Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/f69346df-03dd-36c7-913b-c2f96bc60de7.roa
File:                     f69346df-03dd-36c7-913b-c2f96bc60de7.roa (raw, json)
Hash identifier:          7Vh+3y+Tp3FerPuOcZGEI8DMUF7ZwFxmVUNrbKGibz8=
Subject key identifier:   29:1B:D9:85:44:53:35:4D:11:67:02:2C:23:5D:C4:75:55:CC:29:B4
Certificate issuer:       /CN=ecbe2caf-afd0-4edf-a743-b350c23e307d
Certificate serial:       010D0C9F4328584F4F082DFFD59CC5CC425FA440
Authority key identifier: C2:76:72:F8:A3:BA:3C:3B:04:3F:5B:E1:5B:0D:90:5C:D9:3A:58:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/f69346df-03dd-36c7-913b-c2f96bc60de7.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     36734
IP address blocks:        204.10.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:08:2d:ff:d5:9c:c5:cc:42:5f:a4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecbe2caf-afd0-4edf-a743-b350c23e307d
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=07ec81b9-3d41-4905-879a-8c498a0e74dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:45:f0:55:56:56:ab:f6:56:6a:6b:cb:a3:a5:
                    8c:f7:65:ae:b3:0f:b1:d3:90:a1:0c:5f:19:8f:e2:
                    2c:ec:e2:9b:93:cd:50:af:e2:6b:33:31:b1:6f:3a:
                    b0:47:48:44:ea:b3:9d:b9:c5:74:d8:d0:c9:de:ad:
                    33:c2:5d:55:bf:5c:de:5b:f3:77:33:0b:b4:b0:10:
                    1a:1e:75:bd:9e:67:aa:69:4f:0e:2e:42:0d:85:b7:
                    58:5b:ec:a4:5c:33:4e:1b:6d:e3:3a:1e:ae:a9:03:
                    07:09:3d:c1:d7:c1:83:c0:0a:de:35:87:3d:fb:dc:
                    14:ed:26:5d:78:71:4b:19:bc:d8:f5:f4:0c:78:aa:
                    fa:ca:2b:51:3f:e0:c5:ef:7c:4a:6f:9f:70:a2:91:
                    de:4a:cc:eb:84:98:c6:20:d7:46:6a:81:6b:f0:c2:
                    11:87:b5:0d:35:0e:d7:d1:74:41:65:a6:4d:15:63:
                    69:18:3c:60:7d:4a:b9:f3:72:31:73:57:24:7b:22:
                    a1:ce:5b:23:98:2c:36:04:4b:fc:65:42:d4:36:95:
                    43:1c:0a:46:13:71:cb:15:a8:61:f6:76:94:27:0e:
                    b5:27:13:6b:da:c7:8b:21:bf:eb:b1:fc:ed:f6:dd:
                    63:6c:dd:c7:bb:e6:fc:d4:44:5a:e1:7c:19:5c:4a:
                    ab:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:1B:D9:85:44:53:35:4D:11:67:02:2C:23:5D:C4:75:55:CC:29:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/f69346df-03dd-36c7-913b-c2f96bc60de7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.crl

            X509v3 Authority Key Identifier:
                keyid:C2:76:72:F8:A3:BA:3C:3B:04:3F:5B:E1:5B:0D:90:5C:D9:3A:58:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.10.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:c4:ed:5b:50:43:ea:92:65:f9:ab:22:61:a3:73:74:0b:8a:
         66:48:e1:9d:c3:2e:6f:6d:af:7d:8a:c4:3a:af:bc:d4:a4:0b:
         80:85:3c:d8:16:65:7f:75:50:99:06:28:0f:4d:c1:d8:a8:64:
         5b:90:05:3a:59:2a:95:19:4b:6d:00:f7:9a:02:bb:f3:30:e4:
         9c:e2:18:4b:6d:f3:be:ea:c8:e9:d5:18:b0:be:e5:91:3d:78:
         56:01:74:c0:71:af:41:dd:ec:23:17:f2:ac:c4:e6:8c:07:4c:
         1c:0f:48:1c:7f:8d:e4:0a:2b:ca:6d:9b:ac:ef:44:18:7f:5d:
         8c:73:7e:3d:35:d7:53:63:d0:78:ab:9e:e4:18:bc:3e:a0:6a:
         18:3d:6d:b7:64:20:6f:90:29:5d:31:02:33:40:f2:5f:98:0e:
         59:ca:94:94:c9:cd:84:71:4e:e1:18:32:b3:ac:42:bd:f6:d8:
         97:cc:cb:0f:22:5e:be:21:9e:22:75:73:85:78:79:da:df:0b:
         59:76:25:98:13:b4:d0:cb:8c:3c:74:cb:40:80:4f:fd:d1:fc:
         57:f3:6a:b9:1b:26:f9:94:8f:5c:80:07:92:9c:37:96:94:10:
         ba:b8:00:db:46:36:f5:85:b8:87:86:a7:e0:36:73:c4:3f:61:
         06:ce:12:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 18:39:07 2026 by rpki-client