Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/2d210020-a4d3-3c57-baf0-fa17a78a8e41.roa
File:                     2d210020-a4d3-3c57-baf0-fa17a78a8e41.roa (raw, json)
Hash identifier:          HMZaNJR97VNkYlsXyRk4ag8Wmml21n8kXPtse0yygfo=
Subject key identifier:   A4:12:66:A2:55:9B:A1:F0:4C:5D:E2:1F:2C:11:90:F5:52:7F:14:8B
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584F51D29EB56ADFEC86F6606200
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/2d210020-a4d3-3c57-baf0-fa17a78a8e41.roa
Signing time:             Mon 28 Sep 2026 01:00:12 +0000
ROA not before:           Mon 28 Sep 2026 01:00:12 +0000
ROA not after:            Sun 27 Dec 2026 02:00:12 +0000
asID:                     81
IP address blocks:        198.86.104.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:51:d2:9e:b5:6a:df:ec:86:f6:60:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Sep 28 01:00:12 2026 GMT
            Not After : Dec 27 02:00:12 2026 GMT
        Subject: CN=8b7da7ef-c95f-4c45-a3ee-d0a01a74c02a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a4:8c:9e:da:13:62:c6:64:a8:41:ff:89:54:
                    29:6d:f4:07:c7:c5:31:cd:89:ac:11:88:69:7c:15:
                    00:b6:4e:c9:6c:3e:b3:ca:0a:f4:88:29:3f:83:a7:
                    39:19:1e:c9:01:2a:46:f6:39:ef:28:1c:06:26:4c:
                    ba:53:62:72:3b:61:3f:54:15:bb:07:cd:33:71:17:
                    ec:b5:2a:f2:dc:47:7b:c4:d6:da:4b:81:c4:99:47:
                    d4:9e:e3:f2:6f:e0:dd:23:d0:d6:fb:1c:75:a0:8d:
                    0a:95:bf:fa:76:fd:52:1c:63:80:44:38:7c:8d:a4:
                    d7:5e:a7:f0:86:2e:e1:aa:22:aa:73:ec:4a:0a:fa:
                    30:49:e8:80:69:b4:07:c5:2c:90:9a:78:6e:6c:80:
                    1f:ae:b8:0a:85:95:18:26:87:f6:87:49:c2:1b:48:
                    ee:11:b8:76:5e:dc:dd:d5:b3:5c:6d:31:c0:91:9f:
                    83:37:96:79:ac:14:76:13:11:62:c9:f4:4a:45:3e:
                    6f:91:24:a7:91:a9:46:e1:5d:2c:89:51:c0:55:ae:
                    eb:d7:6f:c7:3a:9d:8e:c5:7f:0a:b7:45:03:a8:26:
                    1d:13:c2:6e:63:ee:18:14:8e:3b:40:f4:17:1e:ca:
                    fb:ee:f1:49:71:82:37:df:37:2b:42:6c:02:9c:99:
                    e3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:12:66:A2:55:9B:A1:F0:4C:5D:E2:1F:2C:11:90:F5:52:7F:14:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/2d210020-a4d3-3c57-baf0-fa17a78a8e41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.86.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:26:0d:14:06:e5:a7:83:7d:6d:1f:63:07:a7:ee:b2:07:48:
         d5:13:1a:26:eb:d4:08:90:95:b3:fc:49:1b:91:d8:65:01:7c:
         92:e4:8b:88:80:3e:49:bc:3b:55:46:fc:d7:e2:2b:c8:45:f9:
         79:c7:2c:69:7f:3e:0e:40:5d:6f:25:72:14:98:c0:56:96:06:
         aa:81:e2:95:18:76:eb:4e:47:98:4f:bb:41:33:c8:88:7d:bb:
         87:46:76:83:b0:d3:2e:27:c2:8f:4c:cd:8f:57:3d:7f:78:c0:
         7e:99:84:c9:d7:09:f6:e9:66:c2:6c:11:7c:e7:95:f8:40:5a:
         29:a2:f7:1b:a6:90:b1:84:02:33:6a:6d:f0:03:4a:18:e1:65:
         02:e1:d5:01:96:e1:13:b8:e1:52:94:b5:e4:dc:15:8a:62:57:
         b0:e8:7f:43:df:2e:9e:ff:7b:c8:5a:f5:83:06:61:97:a8:7a:
         61:0a:9b:08:8b:fd:6f:30:73:77:b5:31:f7:ad:76:e4:fc:d4:
         85:be:77:d1:06:9b:ae:31:9a:52:8f:48:f2:e2:6b:f3:1f:8e:
         dc:68:b3:8f:50:53:4c:c0:a8:43:9d:44:9c:19:5c:6a:41:ca:
         e9:b5:69:ad:58:1d:b0:b3:ea:ae:ea:1c:1f:c8:b7:30:d4:da:
         0a:c4:52:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 23:34:25 2026 by rpki-client