Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/2109739e-057c-3958-a0c2-457b9c912572.roa
File:                     2109739e-057c-3958-a0c2-457b9c912572.roa (raw, json)
Hash identifier:          O21XPcF3JZj6GjesblYeUweMIamGGq72ZfwiNRZY2hI=
Subject key identifier:   0B:4D:2A:1D:22:34:0F:F9:58:33:03:A2:43:F3:5F:CA:02:83:6B:E5
Certificate issuer:       /CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
Certificate serial:       010D0C9F4328584F36007286508541A94F0B0960
Authority key identifier: C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/2109739e-057c-3958-a0c2-457b9c912572.roa
Signing time:             Fri 18 Sep 2026 01:50:00 +0000
ROA not before:           Fri 18 Sep 2026 01:50:00 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36103
IP address blocks:        204.225.16.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:36:00:72:86:50:85:41:a9:4f:0b:09:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
        Validity
            Not Before: Sep 18 01:50:00 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=93470856-232b-4bae-addc-41096917884b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:42:17:f3:ef:0a:6b:a7:5f:f3:08:99:a3:bd:
                    13:8f:10:a5:85:c4:63:80:24:a1:45:f6:7b:2a:cb:
                    29:7e:e0:90:3b:9a:47:93:fb:31:34:e5:36:d3:09:
                    37:01:69:ad:ed:13:4c:1c:98:14:17:4c:38:69:e8:
                    d3:00:4b:13:67:1f:2d:5f:f3:ed:99:14:aa:71:87:
                    77:61:a6:84:72:0b:6a:ec:b4:9f:af:ae:c4:d6:f6:
                    c5:fe:24:4b:70:bd:d3:d5:39:74:3b:e6:9d:2b:fd:
                    41:05:56:a1:52:32:94:a4:e9:2f:ed:9e:94:2d:d7:
                    15:51:e6:65:7c:96:9c:1f:18:9b:3b:d9:b4:90:00:
                    28:9b:45:67:a3:b4:d6:39:e9:48:2c:3c:b3:38:4b:
                    93:74:f1:df:83:80:2b:9a:1b:11:73:d2:e1:68:26:
                    ea:ff:b5:8a:19:4c:3e:11:41:fa:ff:13:8b:5e:06:
                    56:e8:94:a4:b2:d3:2a:55:b5:8d:50:55:db:11:7d:
                    e3:62:22:46:03:59:07:b7:50:32:29:93:93:bc:e5:
                    74:09:ae:fa:27:5d:50:8b:d3:cb:cc:ee:3f:b0:bc:
                    06:3e:1f:a5:2e:2c:cc:dc:ca:81:f9:f9:16:61:da:
                    40:e2:82:cb:c9:79:c7:fe:70:71:a1:4e:15:67:af:
                    c4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:4D:2A:1D:22:34:0F:F9:58:33:03:A2:43:F3:5F:CA:02:83:6B:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/2109739e-057c-3958-a0c2-457b9c912572.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl

            X509v3 Authority Key Identifier:
                keyid:C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.225.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:04:e9:09:4f:0b:62:9a:98:eb:3a:14:76:5b:5e:4c:af:3c:
         81:cc:28:66:91:fd:43:3e:53:ce:bf:39:13:2d:33:d9:73:0d:
         6b:4c:a9:5c:a9:96:5c:c8:c0:66:26:72:91:f7:e1:26:3f:37:
         e2:14:2d:37:d8:e9:d7:78:df:95:eb:43:cb:c5:5c:fe:90:bd:
         09:4a:3d:ae:f5:15:c2:fa:85:49:29:bf:16:e5:57:1c:ac:48:
         d4:b0:f9:9c:a1:df:cc:dc:db:c4:a9:37:02:62:79:2a:3f:11:
         f6:d0:78:f9:4e:b5:f0:b3:79:cb:15:ef:8b:0a:c9:8e:da:fe:
         ae:84:38:b9:46:41:4e:29:f4:26:69:78:d8:44:be:6e:c3:c9:
         f5:b7:ad:25:49:4b:ca:c8:c1:54:10:6f:74:2b:c4:2b:39:62:
         c0:5b:73:d4:4c:89:8b:47:58:2b:82:31:e6:0d:70:47:7f:4e:
         28:57:c5:75:de:5f:b4:ec:2f:ee:62:bf:ba:01:3b:84:b1:0e:
         7c:e4:cf:7e:61:76:d7:b5:97:ba:31:27:42:78:b0:8d:e8:43:
         9b:c6:cb:39:3a:62:b6:db:19:bd:f0:9c:f6:0c:55:67:3c:57:
         81:d8:fb:8d:85:f5:ba:e4:c9:9c:1a:33:c4:2f:cd:5d:4f:2f:
         46:5e:56:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 11:41:17 2026 by rpki-client