Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/2b494e5f-e493-3f21-bd4b-7cec8f8373a8.roa
File:                     2b494e5f-e493-3f21-bd4b-7cec8f8373a8.roa (raw, json)
Hash identifier:          Lwo1xxDi+bbokNfAbkkP3+gIoaVFGuCOERVSlpphcf0=
Subject key identifier:   48:55:43:36:50:6D:F5:AD:E0:D5:BF:45:B9:D4:A8:5B:2E:07:26:75
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584F3FAD410FAA68E516B2CA1680
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/2b494e5f-e493-3f21-bd4b-7cec8f8373a8.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     393249
IP address blocks:        206.12.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:41:0f:aa:68:e5:16:b2:ca:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=f61528f2-8820-4b6a-b5ea-cee41733b6ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4d:ec:cb:1f:6e:88:d1:9c:66:bc:2d:cf:05:
                    3d:90:9e:7b:76:85:52:68:14:fb:d8:fb:a3:e9:ee:
                    54:54:04:f7:ac:63:fc:10:47:9e:55:cd:fe:de:83:
                    c4:88:fc:81:10:f4:cc:9c:bb:83:0b:11:f1:b6:67:
                    86:05:ee:1f:91:75:a9:c4:51:7f:e8:90:49:c2:d7:
                    93:5f:52:96:d6:0d:bb:86:6e:2c:fe:bd:7f:be:b4:
                    d9:68:1e:14:7c:83:fe:ac:1b:36:cf:0c:81:0a:00:
                    97:b5:e4:0d:65:45:bb:35:c2:04:17:86:c2:1c:d2:
                    d2:56:97:b5:f5:1a:ec:3f:43:11:8e:f2:69:07:cf:
                    eb:4c:96:db:0a:67:5a:bf:49:41:f2:c3:45:cf:9a:
                    99:d2:09:cc:f8:49:64:30:e9:f6:2f:34:7a:d6:56:
                    90:21:75:aa:91:97:28:ef:77:a8:f2:a9:b8:b1:ea:
                    a6:11:49:65:7d:a7:17:d2:b8:11:ad:8b:51:69:9c:
                    e0:8b:8e:0b:f9:05:0d:ec:34:d2:eb:ef:59:af:6b:
                    f0:82:3f:c7:03:c5:17:da:83:10:bb:a6:c2:17:93:
                    ae:d0:40:c1:e0:b3:da:d1:d5:57:48:49:a2:25:95:
                    95:31:74:eb:1e:39:67:bf:d2:48:a8:e9:37:e7:2f:
                    a0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:55:43:36:50:6D:F5:AD:E0:D5:BF:45:B9:D4:A8:5B:2E:07:26:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/2b494e5f-e493-3f21-bd4b-7cec8f8373a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.12.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:7c:e4:ad:f2:40:b3:b3:fd:e0:09:96:3e:ee:42:41:d5:4f:
         16:c1:48:96:48:9a:8b:b5:4e:8d:21:80:a4:33:a8:af:54:10:
         cb:66:c0:d4:07:39:8a:f0:e5:fe:34:10:08:53:64:04:75:cc:
         58:63:b4:da:a2:1e:18:dd:d1:8c:09:a5:63:73:a7:b0:9e:a5:
         4c:bf:29:e7:4b:a3:ac:8f:6d:ea:3a:b3:32:1c:cd:19:07:d1:
         20:a8:f7:0b:ad:cb:43:9f:7f:99:be:20:e8:0e:7f:72:86:e4:
         0e:95:19:9f:f5:d0:d2:1c:60:34:8f:63:f6:ae:b0:84:a8:1a:
         b7:01:36:8f:65:fc:c8:3a:6b:63:80:17:8c:bc:29:31:af:12:
         9d:ed:e2:75:f0:72:61:ce:d2:36:b4:0c:42:95:da:58:89:a4:
         7a:43:a0:fd:0c:38:7e:fc:79:a3:94:70:17:51:7e:64:fe:78:
         73:98:8f:0f:0c:d3:ef:71:3e:f2:d5:da:2a:76:45:00:54:29:
         df:35:ee:c8:1b:d7:0a:e7:88:61:29:bc:e3:49:52:a7:71:96:
         ea:40:ae:24:0e:31:5b:33:88:11:33:cd:e1:02:0e:4f:97:98:
         b9:a5:ec:3a:0b:93:81:72:41:0c:92:01:db:0c:0b:11:52:e5:
         0b:ec:4e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:37:04 2026 by rpki-client