Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/56ba9ad6-0140-3ad7-9f4b-5a5b7b729c68.roa
File:                     56ba9ad6-0140-3ad7-9f4b-5a5b7b729c68.roa (raw, json)
Hash identifier:          taUd1Vlz82MqESZ3NSHdtn5VfbVQsVZz1F37NBT+D2M=
Subject key identifier:   7B:EC:FC:80:62:BE:98:14:9B:7B:15:C7:CF:2E:97:5F:EE:2C:5C:F6
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584EAF2352885E10F08E613C5E58
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/56ba9ad6-0140-3ad7-9f4b-5a5b7b729c68.roa
Signing time:             Fri 31 Jul 2026 18:26:09 +0000
ROA not before:           Fri 31 Jul 2026 18:26:09 +0000
ROA not after:            Thu 29 Oct 2026 18:26:09 +0000
asID:                     81
IP address blocks:        204.85.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:af:23:52:88:5e:10:f0:8e:61:3c:5e:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jul 31 18:26:09 2026 GMT
            Not After : Oct 29 18:26:09 2026 GMT
        Subject: CN=686f130a-ef33-4b5c-bb67-8f8f8a142006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:2c:e2:b1:ea:2d:94:41:85:b9:4a:71:78:4f:
                    07:b8:1c:bf:33:9e:16:0f:31:81:52:ef:54:c5:83:
                    5f:ab:4d:c8:4a:9e:f9:34:d7:e1:c1:c0:a4:86:cc:
                    80:d1:51:89:e3:6c:9b:b7:b1:14:f0:36:64:04:ef:
                    99:21:1a:c7:6c:0e:ec:b7:ea:e3:c0:84:b5:6c:8f:
                    aa:cf:66:2b:85:ba:c9:08:e5:88:4d:97:26:50:d2:
                    e8:cf:53:61:2d:d9:20:48:2b:43:ab:e9:64:b5:16:
                    42:7c:ad:a4:6d:06:71:2c:97:cb:09:1a:6d:db:64:
                    05:55:4b:06:82:fe:b3:9f:58:45:60:76:a2:85:a4:
                    85:b8:1b:de:24:ef:30:2c:bf:dd:20:2a:26:f3:53:
                    22:66:2b:2c:bd:76:83:2b:dd:06:25:b9:42:b2:02:
                    1c:ec:ca:e3:68:b4:15:3e:77:5b:de:af:f1:c6:92:
                    5a:f5:d9:6c:bd:2d:54:a0:cc:41:2f:2e:a2:18:44:
                    03:39:e5:a0:6b:47:26:67:0e:33:26:27:c3:3c:13:
                    f7:73:f9:2f:25:c7:af:28:2e:40:ad:c9:96:ac:f8:
                    fb:4f:64:32:ee:80:50:8d:f7:81:0a:63:e3:7a:c3:
                    89:47:5e:89:ab:4c:99:d9:c5:48:a7:4e:86:bf:cd:
                    86:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:EC:FC:80:62:BE:98:14:9B:7B:15:C7:CF:2E:97:5F:EE:2C:5C:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/56ba9ad6-0140-3ad7-9f4b-5a5b7b729c68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.85.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:06:a4:fe:32:80:b5:0e:4f:d2:8d:89:93:63:bd:bf:17:43:
         dc:8e:33:be:ac:2a:a4:6a:59:0c:47:d3:d6:ac:63:ea:d1:25:
         1f:62:80:23:72:33:36:f1:ec:9b:c4:bc:17:4b:88:24:a9:f1:
         81:9c:34:7f:32:e7:53:37:f8:7f:42:88:a6:8e:7e:1b:a0:48:
         8d:35:70:3f:7c:5a:31:5f:ed:97:d7:a0:92:00:1b:a7:92:f0:
         e3:b9:44:4e:07:b4:33:72:d8:7c:89:ff:01:17:1e:59:a5:19:
         f3:bc:05:c3:f0:5b:8a:56:66:49:da:b8:4f:f0:0f:d2:87:a7:
         0d:03:34:f0:d6:46:5d:83:70:3c:97:fd:67:18:2b:84:16:32:
         6d:af:2b:3e:5f:47:bc:82:a6:c3:ec:a2:cf:15:33:d1:84:e4:
         de:ea:e7:0f:f9:85:d9:69:00:52:9c:c0:50:b7:6c:2c:69:0a:
         d4:9e:7d:4f:61:2b:3f:76:4d:a5:a6:62:c5:1c:ad:13:b0:9b:
         6f:22:3a:65:59:b4:97:0a:54:96:4f:77:a3:e4:60:88:eb:27:
         4c:0c:a7:80:69:15:0c:be:cf:40:62:8e:01:57:83:a3:0d:0c:
         74:50:dd:8a:da:46:45:d7:d9:ca:8a:5e:9b:5f:8c:07:7c:ca:
         6c:4b:ef:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 19:23:20 2026 by rpki-client