Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5/b54a693d-0a92-3463-b2ac-78345b5e831c.roa
File:                     b54a693d-0a92-3463-b2ac-78345b5e831c.roa (raw, json)
Hash identifier:          PSVVmnEy4mhpsUFRZqIU+Fv38b6TZvpZDjEpklpihCg=
Subject key identifier:   90:16:8A:98:B4:AF:38:D1:4F:2F:5C:81:B1:46:0E:15:DB:CD:26:82
Certificate issuer:       /CN=22b1996e-371f-42c0-b515-e2f8763ed7c5
Certificate serial:       010D0C9F4328584EFE12135247409D9B54AD7B00
Authority key identifier: A3:7E:3C:90:27:87:6C:DF:A2:A6:6F:B5:1A:66:80:0B:4E:8C:D1:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5/b54a693d-0a92-3463-b2ac-78345b5e831c.roa
Signing time:             Sat 29 Aug 2026 01:00:12 +0000
ROA not before:           Sat 29 Aug 2026 01:00:12 +0000
ROA not after:            Fri 27 Nov 2026 02:00:12 +0000
asID:                     5650
IP address blocks:        206.168.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5/22b1996e-371f-42c0-b515-e2f8763ed7c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5/22b1996e-371f-42c0-b515-e2f8763ed7c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fe:12:13:52:47:40:9d:9b:54:ad:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22b1996e-371f-42c0-b515-e2f8763ed7c5
        Validity
            Not Before: Aug 29 01:00:12 2026 GMT
            Not After : Nov 27 02:00:12 2026 GMT
        Subject: CN=1e60b73c-337c-40df-ba34-614b4065a105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f6:4d:ca:1f:88:86:a6:b8:87:27:e5:78:8f:
                    c5:59:1c:78:77:26:44:97:ba:e4:01:cc:0f:5b:2c:
                    02:95:03:fd:25:88:8a:fb:a8:12:8c:cf:94:0b:62:
                    46:92:0e:b1:71:72:d3:cf:0b:1d:67:45:0a:0c:d2:
                    66:e3:46:75:1d:49:1c:c0:d9:e0:33:36:56:04:f1:
                    c2:0d:ca:2e:b2:96:bd:e5:d5:71:64:fa:5a:b4:70:
                    31:d9:d9:1b:64:3f:69:17:81:4b:86:e8:56:9a:99:
                    78:1f:65:57:56:c1:69:10:d8:72:99:1f:3b:1f:dc:
                    7f:e7:0f:5f:11:c2:e3:6b:b0:a7:8a:80:e7:52:01:
                    d4:43:8d:5f:31:59:db:27:5a:4b:bf:86:25:f2:60:
                    f9:86:3b:6e:fb:6d:00:ef:ad:4a:50:32:f9:ef:06:
                    d4:be:d2:df:38:3b:70:e6:cd:fa:87:d9:2e:69:8b:
                    dc:8b:27:ab:5c:b8:7f:b7:e5:18:5b:5f:61:8c:3d:
                    e7:f6:58:88:87:03:12:2f:d5:c4:f1:a4:98:cd:07:
                    e6:bf:41:8c:c6:d6:58:99:5e:3d:dc:a6:52:7d:d5:
                    28:06:3d:ab:37:5a:c2:f6:10:3c:de:46:2f:bf:ee:
                    76:77:a1:25:4b:e1:8e:13:47:6b:17:69:f4:4e:50:
                    a8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:16:8A:98:B4:AF:38:D1:4F:2F:5C:81:B1:46:0E:15:DB:CD:26:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5/b54a693d-0a92-3463-b2ac-78345b5e831c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5/22b1996e-371f-42c0-b515-e2f8763ed7c5.crl

            X509v3 Authority Key Identifier:
                keyid:A3:7E:3C:90:27:87:6C:DF:A2:A6:6F:B5:1A:66:80:0B:4E:8C:D1:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:81:61:96:c8:cf:a1:33:ab:dd:38:ed:6f:80:3a:e0:20:9d:
         8a:bd:25:f7:49:58:fa:eb:10:77:4c:28:8b:c2:7b:39:4e:38:
         fe:87:c6:69:1f:06:e9:7e:7b:a1:48:2b:1c:ac:15:41:1a:f0:
         ac:57:7d:27:5e:07:d4:a4:85:44:b1:11:61:3e:72:4e:13:c6:
         2c:fc:69:cd:42:fd:95:b4:a0:47:88:bb:c0:59:31:c4:37:66:
         2c:47:d6:d8:a0:80:d5:e2:ae:58:bb:6d:4a:32:d6:54:83:d6:
         5f:85:62:73:20:7d:b8:ff:e2:d0:e2:09:d4:e2:90:b2:a3:05:
         da:3f:a3:61:c6:60:ac:bc:3a:c0:3d:da:53:6b:e9:14:bf:b6:
         5f:0a:53:43:ae:f0:a3:54:ff:d2:1e:02:a0:28:7f:ee:2e:19:
         d3:81:37:47:74:51:6b:4f:08:0a:02:26:74:a5:c1:71:47:be:
         bb:b5:72:39:79:3c:05:66:2c:b0:e1:c3:2e:1b:67:51:0f:f0:
         f4:06:92:46:8d:4c:63:ea:45:6d:e6:cb:d4:90:7e:12:fa:f7:
         2a:92:dd:79:0d:b4:66:a8:ab:c7:f6:e6:c6:1a:4f:b8:6c:9d:
         1d:1b:a8:c0:ac:26:5a:89:75:fb:be:3c:ab:1b:ee:dc:e5:1a:
         94:8c:f3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 02:58:06 2026 by rpki-client