:37:14:b4:97:54:fa:cf:f4:7a:eb:0b:bb:0a:
                    b3:57:8f:37:c0:0a:6a:39:5e:f6:3a:be:f3:da:24:
                    54:1e:6c:f5:78:c2:1c:9a:ae:71:08:bf:55:fb:5e:
                    a8:8c:1c:40:ad:1b:0d:18:19:03:cf:15:22:11:ad:
                    87:6f:b0:d9:ee:12:32:b0:ae:e3:84:39:f3:14:7e:
                    f3:8c:42:60:d9:01:f0:16:f9:f7:c0:79:04:4f:c1:
                    fe:a7:71:88:e8:bd:71:c4:65:db:b8:0f:ea:2c:a8:
                    7d:d3:bd:7c:42:ff:b2:72:5d:31:92:0d:d2:7f:a0:
                    f4:05:77:86:cd:d6:9f:ae:99:64:f8:66:49:2b:50:
                    7d:9f:41:20:2a:45:83:de:e6:a2:af:0a:ef:28:b6:
                    09:47:db:d5:19:2e:f0:9a:f8:64:1f:7c:20:bf:00:
                    14:99:90:71:b3:2b:7a:61:0a:f2:2f:38:d5:d4:88:
                    2c:04:23:7a:f1:59:de:ff:3c:28:6e:43:cd:9f:be:
                    71:47:c5:2d:c1:dc:fd:9d:c1:f2:a5:08:bc:39:b3:
                    a5:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:CA:60:49:2D:85:F8:9B:14:EC:ED:26:C5:FA:76:BD:CD:E1:14:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ee3f3174-a1bd-4f5c-859c-ad3cfc0e05c0/6a7318f7-7a14-32ca-a45a-652fedbebcf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ee3f3174-a1bd-4f5c-859c-ad3cfc0e05c0/ee3f3174-a1bd-4f5c-859c-ad3cfc0e05c0.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:FC:DB:33:BB:51:D0:4E:F6:CA:E5:E0:67:53:DD:08:AA:24:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ee3f3174-a1bd-4f5c-859c-ad3cfc0e05c0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.128.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:f5:b6:26:58:81:94:67:d8:e3:6f:d6:05:66:b3:5e:78:5f:
         05:f0:b0:6f:c7:12:88:ac:34:f8:ef:bb:72:43:a6:6a:cf:2e:
         cf:89:e1:23:2a:8d:20:96:7b:bc:a9:79:46:99:45:35:cf:02:
         fa:e2:c2:86:cf:19:ab:cf:a4:75:ba:23:f4:11:32:25:ee:4a:
         d4:c4:0a:cf:23:7d:74:ed:2b:a0:82:fa:f8:23:25:6d:ec:a3:
         83:33:df:7c:38:5f:43:61:c8:3d:35:22:4d:61:20:0d:e6:80:
         b3:c6:0a:60:13:37:a2:7d:dd:7c:1c:02:60:93:34:84:05:99:
         c3:52:51:cd:cf:b8:3e:1d:c0:0e:a0:fb:7d:70:ac:94:e2:0a:
         1f:8d:96:93:6c:0c:1b:2c:b1:b5:a4:f0:2b:3a:3e:79:c8:1b:
         48:bb:8c:39:0f:14:79:cb:58:79:18:5e:47:1f:ae:40:ea:70:
         e1:ce:f0:d1:6c:10:53:42:49:48:77:50:b0:8c:7f:ed:ac:b2:
         50:c3:4b:9c:06:bb:79:e3:e5:9b:fd:2d:7e:d1:1a:58:99:81:
         40:88:81:1e:93:98:ea:06:f0:64:64:04:4f:de:cb:b9:ef:e9:
         81:e7:97:5f:15:5c:c5:05:c3:68:05:58:c3:46:7c:f0:a2:a1:
         70:40:95:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:21:33 2026 by rpki-client