Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/2e7582ec-b4f3-3afd-aa87-206b575a7506.roa
File:                     2e7582ec-b4f3-3afd-aa87-206b575a7506.roa (raw, json)
Hash identifier:          f2xhDVwGaCz8S9plykZy7MnJjU8jJkxMFXg0S7o3SPA=
Subject key identifier:   72:5D:E3:85:A5:A0:5C:47:F1:38:1A:5C:F2:70:BF:38:B2:C1:F1:69
Certificate issuer:       /CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
Certificate serial:       010D0C9F4328584F119CF7F3E424DA4F0328D600
Authority key identifier: 6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/2e7582ec-b4f3-3afd-aa87-206b575a7506.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     397250
IP address blocks:        69.55.212.0/22 maxlen: 24
                          69.55.216.0/24 maxlen: 24
                          205.174.152.0/24 maxlen: 24
                          207.32.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 15 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9c:f7:f3:e4:24:da:4f:03:28:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=57a0afb0-ef73-49ff-897a-a0eb63b80673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:59:38:c7:d9:4b:55:c3:91:98:5a:fa:7a:39:
                    d8:d5:ca:4f:5f:72:3b:ac:c7:a6:06:1e:a2:53:16:
                    ca:53:a4:86:46:67:69:d1:20:67:f4:2b:52:bb:22:
                    f8:81:8b:75:05:b7:bf:73:9c:d8:47:05:cd:f9:de:
                    c2:8d:b6:f0:66:54:85:bb:1c:6e:11:ab:e6:b9:87:
                    f4:bf:7b:29:9e:9f:bf:e1:67:7f:4f:23:90:d7:4b:
                    a8:97:d0:8a:2c:09:46:43:4e:a9:a5:37:7e:de:ca:
                    a2:f7:e8:fb:94:3c:bb:89:20:b8:f8:c2:e7:61:71:
                    67:e5:38:63:54:19:50:2c:35:f6:5d:34:ec:ba:68:
                    e1:2f:09:3e:d6:ca:c7:cd:77:cf:d7:ba:21:1c:aa:
                    b1:f7:54:e3:04:9a:6a:e1:ff:48:a0:83:5e:5e:9c:
                    8a:7c:24:87:74:0b:4f:de:d0:f6:eb:d2:8d:0a:62:
                    86:9f:5b:8b:13:a1:5b:a6:70:d8:cc:07:47:46:02:
                    55:e2:84:44:55:c2:61:8c:2b:a8:d6:e3:d6:86:6b:
                    fd:7b:67:e0:78:0c:9f:9c:55:26:60:04:85:2d:91:
                    84:fa:3a:df:f5:fb:1c:3a:27:75:86:19:43:e0:5e:
                    5e:fc:a5:60:ef:82:ac:86:6e:fa:17:51:26:11:7e:
                    7e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:5D:E3:85:A5:A0:5C:47:F1:38:1A:5C:F2:70:BF:38:B2:C1:F1:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/2e7582ec-b4f3-3afd-aa87-206b575a7506.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl

            X509v3 Authority Key Identifier:
                keyid:6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.55.212.0-69.55.216.255
                  205.174.152.0/24
                  207.32.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:9a:e8:0f:c2:b8:59:87:eb:4e:41:d5:63:67:30:df:82:6c:
         b4:eb:15:6f:a7:1f:0a:a7:36:83:74:f9:0b:5f:8b:0a:b2:dc:
         6a:6d:8e:38:26:b0:85:9c:a4:a6:9c:31:47:3f:36:11:23:d5:
         0b:f4:16:37:ce:7f:34:fd:30:4d:fa:90:84:d9:d0:b2:1c:62:
         c7:6d:9b:7a:b1:e3:b2:38:bd:70:ac:6a:c5:aa:02:a4:60:59:
         7f:de:b8:95:84:54:1f:e7:bd:31:5e:3f:2d:c1:1c:59:d1:d2:
         aa:5e:a4:42:a4:ca:f4:12:df:3d:7b:d6:5b:36:c8:8e:1b:ea:
         54:1b:db:87:87:da:75:0d:18:8a:e7:1a:7b:64:20:de:1d:9d:
         01:c6:81:f4:31:1e:0c:c1:85:7d:e1:df:e4:a7:cc:32:44:8b:
         01:25:cd:b9:d2:7f:73:d4:c9:cf:e8:1d:de:29:21:73:d2:76:
         c2:06:94:06:9c:28:9d:f7:eb:39:63:ec:63:08:03:84:2b:d0:
         51:35:94:1e:16:5c:c4:2e:72:37:6b:3b:44:59:ac:ee:f8:0f:
         54:b3:67:5b:db:45:1d:9d:d5:90:a5:e5:e2:3f:26:2c:be:25:
         5c:ec:1a:73:e4:89:48:53:63:c9:14:17:45:85:4e:e6:7f:ea:
         a3:ad:ac:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 16:38:48 2026 by rpki-client