Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8/2681e094-c5f0-376d-abe2-47d9d9497306.roa
File:                     2681e094-c5f0-376d-abe2-47d9d9497306.roa (raw, json)
Hash identifier:          FQGiKdFcvw0OpIo7R0Zy+hgA4/ibx/WXswBNGh6xWKI=
Subject key identifier:   31:86:A1:9F:22:1F:27:FC:8D:A2:8E:8E:60:BF:5F:FC:65:69:D2:7A
Certificate issuer:       /CN=1cfae3ba-0f53-428a-93d8-6885c64c1fd8
Certificate serial:       010D0C9F4328584F03A78C193F7694678C00A880
Authority key identifier: 41:1E:04:61:12:96:D0:AD:5A:D3:F3:EC:9E:91:3C:E7:F3:1D:22:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8/2681e094-c5f0-376d-abe2-47d9d9497306.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     36466
IP address blocks:        199.180.216.0/22 maxlen: 22
                          208.71.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8/1cfae3ba-0f53-428a-93d8-6885c64c1fd8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8/1cfae3ba-0f53-428a-93d8-6885c64c1fd8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:8c:19:3f:76:94:67:8c:00:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cfae3ba-0f53-428a-93d8-6885c64c1fd8
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=b2aa331f-0a98-4a2e-86c8-a24e70c22c99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a0:0d:d8:6b:83:df:f5:5a:c4:f5:86:ba:27:
                    58:8b:e1:fa:d2:c1:2c:9a:84:db:02:3f:a6:fe:6e:
                    91:2c:a2:07:a1:93:b3:d0:12:f6:84:87:77:35:0d:
                    67:55:89:bb:6c:1f:b0:4b:86:2b:19:68:36:ff:25:
                    1b:5c:67:ad:f6:d6:2f:68:15:72:e5:09:09:06:30:
                    29:c4:0b:b3:e9:53:b0:56:f3:de:e9:db:58:fe:d5:
                    59:ec:3a:b4:18:b3:c1:9c:c4:67:a5:5e:8b:1e:2e:
                    39:9d:5d:7b:a9:45:5a:72:d3:98:b0:8d:d8:a0:b9:
                    eb:e3:14:0c:47:e8:d2:ff:5f:f8:f1:20:94:a6:b8:
                    e1:2d:54:25:6e:4d:21:a0:d6:ff:68:45:b6:5b:b9:
                    44:54:79:3f:d0:48:e1:33:07:0f:ba:d6:6c:62:c4:
                    b4:87:af:c4:21:8d:19:d2:96:ab:79:c9:16:5e:5c:
                    f6:44:0a:67:6c:de:7a:29:17:62:f4:e3:9f:4f:34:
                    d9:52:c5:56:a8:74:eb:89:f1:d9:d3:5b:87:58:6b:
                    87:ce:7a:2f:25:e9:11:dc:7a:80:2a:e0:16:e8:c8:
                    c3:24:38:8e:aa:ba:52:69:0b:7c:b7:0a:d4:b6:7b:
                    b0:cb:35:54:20:58:c0:de:d1:16:af:bf:20:f0:6a:
                    a8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:86:A1:9F:22:1F:27:FC:8D:A2:8E:8E:60:BF:5F:FC:65:69:D2:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8/2681e094-c5f0-376d-abe2-47d9d9497306.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8/1cfae3ba-0f53-428a-93d8-6885c64c1fd8.crl

            X509v3 Authority Key Identifier:
                keyid:41:1E:04:61:12:96:D0:AD:5A:D3:F3:EC:9E:91:3C:E7:F3:1D:22:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.180.216.0/22
                  208.71.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:3e:ae:fd:83:c9:bf:41:8a:ff:5c:7e:0c:4c:d3:06:13:50:
         28:48:f3:6f:e1:0d:95:3e:09:8f:a8:1d:67:6c:06:17:50:d9:
         ff:73:b4:76:77:93:fc:49:cf:e7:63:42:92:a4:f8:f7:8c:e8:
         fe:dc:a2:89:1b:d3:db:18:5d:b7:2c:1b:8b:bd:a8:06:a7:ed:
         5a:70:f8:b7:56:9c:07:90:b2:a5:31:08:fa:f0:70:4c:b1:2e:
         c6:7a:3c:ed:7b:8f:06:bc:47:8c:5d:8e:7c:0f:2c:a8:b0:d9:
         61:2a:93:e5:c8:86:4c:b6:9d:53:f2:0f:ff:86:64:96:71:6d:
         98:36:91:1b:cb:04:ec:ad:19:f3:de:98:e5:e4:8c:a1:46:f8:
         24:0e:77:ff:9a:17:80:c3:e0:f3:93:04:e7:f3:1c:a1:43:b9:
         fd:be:34:6b:18:77:c9:75:b9:82:b0:c8:32:b3:fb:2e:b3:62:
         08:8a:07:0b:bc:c0:03:f7:e1:8a:11:58:47:88:7a:5f:f4:eb:
         ed:d5:78:1a:7a:c7:41:8a:09:db:d5:f0:03:aa:0c:7c:a2:41:
         62:53:29:9e:e9:7d:c0:c2:4d:7a:81:8e:26:8d:e6:4f:45:bd:
         71:c2:3e:6d:8e:af:5a:7e:fe:7a:00:78:f9:75:fa:2c:29:99:
         6f:12:5e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:53:20 2026 by rpki-client