Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/2b6fef14-af15-32a2-8cc8-cffb8cc34ff4.roa
File:                     2b6fef14-af15-32a2-8cc8-cffb8cc34ff4.roa (raw, json)
Hash identifier:          BjW1VS0tmtxrCUyKOfbvwGvhvXGQhehUBnYAE2FYbUY=
Subject key identifier:   CA:94:21:71:CF:19:AF:6A:2A:A6:24:F4:EE:A5:D8:DC:74:D8:35:D8
Certificate issuer:       /CN=9e56bd91-cc8d-4a73-9597-17ab940b26dc
Certificate serial:       010D0C9F4328584F0AA2213C19EAD9F95938CD90
Authority key identifier: 8A:8D:80:97:0E:93:D1:8E:66:2B:7B:46:B0:2E:E2:40:45:6C:88:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/2b6fef14-af15-32a2-8cc8-cffb8cc34ff4.roa
Signing time:             Wed 02 Sep 2026 13:00:12 +0000
ROA not before:           Wed 02 Sep 2026 13:00:12 +0000
ROA not after:            Tue 01 Dec 2026 14:00:12 +0000
asID:                     140227
IP address blocks:        169.128.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/9e56bd91-cc8d-4a73-9597-17ab940b26dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/9e56bd91-cc8d-4a73-9597-17ab940b26dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0a:a2:21:3c:19:ea:d9:f9:59:38:cd:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e56bd91-cc8d-4a73-9597-17ab940b26dc
        Validity
            Not Before: Sep  2 13:00:12 2026 GMT
            Not After : Dec  1 14:00:12 2026 GMT
        Subject: CN=e47a4cee-9135-4247-9fcd-882e3a714df0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ab:0a:eb:1c:c7:5d:f1:eb:33:ea:30:e8:50:
                    39:a4:af:86:c8:5c:61:ea:02:0b:f6:73:8e:59:bf:
                    99:5f:f9:99:0c:6c:b9:cb:74:81:de:5f:64:b0:e5:
                    bb:36:e9:95:d6:42:5f:58:4c:a4:90:34:12:05:35:
                    e5:85:01:ba:97:40:44:d1:25:5d:4d:a0:4e:35:f6:
                    31:e9:b4:4b:01:e8:14:a5:6c:4c:4c:eb:6a:c3:80:
                    b3:2d:e3:0a:a3:c4:ab:c7:99:8f:82:34:66:79:26:
                    12:04:d6:78:d7:d5:60:1a:c8:96:ab:3a:94:79:be:
                    1f:9f:d9:5e:c3:af:33:8b:a1:75:c8:07:d6:84:9e:
                    3d:6f:00:cc:33:3d:7b:94:b6:c0:66:37:40:d4:68:
                    93:9f:d6:1b:d5:2c:86:aa:e5:6f:2b:71:e5:52:ea:
                    15:23:67:e1:16:76:3c:8d:a3:3c:a9:fd:81:f5:ee:
                    e5:a6:d5:05:8e:f2:c5:12:c4:11:00:8b:2c:35:2d:
                    da:44:03:66:f9:04:c4:06:60:d1:77:5b:ce:53:af:
                    36:f3:17:c8:2b:4f:ce:ac:15:27:c9:8c:13:98:93:
                    66:ee:12:1d:df:be:23:0a:da:3a:2e:a7:73:bf:64:
                    05:92:0a:b0:ce:2e:74:02:6e:4b:a3:d5:02:75:a8:
                    f0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:94:21:71:CF:19:AF:6A:2A:A6:24:F4:EE:A5:D8:DC:74:D8:35:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/2b6fef14-af15-32a2-8cc8-cffb8cc34ff4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/9e56bd91-cc8d-4a73-9597-17ab940b26dc.crl

            X509v3 Authority Key Identifier:
                keyid:8A:8D:80:97:0E:93:D1:8E:66:2B:7B:46:B0:2E:E2:40:45:6C:88:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.128.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:0e:94:80:9b:50:7a:fa:16:8d:f8:11:f5:01:6c:02:95:c7:
         a8:40:25:d4:c7:eb:fc:b9:3f:52:fa:cd:f5:a0:f7:02:2e:17:
         aa:bc:cc:d6:5d:3f:d7:9c:99:3c:7b:62:15:6b:36:83:f3:a3:
         d5:aa:90:48:ac:b7:fe:90:78:9b:e8:20:4d:53:4b:d7:57:bf:
         14:6a:6f:8c:22:16:75:0b:b7:4e:4b:6c:fd:ad:39:42:7f:c3:
         a5:13:db:ca:eb:a9:eb:02:af:eb:82:8b:e3:e2:1f:80:53:7f:
         76:4d:cb:0f:5e:69:76:86:7b:63:5d:76:3f:e9:29:ff:a5:2d:
         21:2d:f4:46:e5:a5:62:53:96:6d:a9:2e:f6:2e:e0:f8:a4:4e:
         bd:fb:27:bc:9d:43:29:61:7e:36:30:05:84:d3:24:c8:c5:52:
         c2:44:7a:64:24:a2:97:8b:9d:21:83:f1:d0:81:10:24:6d:43:
         a1:b5:37:ec:10:ea:af:9e:fb:4b:b8:1c:39:35:10:e6:f8:2d:
         d2:4d:c7:64:77:61:f6:a6:1c:7f:21:4f:a2:4e:74:95:f7:96:
         b4:25:c6:25:3e:3d:55:28:5e:01:af:67:eb:f4:ce:0e:96:8d:
         07:93:82:d3:4f:ee:fe:02:05:e6:19:d6:ab:1f:49:64:0c:31:
         4a:d6:1b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:56:21 2026 by rpki-client