Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/9a81dc69-b9e3-3c69-aef4-2c8df9a84795.roa
File:                     9a81dc69-b9e3-3c69-aef4-2c8df9a84795.roa (raw, json)
Hash identifier:          wA/lhY+QDxqUMggYQCSygqITpP6QT6G2aitXyuvY1Gw=
Subject key identifier:   49:46:20:CB:16:BB:E4:D1:AB:36:BA:CF:D7:E8:A7:54:0C:57:F6:4A
Certificate issuer:       /CN=5d613e84-be93-4d7a-a56c-57a378f2c325
Certificate serial:       010D0C9F4328584F19FCE4BB64E664868E6DD080
Authority key identifier: 83:D9:7E:E5:89:0D:94:72:A3:71:AF:6B:D0:14:D0:CC:74:D3:1D:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/9a81dc69-b9e3-3c69-aef4-2c8df9a84795.roa
Signing time:             Tue 08 Sep 2026 01:00:12 +0000
ROA not before:           Tue 08 Sep 2026 01:00:12 +0000
ROA not after:            Mon 07 Dec 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        206.125.154.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/5d613e84-be93-4d7a-a56c-57a378f2c325.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/5d613e84-be93-4d7a-a56c-57a378f2c325.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:19:fc:e4:bb:64:e6:64:86:8e:6d:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d613e84-be93-4d7a-a56c-57a378f2c325
        Validity
            Not Before: Sep  8 01:00:12 2026 GMT
            Not After : Dec  7 02:00:12 2026 GMT
        Subject: CN=7ce70544-1079-47c9-bc00-557eeef43302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:69:78:b3:f9:ca:05:bc:23:e0:d5:05:c5:a4:
                    92:7a:ef:fd:4d:7f:e9:30:07:27:17:b1:cb:b4:e1:
                    e9:fa:d9:82:a4:24:d2:56:84:5b:55:26:57:75:d5:
                    89:10:bc:e0:d4:b4:67:5b:67:df:18:fe:f2:cc:89:
                    b2:e8:b4:c2:01:d5:83:fb:4e:6e:aa:76:42:ed:45:
                    ea:06:d6:c3:42:ec:31:0b:b9:10:cb:32:78:ce:7e:
                    b9:6f:45:4e:4c:ec:61:38:1a:be:cb:66:3e:26:eb:
                    c0:02:84:29:bc:d5:2e:cc:bb:f6:45:28:36:90:76:
                    54:78:02:e0:eb:c7:6f:c5:b4:32:5f:6e:78:83:88:
                    90:9d:66:16:d4:f5:9a:f0:44:78:0b:c4:c5:04:7a:
                    eb:cd:7a:60:95:83:ad:22:5b:2c:04:f7:4c:b0:19:
                    0e:10:84:c2:18:14:e3:50:58:24:4b:a9:be:0e:1b:
                    4e:02:86:cc:f3:e6:0c:32:e0:3f:57:f2:d3:dd:d0:
                    96:17:9e:1e:31:8b:20:dc:91:f5:81:ab:a7:f8:91:
                    e1:72:99:0f:1b:12:cc:40:71:66:b5:46:a4:c8:52:
                    48:c9:22:1a:b7:58:69:ce:5f:45:65:53:b3:ab:be:
                    19:3e:42:48:b5:9d:40:5b:f8:a6:36:a4:c9:89:f2:
                    d1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:46:20:CB:16:BB:E4:D1:AB:36:BA:CF:D7:E8:A7:54:0C:57:F6:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/9a81dc69-b9e3-3c69-aef4-2c8df9a84795.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/5d613e84-be93-4d7a-a56c-57a378f2c325.crl

            X509v3 Authority Key Identifier:
                keyid:83:D9:7E:E5:89:0D:94:72:A3:71:AF:6B:D0:14:D0:CC:74:D3:1D:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.125.154.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:a2:be:e4:9f:0b:68:97:59:9a:b1:39:3e:c1:27:61:c8:85:
         28:a5:08:64:09:f9:e6:0a:f4:36:f1:38:fa:22:56:3f:65:a6:
         37:e9:6c:de:fe:b5:bb:41:14:93:07:6f:21:9c:a6:3c:66:cd:
         9e:5d:7f:a1:3a:8c:f0:90:02:6a:02:85:e6:3c:ab:7d:0b:e0:
         c4:b7:4c:b7:d1:9c:6f:16:52:7d:8c:13:e7:f7:45:b7:e9:9a:
         63:b9:2a:da:35:97:2d:93:09:48:5c:4d:81:26:92:8c:f8:0f:
         56:3c:e9:f7:91:69:e9:c8:bf:a8:15:83:37:d1:c7:36:aa:74:
         91:de:00:34:70:b1:30:1a:48:a0:50:38:06:fc:ae:3c:68:c1:
         4b:25:55:06:a6:d2:3e:80:85:6b:34:91:98:3a:25:bf:f2:9a:
         da:76:0f:22:d1:50:c5:23:69:9f:2d:f3:b0:4f:ed:39:46:e9:
         f1:55:4b:f7:09:d0:75:6d:c4:78:59:db:dd:15:d2:9f:0d:2e:
         65:4d:54:44:16:54:b6:ba:74:7e:66:14:60:dd:83:13:73:92:
         43:54:a4:bb:70:37:2c:79:ad:8a:73:b2:83:3d:01:e7:a9:f7:
         fe:2e:e8:a9:4d:87:94:00:5d:10:ce:96:6d:19:61:d6:4c:ee:
         6c:bd:16:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 10:19:28 2026 by rpki-client