Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/06679cae-c098-3299-988e-84bbbba7ece9.roa
File:                     06679cae-c098-3299-988e-84bbbba7ece9.roa (raw, json)
Hash identifier:          tDJBiqmSLOrllL0GrO9CkL+GmkhVHfupc3S4SVwcbcQ=
Subject key identifier:   F7:23:06:66:2C:E2:65:9E:1F:E9:20:F8:7E:1F:B9:00:DE:28:0C:45
Certificate issuer:       /CN=4f969783-3e35-479d-b0e7-e3dac0caf9f9
Certificate serial:       010D0C9F4328584F41129FE883A4C23B15BB8400
Authority key identifier: 6F:92:C9:1A:75:B4:6C:E7:A5:1E:A5:24:23:16:63:55:0D:03:40:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/06679cae-c098-3299-988e-84bbbba7ece9.roa
Signing time:             Tue 22 Sep 2026 01:00:12 +0000
ROA not before:           Tue 22 Sep 2026 01:00:12 +0000
ROA not after:            Mon 21 Dec 2026 02:00:12 +0000
asID:                     21669
IP address blocks:        209.212.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:41:12:9f:e8:83:a4:c2:3b:15:bb:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f969783-3e35-479d-b0e7-e3dac0caf9f9
        Validity
            Not Before: Sep 22 01:00:12 2026 GMT
            Not After : Dec 21 02:00:12 2026 GMT
        Subject: CN=75198dbc-61bf-4872-95b8-e2226f2eaa03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:48:bd:83:af:97:d8:b1:75:ae:54:c1:4d:36:
                    c8:03:e5:cc:95:25:2a:e7:76:2a:6a:79:e9:ff:a4:
                    dc:f7:41:e9:c3:9e:3e:20:58:c2:4e:22:9a:ca:dc:
                    1b:9f:01:93:50:26:29:10:72:3d:0a:7c:7c:92:9b:
                    9a:cc:ce:b5:2d:e1:6f:52:72:a3:6e:69:87:1e:51:
                    39:f4:e0:d8:60:ba:99:1d:66:49:75:fd:f1:74:b7:
                    d6:d4:58:8a:e5:16:2e:92:ad:f3:bb:dd:46:d6:d0:
                    29:15:46:7e:7f:09:33:b3:39:33:1e:43:26:ed:b3:
                    fc:f8:cb:39:f8:e4:38:63:a8:ea:c7:28:3b:83:e8:
                    29:77:93:64:6d:cb:61:32:b8:15:24:ee:64:b7:be:
                    6f:89:d9:26:30:66:5d:23:f6:d2:bf:97:27:03:ef:
                    5b:f0:c8:52:d9:b3:52:45:47:97:24:fc:c6:01:61:
                    e3:63:75:57:6a:09:22:74:f7:99:19:8a:20:b4:ec:
                    0d:4f:fc:a8:16:12:14:ed:b7:84:78:8b:1f:fc:b0:
                    aa:97:36:b9:32:be:b7:5d:2f:62:75:7c:30:29:2d:
                    1a:3e:ba:ed:7a:ac:ac:54:b6:f9:70:aa:a5:20:38:
                    33:3b:5e:ce:ba:5e:af:15:52:e4:d4:b5:97:46:cc:
                    f8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:23:06:66:2C:E2:65:9E:1F:E9:20:F8:7E:1F:B9:00:DE:28:0C:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/06679cae-c098-3299-988e-84bbbba7ece9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.crl

            X509v3 Authority Key Identifier:
                keyid:6F:92:C9:1A:75:B4:6C:E7:A5:1E:A5:24:23:16:63:55:0D:03:40:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.212.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:e1:63:3f:02:b1:c8:00:a4:0f:09:d0:64:ab:20:e6:7d:14:
         65:eb:b7:68:9a:75:66:fe:85:7a:2c:09:9e:77:62:fc:2f:b7:
         24:5b:30:a4:26:17:7d:35:89:b1:b6:08:fd:95:c7:b1:86:21:
         2f:7d:99:dd:f9:34:b8:5d:a0:3c:b1:6d:0c:93:5b:fe:f7:3c:
         37:27:fd:e4:53:d4:6b:01:71:65:7f:d5:10:81:d9:ff:8a:87:
         e6:5e:4c:9e:59:72:88:a2:52:b5:eb:ee:61:19:d2:1c:44:6f:
         c2:3e:47:15:98:6c:78:63:70:4f:cb:c5:a9:de:63:fd:e8:17:
         92:6e:72:39:40:ba:17:30:23:c3:27:6d:cb:77:75:84:5b:ed:
         3a:21:99:78:6a:32:ff:9e:a6:74:80:56:9f:45:17:a7:f8:6c:
         72:65:1e:46:08:59:80:74:c6:fb:d2:65:fe:a5:12:44:39:9c:
         a8:b5:0e:42:52:99:de:aa:c7:65:d0:dd:e9:e5:3c:a0:d5:2e:
         54:e6:56:9c:86:3a:29:cc:71:4a:0c:a0:5c:a6:8f:d7:f1:2d:
         11:ff:12:bf:92:cd:7f:be:61:08:67:50:87:6f:ee:4c:8a:29:
         45:e8:f9:04:75:be:bd:ba:a6:db:8b:4f:c4:77:51:cb:d9:33:
         d2:8e:07:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:17:29 2026 by rpki-client