Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/0c33962b-5ce1-38e6-a0ff-88998cce11bd.roa
File:                     0c33962b-5ce1-38e6-a0ff-88998cce11bd.roa (raw, json)
Hash identifier:          JhF7dOQrui0MzclCzXPiFu17orRt+ypXLlLcgbOXkQE=
Subject key identifier:   71:61:41:C1:70:CF:0F:57:A7:F1:22:4D:F7:2D:2B:28:0D:49:6E:53
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584EAF235167FCD2D43D5DDC8940
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/0c33962b-5ce1-38e6-a0ff-88998cce11bd.roa
Signing time:             Fri 31 Jul 2026 18:26:08 +0000
ROA not before:           Fri 31 Jul 2026 18:26:08 +0000
ROA not after:            Thu 29 Oct 2026 18:26:08 +0000
asID:                     6559
IP address blocks:        204.84.226.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:af:23:51:67:fc:d2:d4:3d:5d:dc:89:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jul 31 18:26:08 2026 GMT
            Not After : Oct 29 18:26:08 2026 GMT
        Subject: CN=315724d8-bd3b-4b9b-b984-be09707a7620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:89:cd:e7:4f:1c:fd:b2:a7:a2:73:a4:e4:7a:
                    b4:34:fd:10:2c:2f:43:25:c8:8e:f6:06:6a:0b:51:
                    a3:6f:a1:a2:fe:3d:8b:23:05:16:b7:1f:a3:76:36:
                    1a:c1:49:63:9f:cc:7d:af:46:05:eb:77:46:a5:be:
                    2e:5a:dd:37:cb:99:b4:f1:89:8d:8d:c6:e1:b6:1e:
                    45:c0:0c:86:17:ba:32:98:61:be:06:b7:71:48:d4:
                    19:c8:8b:c7:1e:b2:63:f2:3f:9a:97:cb:d2:02:d5:
                    64:81:c7:08:33:ba:56:d5:81:4f:ab:14:41:51:bb:
                    00:73:c2:0f:6b:28:c2:a2:e4:41:16:ab:c7:cd:c8:
                    fa:2d:6e:33:78:34:ac:00:e1:dd:d2:a3:02:74:40:
                    c1:db:ee:b5:86:8c:1c:b0:d7:8f:8e:37:4b:1e:27:
                    a0:cd:aa:61:3d:29:d8:8e:d0:62:b1:60:45:69:4d:
                    60:9b:be:25:ef:82:e1:38:2e:6d:21:88:b4:78:fb:
                    be:77:f7:59:f6:70:bf:c8:f6:ec:ff:16:ba:f7:bd:
                    2c:e5:67:28:95:77:04:d3:54:35:71:53:35:d9:70:
                    de:5b:b1:e8:b6:26:22:43:63:53:ed:86:b3:68:51:
                    9d:3b:b6:30:e6:0f:73:7b:d6:2a:4f:2b:0f:b8:af:
                    cb:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:61:41:C1:70:CF:0F:57:A7:F1:22:4D:F7:2D:2B:28:0D:49:6E:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/0c33962b-5ce1-38e6-a0ff-88998cce11bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.84.226.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:51:73:fe:a0:b3:8e:13:73:7e:8b:86:47:21:f9:ca:1f:80:
         48:41:ba:f5:d7:f9:8d:35:da:59:39:54:57:c8:3b:f4:d3:3b:
         8b:b7:6f:b0:3d:b6:f4:2d:6f:99:ed:cc:51:79:44:ca:89:be:
         ce:da:d7:52:ab:02:47:30:1a:d6:bf:96:01:41:f7:6c:e4:bf:
         1f:59:1b:81:4b:8a:67:ac:55:e5:35:c4:f9:ad:49:aa:f5:41:
         67:ae:2a:4e:31:f4:9b:73:77:26:a1:c2:65:d3:37:a9:79:18:
         33:89:84:79:a5:67:43:29:8d:5a:fe:c0:84:ac:02:64:3d:7f:
         25:a4:91:ac:7a:53:58:91:f4:78:4c:aa:dd:62:99:5e:17:50:
         19:e1:a7:9f:84:c9:5f:b8:30:b9:47:d8:13:bc:c5:35:9e:27:
         17:cb:9c:43:34:5a:3f:7c:05:8b:69:ae:6b:46:e3:07:1a:1e:
         13:55:90:1b:d5:b5:6b:6b:24:b2:6e:cf:8c:50:db:b0:23:ff:
         ce:99:53:31:78:c7:da:4b:a6:89:ec:58:65:1b:8b:0b:9e:5d:
         e6:b9:0f:c7:9a:c0:13:48:55:b9:a1:70:91:3e:53:ae:38:f4:
         88:a0:d5:0a:76:1d:ba:ef:46:4e:e5:01:6d:d8:c4:c4:fd:4e:
         a1:26:ee:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 18:00:56 2026 by rpki-client