Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b9c7c552-f63b-4d16-a564-9e63d1c2343f/0633162e-b520-3b70-8fd6-7288024763a1.roa
File:                     0633162e-b520-3b70-8fd6-7288024763a1.roa (raw, json)
Hash identifier:          OpjiHHqcqXUkxgjNRSJsFbzgnWVbUrt9h1v5Kvejamk=
Subject key identifier:   FB:DE:93:63:6E:4A:38:57:6E:18:8C:CE:B5:32:90:67:93:BD:AA:FE
Certificate issuer:       /CN=b9c7c552-f63b-4d16-a564-9e63d1c2343f
Certificate serial:       010D0C9F4328584F07DEBD6679798956DAA0EA40
Authority key identifier: AC:37:3B:3A:55:EB:72:D9:3B:A9:BD:91:33:17:37:73:78:BD:97:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b9c7c552-f63b-4d16-a564-9e63d1c2343f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b9c7c552-f63b-4d16-a564-9e63d1c2343f/0633162e-b520-3b70-8fd6-7288024763a1.roa
Signing time:             Tue 01 Sep 2026 13:14:54 +0000
ROA not before:           Tue 01 Sep 2026 13:14:54 +0000
ROA not after:            Mon 30 Nov 2026 14:14:54 +0000
asID:                     0
IP address blocks:        204.154.64.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b9c7c552-f63b-4d16-a564-9e63d1c2343f/b9c7c552-f63b-4d16-a564-9e63d1c2343f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b9c7c552-f63b-4d16-a564-9e63d1c2343f/b9c7c552-f63b-4d16-a564-9e63d1c2343f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b9c7c552-f63b-4d16-a564-9e63d1c2343f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:07:de:bd:66:79:79:89:56:da:a0:ea:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9c7c552-f63b-4d16-a564-9e63d1c2343f
        Validity
            Not Before: Sep  1 13:14:54 2026 GMT
            Not After : Nov 30 14:14:54 2026 GMT
        Subject: CN=934a3028-2abe-4907-924e-b22e14992708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:78:fe:0b:7d:12:92:8d:f1:9a:98:55:a3:d3:
                    e9:59:36:ff:1f:ba:63:ca:51:d2:df:0f:92:ca:f0:
                    6a:d4:0c:3e:b3:37:66:5b:41:56:66:f6:dd:58:11:
                    9f:90:78:cd:7f:0d:ce:b7:00:24:8a:70:64:a8:cc:
                    a0:26:26:15:8d:63:58:8d:e0:61:13:c0:95:a7:7b:
                    2a:06:6a:30:fc:9b:90:f1:fc:db:03:c4:08:5f:fc:
                    fd:78:e9:13:8a:42:85:66:11:3b:95:fc:a7:c1:5e:
                    78:40:7b:e6:9d:84:e6:bf:63:f5:71:d6:d0:3f:0a:
                    8e:48:5e:65:49:fc:a2:d2:66:dd:6d:b8:9c:0b:65:
                    95:67:62:e1:f9:0b:a0:cd:a9:df:b4:49:52:3f:2b:
                    f5:bd:7a:53:bd:e7:00:6e:1e:1e:6d:15:39:97:41:
                    22:24:3f:d6:8d:9d:28:6a:4e:99:eb:6f:bb:90:e5:
                    05:0d:7a:52:63:88:39:99:22:94:f7:fb:49:ac:a9:
                    74:a4:ea:41:c9:bb:dc:21:3a:ae:07:d4:b7:6f:d2:
                    bd:68:e1:1c:4a:a0:36:34:0b:d0:f4:38:ed:2c:1f:
                    ac:85:9c:f4:ff:01:e9:91:93:57:52:fb:01:3f:c3:
                    26:bf:75:bb:d9:37:dc:96:2b:53:c7:8f:75:ec:1d:
                    20:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:DE:93:63:6E:4A:38:57:6E:18:8C:CE:B5:32:90:67:93:BD:AA:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b9c7c552-f63b-4d16-a564-9e63d1c2343f/0633162e-b520-3b70-8fd6-7288024763a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b9c7c552-f63b-4d16-a564-9e63d1c2343f/b9c7c552-f63b-4d16-a564-9e63d1c2343f.crl

            X509v3 Authority Key Identifier:
                keyid:AC:37:3B:3A:55:EB:72:D9:3B:A9:BD:91:33:17:37:73:78:BD:97:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b9c7c552-f63b-4d16-a564-9e63d1c2343f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.154.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:77:ae:66:88:92:8b:a5:fb:ab:c9:2a:04:e9:0a:a6:6a:aa:
         dc:9b:c4:25:ed:2b:59:f7:02:4e:1a:af:6e:38:5f:78:b1:70:
         34:6d:bd:c1:3d:d0:14:6b:f4:d0:6b:b0:da:b6:a4:63:11:89:
         04:7d:58:22:14:bc:26:5d:74:58:de:e9:6f:a9:09:b6:b7:b7:
         d5:fd:e4:03:a7:29:31:1d:ef:83:ab:b8:b7:43:d8:8e:90:b6:
         c7:18:c3:ee:dd:05:a1:df:ab:a4:b6:91:40:e1:71:35:47:2b:
         de:f9:21:8d:14:95:26:02:4b:40:8a:4a:f6:c5:c8:ed:45:35:
         3b:38:dd:31:f8:fe:d1:ab:04:40:db:1d:c1:8f:34:7e:42:21:
         b6:4c:70:e7:8d:65:37:b2:85:6e:c7:b6:72:1f:66:08:34:57:
         08:bc:c9:6c:9e:97:55:03:65:08:19:a2:bf:c0:a6:bd:94:05:
         7e:3d:2c:df:e6:70:f9:0d:c5:b9:4c:f8:03:a8:75:9e:d2:13:
         c5:b0:61:a6:29:98:40:df:4b:96:0d:a1:0e:3d:c3:35:29:4d:
         a9:08:f0:22:c5:81:5c:7c:88:09:51:62:77:e1:4c:0a:34:30:
         e0:cc:c9:29:87:d0:68:bf:2f:90:45:81:60:b5:0b:1b:65:70:
         07:f5:a7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 04:01:58 2026 by rpki-client