Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3b8a1bf4-bb07-36be-95f7-68ee34d61bac.roa
File:                     3b8a1bf4-bb07-36be-95f7-68ee34d61bac.roa (raw, json)
Hash identifier:          7ePD/mGY0AoqxA90XEUFEBaSoYRdXfy8yKr5ysThy/E=
Subject key identifier:   8D:F4:50:6F:8B:00:D4:DD:AA:42:18:EF:D8:4C:57:A8:C8:F4:AF:16
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584F51D2A084F0E4E185957F7700
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3b8a1bf4-bb07-36be-95f7-68ee34d61bac.roa
Signing time:             Mon 28 Sep 2026 01:00:12 +0000
ROA not before:           Mon 28 Sep 2026 01:00:12 +0000
ROA not after:            Sun 27 Dec 2026 02:00:12 +0000
asID:                     81
IP address blocks:        204.85.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:51:d2:a0:84:f0:e4:e1:85:95:7f:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Sep 28 01:00:12 2026 GMT
            Not After : Dec 27 02:00:12 2026 GMT
        Subject: CN=a8496160-11b8-4055-a458-0c8108078e80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:8b:a3:7b:69:0d:45:04:42:89:da:97:6d:94:
                    88:b0:20:cb:c2:58:07:fc:42:d5:4b:a8:25:d7:37:
                    f0:97:9f:5f:56:b9:9d:7c:c0:94:22:f3:00:9b:c0:
                    33:21:ab:21:64:69:4e:2c:f7:52:35:1c:3d:a9:4c:
                    26:b1:5a:25:1a:e3:9b:6d:78:5b:a8:77:e4:df:34:
                    c8:9c:26:40:b6:c9:0c:5b:5a:95:84:1b:f3:e9:05:
                    1e:8d:c6:c5:59:32:2a:ac:fb:7d:c6:75:93:bd:14:
                    6a:a4:83:4d:a0:c3:34:3f:47:57:f9:30:c6:c4:df:
                    5d:5f:55:c1:cf:fb:f2:3f:59:3c:72:6b:e5:f0:25:
                    7b:e4:f3:28:b0:c2:c4:c3:98:57:8b:67:31:7d:12:
                    75:6f:cf:43:e6:bf:e9:bc:49:f4:7d:5d:94:11:58:
                    f5:90:64:98:40:02:07:4a:5e:50:93:23:96:23:a3:
                    e8:95:b0:6a:88:c8:56:df:5e:7c:95:65:6a:b3:cd:
                    e6:4e:d9:85:f6:68:59:27:ba:9f:a6:40:e2:0f:26:
                    79:24:51:ef:36:79:f3:2b:e2:92:85:e8:63:1c:33:
                    a5:61:ef:7b:ff:fd:fa:d1:0f:81:43:d9:3b:20:52:
                    b4:ce:20:51:7b:b5:8e:6f:f6:29:c9:e3:03:38:7e:
                    58:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:F4:50:6F:8B:00:D4:DD:AA:42:18:EF:D8:4C:57:A8:C8:F4:AF:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3b8a1bf4-bb07-36be-95f7-68ee34d61bac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.85.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:f7:f8:6a:9a:78:f3:8b:24:99:46:d7:d4:50:c5:46:3a:24:
         0e:c8:c7:0c:b8:6c:7e:cc:3d:a4:d1:b1:80:50:5f:8d:e3:85:
         9c:12:73:32:ce:3e:99:97:fe:89:50:70:3b:23:55:13:9c:cb:
         28:64:0b:8e:16:8c:b5:72:9f:29:7c:e9:5c:64:1f:d1:f1:f4:
         1c:e4:e4:95:a3:95:e4:e5:33:e9:c5:b9:9d:32:0d:5c:56:c1:
         63:40:f8:4a:ef:7d:4e:d7:47:ef:d1:e0:12:06:45:45:cf:aa:
         c6:f4:e7:9b:ae:7f:d3:46:fe:d4:fc:6b:de:0c:a3:f3:1c:c9:
         03:e3:79:7b:32:22:d9:78:4f:6a:0b:a1:9d:32:80:51:ca:04:
         55:4d:1c:67:b4:c0:24:41:4e:b6:2c:77:61:68:1d:bd:68:64:
         91:07:59:66:46:69:5b:c7:6a:06:ac:70:75:15:6d:47:3f:a7:
         77:04:6f:92:fc:23:47:67:5b:ff:b8:d4:c9:8f:19:ff:4a:5e:
         39:08:e2:58:24:29:e6:8b:c0:79:38:3e:44:8c:04:e1:b2:3f:
         87:29:d3:69:7d:5f:ac:4b:8e:a5:43:00:a9:61:90:4b:c5:b2:
         05:d7:56:12:b0:62:ad:84:80:bb:98:61:07:fd:4e:0a:7a:58:
         c7:f5:6b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 14:09:22 2026 by rpki-client