Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/9d01d05e-d624-32fd-ba90-3e0d8ab7002a.roa
File:                     9d01d05e-d624-32fd-ba90-3e0d8ab7002a.roa (raw, json)
Hash identifier:          2pG57Kurq+43W7PqvgD2kwBdQvkTjZT2xcgmJOo7evo=
Subject key identifier:   7D:17:A9:FA:04:E1:5C:C4:99:00:A5:2F:6F:7E:7C:1A:BA:73:65:23
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584F07D77744A37C07E5DAEE2D8A
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/9d01d05e-d624-32fd-ba90-3e0d8ab7002a.roa
Signing time:             Tue 01 Sep 2026 13:00:12 +0000
ROA not before:           Tue 01 Sep 2026 13:00:12 +0000
ROA not after:            Mon 30 Nov 2026 14:00:12 +0000
asID:                     62044
IP address blocks:        205.220.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:07:d7:77:44:a3:7c:07:e5:da:ee:2d:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Sep  1 13:00:12 2026 GMT
            Not After : Nov 30 14:00:12 2026 GMT
        Subject: CN=a3d58603-4aa1-4e1a-a097-9530a5332dea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e2:9c:ba:d6:47:b3:41:58:e7:65:86:d3:64:
                    b7:a6:03:a2:16:c7:f0:0d:62:8e:6c:43:dd:1a:7b:
                    74:d7:56:0e:61:e4:74:ee:09:14:be:13:a2:75:e5:
                    50:ed:fe:93:8a:cd:77:7e:0a:be:87:43:e3:f7:cb:
                    74:8c:7e:f4:b9:c3:e1:a5:2a:42:e3:74:8d:2a:a9:
                    30:b9:21:48:f8:a9:be:b0:aa:91:3a:f6:bd:19:0f:
                    06:ed:4c:57:80:f6:c4:dd:75:58:ed:d5:63:94:95:
                    51:a9:3a:80:75:01:05:db:e7:1f:5a:79:d2:ce:3c:
                    e5:b5:ea:92:28:f5:9b:ce:de:2b:0c:65:d1:36:c4:
                    57:dd:fd:9e:30:97:83:c1:2e:bf:33:2d:8e:7f:81:
                    04:c1:13:c1:2f:c3:e7:ef:5a:be:0f:6b:19:56:a3:
                    56:ed:12:e9:8c:6d:80:c3:3f:4a:df:57:df:33:2e:
                    56:01:da:5f:61:b1:32:6d:b0:3e:43:40:fe:23:9c:
                    b0:d2:f1:48:a7:b5:29:be:e9:5a:56:2e:96:af:9f:
                    69:9f:7a:2d:cd:59:25:7d:fd:55:f0:80:a8:96:7e:
                    eb:e6:36:41:7a:f6:87:ca:d5:c0:96:fe:26:97:62:
                    22:af:af:c4:6d:e9:d8:d0:0b:43:ac:aa:30:58:22:
                    71:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:17:A9:FA:04:E1:5C:C4:99:00:A5:2F:6F:7E:7C:1A:BA:73:65:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/9d01d05e-d624-32fd-ba90-3e0d8ab7002a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.220.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:dd:6c:74:b7:73:91:ef:8f:65:1e:b9:32:23:9f:26:40:50:
         b4:36:d3:d1:d9:e4:77:ac:86:86:98:8d:8b:40:67:63:ff:68:
         d8:24:a0:21:11:9f:dc:ed:38:56:76:80:45:75:27:01:bf:55:
         4f:e7:1c:4a:4b:ed:2b:54:e9:a5:60:73:89:64:f4:ca:16:ef:
         4e:f1:4b:72:54:17:ab:af:4d:10:60:81:86:0f:c1:ed:e1:23:
         58:43:ea:9e:c2:9d:9b:fd:ec:a0:c1:58:ef:f8:bc:07:bd:61:
         93:94:e9:df:08:de:62:8f:89:77:64:20:65:47:b8:75:38:47:
         ea:7b:ee:79:4f:46:fe:d2:bb:2c:d7:34:bf:ec:3a:16:d6:3a:
         5b:df:73:64:a1:a1:83:41:92:40:29:b2:55:71:1c:41:4b:66:
         ed:35:6a:30:6b:6a:ea:06:2b:04:85:d6:91:9d:be:d1:86:73:
         62:bb:1a:7c:15:ad:10:a0:e5:39:52:fb:a6:a1:64:de:11:43:
         88:50:40:b6:2d:d1:d7:54:9c:96:71:10:7c:e7:83:45:ef:c3:
         ca:3b:35:1e:4c:a1:2c:f7:63:f7:c2:fe:d3:5f:65:bf:7a:04:
         55:38:9a:1b:ab:36:62:1a:f3:75:59:f3:0b:ac:7e:df:0d:0b:
         71:d2:71:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 15:01:49 2026 by rpki-client