Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6f434037-fdf4-3dcb-a3c3-eb3f696e11a2.roa
File:                     6f434037-fdf4-3dcb-a3c3-eb3f696e11a2.roa (raw, json)
Hash identifier:          3WIy2wPgDjtYgWzAy0Isp4hg/I9HxGJtQ5WssHbEZ0s=
Subject key identifier:   E7:EB:85:D3:44:E2:66:9D:21:CC:73:94:65:C5:59:7B:5F:3D:08:A0
Certificate issuer:       /CN=6063814d-5183-49de-90ee-84cbbecde422
Certificate serial:       010D0C9F4328584F4C3D44B9BB79992510DE8580
Authority key identifier: FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6f434037-fdf4-3dcb-a3c3-eb3f696e11a2.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     22251
IP address blocks:        204.25.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:44:b9:bb:79:99:25:10:de:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6063814d-5183-49de-90ee-84cbbecde422
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=084b6399-0732-4d9a-aad2-e169f4c82715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:38:0d:aa:46:6c:f2:c3:ac:38:60:99:82:8e:
                    42:57:90:57:95:54:8b:fa:cc:22:22:67:e6:2c:da:
                    3a:ed:9a:49:24:1a:4d:de:72:05:1b:bd:6e:dc:e7:
                    f4:26:3a:89:6a:14:05:58:45:b7:3f:63:ea:af:a4:
                    f3:c8:7c:2e:a6:13:6d:f6:e2:7d:3a:82:cd:e3:fe:
                    9d:d9:b5:0d:dd:20:3e:1f:e9:c5:50:7f:e8:d6:da:
                    bb:2c:47:9f:04:81:98:7e:dd:d2:a8:46:94:71:ea:
                    3b:b3:2a:94:4a:73:1a:4c:0c:0b:22:5f:52:db:77:
                    2d:c6:00:72:8c:d3:74:87:66:5d:95:3f:37:c9:f5:
                    0e:e6:b6:55:12:d9:25:5c:1f:70:43:cb:b1:3d:82:
                    34:2b:0d:75:0f:e3:13:88:6a:e6:cc:24:6d:c3:d7:
                    a3:ce:34:f9:78:61:8e:8e:05:4a:92:d1:2e:d9:ec:
                    09:98:89:d4:90:57:49:57:12:fe:ed:d8:d0:54:f9:
                    6b:98:d4:dd:71:f6:98:b8:1e:4e:87:fc:ec:40:3c:
                    3b:b3:90:ec:ae:2e:f7:4d:ec:53:c0:ca:88:d0:13:
                    80:51:29:e2:1b:35:49:39:ee:e7:bf:59:8a:94:18:
                    31:54:98:51:99:04:cb:2e:a3:85:4d:d5:c5:87:5a:
                    c8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:EB:85:D3:44:E2:66:9D:21:CC:73:94:65:C5:59:7B:5F:3D:08:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6f434037-fdf4-3dcb-a3c3-eb3f696e11a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl

            X509v3 Authority Key Identifier:
                keyid:FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.25.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:c5:17:9d:1a:2c:0d:42:4f:d9:7e:2f:bc:33:ab:cb:02:24:
         8a:09:df:2d:c1:fd:ce:a6:e5:63:db:32:fc:d1:ae:e7:cc:45:
         de:f5:4a:df:65:e6:db:0d:a8:59:9f:31:77:a8:7c:67:6d:bc:
         0b:ed:5b:e6:b2:4d:28:df:e2:67:26:3e:2f:d1:ce:c7:09:c6:
         56:6f:75:dd:0a:68:0f:f1:db:e2:c8:cf:c4:50:0f:3e:34:bf:
         eb:07:91:17:3a:49:6e:a3:2b:20:20:75:65:63:d2:11:7d:fd:
         65:23:37:43:db:a7:bc:34:3a:38:aa:89:1e:f2:5f:72:6d:4d:
         a2:ed:e1:0e:85:0d:24:8c:df:ec:65:79:a0:37:ce:fc:d3:45:
         7e:10:2c:68:be:d1:b4:77:c4:57:47:44:60:26:ee:4a:dc:e0:
         78:95:6b:36:c0:ed:b6:4a:61:41:be:5f:a1:dc:0c:50:62:d1:
         fc:ba:94:41:00:c0:09:20:98:34:18:e1:25:2e:c2:c9:3e:31:
         b1:2f:68:83:15:72:7a:4e:7c:84:2c:d1:71:d0:93:cb:03:53:
         5a:fd:13:68:79:3b:89:86:04:cf:05:f3:3f:f2:ce:85:5b:cf:
         1f:fd:91:32:5f:4e:76:ab:af:5c:dd:a8:ac:00:c3:6a:e1:58:
         05:ec:17:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:23:46 2026 by rpki-client