Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/6d392fb4-8a7d-38b4-8efa-97939fa91b8d.roa
File:                     6d392fb4-8a7d-38b4-8efa-97939fa91b8d.roa (raw, json)
Hash identifier:          HBQyb3woo7NI0lxkRVCBDuT19rzUn4k0blVhYIfPp84=
Subject key identifier:   4F:AF:65:5F:D1:34:8B:11:0F:8B:C8:B8:C9:B0:40:DD:42:22:81:12
Certificate issuer:       /CN=45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d
Certificate serial:       010D0C9F4328584EFCACD21BA129DD3D38DE0500
Authority key identifier: 64:73:F4:FE:C0:A9:D9:3A:6F:E6:79:B0:3C:F7:87:18:87:79:11:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/6d392fb4-8a7d-38b4-8efa-97939fa91b8d.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     40100
IP address blocks:        208.68.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:d2:1b:a1:29:dd:3d:38:de:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=a41815a6-fd9c-4671-b8b3-fdb5015b8503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:36:29:28:6b:2a:3f:0e:03:86:9d:f6:c1:70:
                    2a:23:4f:f8:97:db:57:c4:8b:39:02:dd:e2:18:82:
                    7e:64:3f:1b:56:cc:d9:43:d8:d6:34:c5:15:f5:8f:
                    19:6f:1e:8a:11:c3:c1:5c:33:50:5b:b9:67:64:46:
                    ec:68:d2:73:51:37:0a:42:2f:d3:08:4a:91:59:c0:
                    24:f8:f7:7e:d7:b6:ea:73:61:06:a0:82:58:44:e3:
                    80:00:20:c4:3b:33:ab:bf:a0:5c:fe:0c:1d:ad:17:
                    20:12:dc:0f:aa:8e:ce:1d:6e:e6:d6:aa:98:e9:19:
                    9f:16:a4:e2:14:29:99:e6:a9:d7:55:06:ab:d8:15:
                    d2:f1:22:af:09:e8:60:99:34:a8:f7:6d:f3:3f:24:
                    15:67:11:91:f0:8d:50:08:4b:cf:cc:da:61:4c:90:
                    00:fe:ac:90:4f:7b:a9:99:29:88:16:d9:7f:60:03:
                    bc:7e:b0:c1:1b:af:ee:40:48:98:7c:86:c6:e0:d1:
                    f6:63:f0:45:0f:4a:9a:91:69:1d:ba:dd:bb:9b:42:
                    6e:b3:71:71:4e:b8:39:1a:78:2c:6a:c1:1d:dd:20:
                    b3:ba:52:6e:62:4e:06:5c:32:0d:27:d0:46:5f:16:
                    95:0e:21:60:2e:3f:61:0f:94:74:ce:69:c4:7f:93:
                    dc:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:AF:65:5F:D1:34:8B:11:0F:8B:C8:B8:C9:B0:40:DD:42:22:81:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/6d392fb4-8a7d-38b4-8efa-97939fa91b8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.crl

            X509v3 Authority Key Identifier:
                keyid:64:73:F4:FE:C0:A9:D9:3A:6F:E6:79:B0:3C:F7:87:18:87:79:11:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.68.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:74:28:5b:a0:58:fd:9c:0e:2a:91:06:ca:92:e6:e2:a2:8f:
         24:a9:04:55:54:a0:3f:05:d0:56:02:01:e5:37:cc:73:c0:c1:
         1b:03:b1:18:75:19:70:95:88:66:0d:fb:68:16:92:1a:8d:aa:
         3d:70:7d:ba:36:5a:8f:99:80:a4:df:9f:48:9a:3c:b5:f5:36:
         07:05:d1:da:b3:56:ed:1c:11:ca:d7:28:df:14:a8:de:2e:4c:
         84:a1:83:ac:7c:a8:3f:5b:c6:a6:a4:65:d1:6a:5a:0d:cc:c0:
         0c:f8:93:ce:54:52:5b:34:82:91:e7:78:07:72:e5:c4:5d:28:
         d2:23:27:c8:f9:0d:f1:5c:cc:7b:8b:7f:1e:a3:61:63:73:ea:
         ac:7e:52:9b:3c:98:4d:b6:62:74:80:cc:1d:56:c8:65:70:d6:
         96:d5:e4:59:e9:5a:c3:b3:b6:f6:8d:64:38:a0:e0:27:8c:9a:
         dd:0e:36:d8:80:ec:6b:37:32:5c:f6:39:90:75:b0:b7:83:a0:
         e8:8b:ea:04:0d:9d:33:87:a0:f3:cf:3d:ee:2f:bd:2a:8e:77:
         09:d1:0e:44:d5:3e:2a:7d:cc:fc:b8:03:c9:7e:10:88:ba:80:
         b9:21:05:20:7c:ac:51:21:b9:57:0b:57:49:c0:3b:a3:3b:6b:
         9d:41:5d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 10:27:52 2026 by rpki-client