Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/74c0dd39-c585-3a98-9280-90f90ea78cc0.roa
File:                     74c0dd39-c585-3a98-9280-90f90ea78cc0.roa (raw, json)
Hash identifier:          0VBzWj1746b8r021Y3OpowsL6Ea53Kan2EDHiBqSUsk=
Subject key identifier:   67:85:B2:4E:DF:44:E5:02:E8:9F:66:F1:23:FE:11:8C:26:44:5C:D2
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584F51D2A02BFE78803AD90FA530
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/74c0dd39-c585-3a98-9280-90f90ea78cc0.roa
Signing time:             Mon 28 Sep 2026 01:00:12 +0000
ROA not before:           Mon 28 Sep 2026 01:00:12 +0000
ROA not after:            Sun 27 Dec 2026 02:00:12 +0000
asID:                     36850
IP address blocks:        204.85.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:51:d2:a0:2b:fe:78:80:3a:d9:0f:a5:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Sep 28 01:00:12 2026 GMT
            Not After : Dec 27 02:00:12 2026 GMT
        Subject: CN=d808a20b-765b-44b4-a586-49880434ca8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:1d:3e:d1:00:fa:30:b4:0b:d2:7a:56:ab:ad:
                    dd:89:1a:a4:ad:09:e7:9c:56:a8:e7:f1:3b:75:22:
                    3e:b4:74:ab:59:f8:7c:c3:40:cc:ff:73:d8:c6:a4:
                    d8:c3:2b:06:2a:00:11:d9:1f:6d:d0:28:28:eb:7f:
                    2d:d7:ff:8b:06:3c:1d:05:9f:57:53:83:31:c7:31:
                    71:d3:9a:cf:3e:70:b2:46:fe:0b:2a:5a:fc:41:20:
                    f2:b9:d5:48:c5:09:66:a3:1b:02:2b:52:cf:b1:4f:
                    4b:5d:c8:b8:76:c4:5d:bf:93:b2:a1:85:18:fe:59:
                    4e:e6:4c:09:9d:94:88:17:8b:e7:44:3e:88:8a:f8:
                    7b:fd:3b:f0:0d:f7:7f:6e:84:58:7d:0c:d5:09:b8:
                    a6:a7:c3:e9:2f:44:b8:8c:ce:f3:3e:cf:b0:b8:b9:
                    45:19:3d:19:fe:6a:9b:b1:e0:f4:f9:28:69:e5:00:
                    b8:45:37:ca:9e:73:99:21:ce:c9:cd:77:69:37:30:
                    8c:3a:b9:00:d1:fa:dc:55:e7:17:b5:df:35:8b:d1:
                    45:d3:5a:a0:fe:6b:e2:61:b8:2b:91:e3:6b:c5:e6:
                    8d:0c:91:24:b9:02:fe:7e:2d:54:86:61:f5:5d:d2:
                    b0:92:b5:8e:7d:ec:80:3b:b3:bd:7f:d4:da:74:e2:
                    0e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:85:B2:4E:DF:44:E5:02:E8:9F:66:F1:23:FE:11:8C:26:44:5C:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/74c0dd39-c585-3a98-9280-90f90ea78cc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.85.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:bc:a9:29:8e:31:86:91:c5:ec:be:20:bd:ae:35:62:fd:e1:
         14:77:01:96:9c:8b:70:53:31:2e:d0:4d:6c:78:cd:44:6a:76:
         13:1b:40:9d:7e:0b:6a:48:95:28:f7:ea:15:45:7b:8f:15:a5:
         43:a1:20:56:ab:55:01:37:ad:c8:65:c1:e7:ff:d3:0f:d6:64:
         db:ff:7f:05:df:97:4f:d6:b7:30:1b:f3:84:a7:db:31:76:2d:
         02:25:d0:0d:36:88:a3:bc:ac:19:95:54:41:40:66:c2:63:67:
         69:3a:a9:a0:74:ea:90:e3:bc:67:ec:ea:2b:f4:77:58:c5:c1:
         20:40:3c:47:ae:9e:1b:11:31:cc:f2:64:eb:1d:8e:26:5a:5e:
         9d:01:24:bb:e0:f4:b1:ea:a0:bd:ab:b2:a8:ec:19:0e:f5:bf:
         58:c8:52:28:d2:54:27:8f:4e:61:3a:e9:c7:95:d3:96:92:fd:
         8c:29:ee:07:79:eb:87:90:a8:18:e4:47:37:99:59:3f:94:59:
         45:1b:14:bd:2f:5a:56:39:1c:61:a8:00:41:b9:a7:1f:09:fd:
         4a:10:83:5c:91:5d:d9:ef:eb:70:58:41:94:79:48:ea:ce:2c:
         22:8e:96:66:da:41:15:1a:58:8e:c6:2d:9a:33:e5:97:28:39:
         74:fb:29:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:01:35 2026 by rpki-client