Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/4a9c4aea-ce7c-397c-898c-dcc178d18ea3.roa
File:                     4a9c4aea-ce7c-397c-898c-dcc178d18ea3.roa (raw, json)
Hash identifier:          c2ADnvATs23SjnkvT/Zb5xLxOiCCL89hnPfiCvT4uEM=
Subject key identifier:   A5:7B:EF:80:B5:14:44:B4:0D:AF:F9:F1:EB:94:BB:D0:D0:00:E0:E7
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584EAF235196141B2314A08EA000
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/4a9c4aea-ce7c-397c-898c-dcc178d18ea3.roa
Signing time:             Fri 31 Jul 2026 18:26:08 +0000
ROA not before:           Fri 31 Jul 2026 18:26:08 +0000
ROA not after:            Thu 29 Oct 2026 18:26:08 +0000
asID:                     6559
IP address blocks:        204.84.238.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:af:23:51:96:14:1b:23:14:a0:8e:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jul 31 18:26:08 2026 GMT
            Not After : Oct 29 18:26:08 2026 GMT
        Subject: CN=82f3f8db-09b9-43c9-892e-ae22799931b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:5a:15:7e:f6:8c:a2:2d:a8:37:91:36:91:34:
                    91:5b:24:2d:98:23:a3:c3:aa:42:41:0a:4c:3d:f5:
                    9b:6b:be:3b:f4:93:b0:35:41:4b:82:f5:c1:83:b1:
                    35:fc:d9:16:c3:06:c6:bd:02:fb:9d:7e:b8:db:ff:
                    ff:c7:00:76:34:48:ad:b0:07:ac:ae:03:13:3a:8f:
                    81:01:d9:08:d8:09:ae:61:30:34:4d:0d:b3:59:7a:
                    78:1a:00:2b:14:24:c3:c4:f0:e2:d7:6a:5a:f9:06:
                    ad:d4:c6:a8:02:be:8d:83:62:43:d2:43:f8:74:4d:
                    0e:81:83:93:42:62:ff:98:30:93:76:e8:1a:af:f6:
                    7b:91:04:49:0b:b3:0e:ad:49:06:b9:7e:ea:13:8f:
                    1a:c9:d0:d4:46:5e:4a:60:49:dd:14:a1:3c:f9:ed:
                    c8:2d:d1:a9:d4:20:fb:87:d2:c9:48:b8:3d:f7:fd:
                    df:ff:20:41:df:4c:65:c1:28:96:06:8d:2c:f9:37:
                    e7:b5:70:b5:5a:47:64:1e:58:15:b9:92:43:f3:28:
                    fa:ee:1f:1d:0b:05:20:28:fc:95:ae:2c:e8:e3:40:
                    d3:db:0b:a1:21:ea:89:8b:dd:a2:d7:20:92:ee:3e:
                    ea:0c:38:d8:a7:5b:20:fc:ee:c0:69:24:14:54:9d:
                    38:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:7B:EF:80:B5:14:44:B4:0D:AF:F9:F1:EB:94:BB:D0:D0:00:E0:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/4a9c4aea-ce7c-397c-898c-dcc178d18ea3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.84.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:fe:f5:cb:46:be:58:da:6e:4a:ed:a2:0a:78:4e:41:cc:5b:
         86:fb:41:38:4e:0a:d2:66:a3:e5:f5:9a:8d:63:4b:fe:71:60:
         45:b7:65:6d:6d:28:2a:22:86:1d:d3:eb:57:42:d3:eb:96:90:
         9b:0f:9b:31:47:91:ae:c6:0d:2f:da:d5:65:e7:d2:74:a8:40:
         05:02:1d:98:8f:e2:46:78:49:02:be:42:ed:c4:88:b4:26:47:
         a3:b0:00:15:14:05:51:0b:37:b2:f8:3f:6b:0b:8c:8d:0f:ea:
         3a:d0:31:e1:74:ef:58:7a:18:80:16:38:da:50:bb:6e:61:3a:
         3c:0d:eb:49:69:4a:c6:0b:4b:43:00:50:b2:0d:d8:a8:5c:c6:
         32:47:18:a9:53:85:d3:47:1c:db:bb:0e:74:cb:ca:0f:ef:0f:
         c2:53:9f:31:88:11:28:0e:d4:f3:fe:59:be:07:fa:72:2f:46:
         b8:cb:16:7d:a2:78:3b:69:70:ad:a2:12:d2:3b:28:87:61:c5:
         57:de:c6:de:44:6c:bf:ca:59:ed:10:2b:ac:18:9c:81:26:b1:
         97:1f:76:01:86:35:26:57:2a:1a:88:c3:6f:ab:d2:d3:61:97:
         da:1d:47:a8:41:88:c1:d2:aa:1f:54:12:cb:5b:27:22:cf:18:
         e0:b4:17:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 18:44:18 2026 by rpki-client