Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed/6b214c14-fbcd-3363-94e7-0375a83b95b3.roa
File:                     6b214c14-fbcd-3363-94e7-0375a83b95b3.roa (raw, json)
Hash identifier:          kxeGxOkjnRaQFtsfeNJ2WwhHD2xzHgUkXWrbsFqm3A4=
Subject key identifier:   F2:41:5C:45:9C:7B:A7:28:30:FC:C9:BA:A9:A8:42:8F:47:FD:F3:90
Certificate issuer:       /CN=a66a4367-3a0d-450c-ab2e-9b8f84e436ed
Certificate serial:       010D0C9F4328584F20F7B9747FA524C80E0DCA80
Authority key identifier: 7C:F5:0C:AE:7C:6B:E6:27:FE:43:86:15:EF:C9:C9:59:17:B6:09:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed/6b214c14-fbcd-3363-94e7-0375a83b95b3.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     397263
IP address blocks:        200.12.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed/a66a4367-3a0d-450c-ab2e-9b8f84e436ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed/a66a4367-3a0d-450c-ab2e-9b8f84e436ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:b9:74:7f:a5:24:c8:0e:0d:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a66a4367-3a0d-450c-ab2e-9b8f84e436ed
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=e1e647ba-63dd-468a-a0c3-c5d7f8d8125c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:20:48:71:bd:c8:6d:78:60:54:19:91:2b:b0:
                    e3:f7:b5:b6:2e:a1:51:c8:de:ed:f3:e0:ea:cf:71:
                    b5:e0:bc:1c:ed:36:95:dc:07:81:43:ad:b2:61:fb:
                    1b:d0:0c:f6:f3:7b:5f:31:57:14:3d:cb:2f:13:bd:
                    ca:5b:46:5f:7f:09:b6:0b:c2:10:c9:64:7e:51:14:
                    a3:ef:5f:48:f6:ce:9e:a1:2d:8b:bb:c0:be:d2:cb:
                    22:e4:e5:38:b8:93:a0:3a:cf:7a:e9:de:06:99:c4:
                    78:ac:75:5f:56:82:23:d9:c9:e4:27:be:ea:79:6f:
                    b3:27:8d:59:be:0a:39:73:78:97:0d:c4:3e:35:ee:
                    71:74:df:5c:b0:df:bd:2b:41:e9:9c:b2:81:1e:3c:
                    6e:9c:78:40:c0:c3:d1:42:93:08:f8:b9:3b:7e:4d:
                    87:0d:95:83:8a:d3:b7:2b:93:e7:f2:e9:1d:4b:1a:
                    b0:38:ba:df:38:e0:3a:70:2b:c8:df:fa:73:a0:92:
                    c6:62:e3:6a:ed:5f:5c:bc:4a:3e:85:e3:28:28:6c:
                    3c:ed:a8:39:b5:ae:56:c3:5f:45:25:5b:95:c5:73:
                    e4:f5:df:d6:0f:d4:36:76:82:e1:45:d4:ee:73:5b:
                    ff:a4:b5:c8:78:e6:ec:22:ae:05:a4:e9:60:6d:48:
                    fb:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:41:5C:45:9C:7B:A7:28:30:FC:C9:BA:A9:A8:42:8F:47:FD:F3:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed/6b214c14-fbcd-3363-94e7-0375a83b95b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed/a66a4367-3a0d-450c-ab2e-9b8f84e436ed.crl

            X509v3 Authority Key Identifier:
                keyid:7C:F5:0C:AE:7C:6B:E6:27:FE:43:86:15:EF:C9:C9:59:17:B6:09:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a66a4367-3a0d-450c-ab2e-9b8f84e436ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:d6:55:e4:e8:54:c8:68:93:4b:4d:75:d1:ce:65:7b:dc:8d:
         62:29:3e:10:7d:57:ff:9c:48:26:ba:b9:4c:43:0c:d1:3e:03:
         9c:90:5d:45:ce:45:1e:1e:53:fa:be:d3:05:74:69:77:74:4d:
         36:1e:f0:eb:44:75:e6:c7:b7:83:dd:0e:78:05:ad:e2:de:eb:
         7b:12:45:21:73:27:b7:01:d3:de:b9:f3:43:ba:3f:40:9c:b8:
         53:b5:63:1d:6a:91:7c:d2:ae:12:76:33:57:76:c6:b8:e3:47:
         9e:b9:75:ac:73:66:a4:58:f9:63:8f:46:35:00:d2:20:87:53:
         1a:5a:0f:ed:4e:cd:d3:d7:0c:11:c3:f6:5f:23:0f:94:b5:d3:
         f2:6e:00:d7:df:e9:de:d0:f1:b4:35:99:2c:02:74:f8:1d:4d:
         0c:2c:9f:f5:46:61:36:c1:d9:56:71:94:80:62:81:5b:5c:0b:
         f3:b2:d5:2a:90:9b:75:2e:f7:ad:d0:a7:88:4e:af:08:33:4f:
         32:65:b2:1e:5c:b2:e6:79:bf:13:93:94:32:e3:23:4f:e0:20:
         20:31:a1:2f:25:c5:82:05:1d:5b:a6:bb:ed:df:97:86:2f:58:
         02:e7:62:7a:16:9c:b8:dc:46:19:e0:4c:9f:56:84:c8:fe:67:
         7c:fa:c9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:08:46 2026 by rpki-client