Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7026590c-8151-350b-9b29-a07906b0b7ee.roa
File:                     7026590c-8151-350b-9b29-a07906b0b7ee.roa (raw, json)
Hash identifier:          vXCAqBJz8I5BP8eZcQtFgz5eHZzYeFhMR2tfgzja8Xs=
Subject key identifier:   AA:4B:07:1F:FB:E4:74:62:14:E3:69:CC:83:9F:C9:70:EF:81:14:B4
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F15CD03C3D16CB71316256400
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7026590c-8151-350b-9b29-a07906b0b7ee.roa
Signing time:             Sun 06 Sep 2026 13:00:12 +0000
ROA not before:           Sun 06 Sep 2026 13:00:12 +0000
ROA not after:            Sat 05 Dec 2026 14:00:12 +0000
asID:                     199959
IP address blocks:        65.86.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:15:cd:03:c3:d1:6c:b7:13:16:25:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep  6 13:00:12 2026 GMT
            Not After : Dec  5 14:00:12 2026 GMT
        Subject: CN=ecd113cb-d2e4-4a0c-b1c6-baa36a6175b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:5d:0e:a6:fd:b2:bc:6e:6d:3d:48:30:b7:1a:
                    77:6b:72:ef:a6:21:27:9c:d4:4b:5b:55:16:29:31:
                    17:2d:1a:b6:e9:ca:3d:33:ae:72:ef:94:8f:8b:5d:
                    80:d3:8c:2a:fb:86:e2:56:a9:3b:4a:ea:ab:bf:57:
                    43:ba:73:f0:69:a3:d9:6e:80:02:69:0e:25:ee:0e:
                    c7:42:b5:38:d8:44:18:b4:eb:c8:c6:01:87:37:9b:
                    80:cc:35:7e:8a:80:c9:08:8f:ae:e6:dd:e5:e7:67:
                    cd:01:ee:75:ac:8c:ce:e4:c0:94:32:ad:24:63:d2:
                    c3:46:47:ee:dc:64:3c:25:fe:0c:57:1d:37:ad:0a:
                    ac:36:21:ed:74:ab:04:bb:4b:10:c5:5f:d4:f2:ce:
                    7f:31:4a:29:04:b2:f1:17:38:0d:5a:c4:b8:41:32:
                    39:3a:6c:16:2d:b1:5e:29:9c:5c:31:a8:04:14:bb:
                    2a:93:df:98:c4:3d:c0:da:b0:76:bc:72:6c:4b:e3:
                    c2:4d:9e:80:6c:13:21:5e:b2:24:be:8f:02:6b:a3:
                    b8:25:82:3d:85:18:f8:01:2c:cf:cd:86:dd:fc:fd:
                    8f:ee:75:4d:82:fe:e5:dd:da:b6:b7:6c:6b:05:c3:
                    12:08:d2:fa:35:ff:6b:59:df:f9:62:04:be:e2:72:
                    ee:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:4B:07:1F:FB:E4:74:62:14:E3:69:CC:83:9F:C9:70:EF:81:14:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7026590c-8151-350b-9b29-a07906b0b7ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.86.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:1f:cd:30:ef:7f:b5:c5:17:2c:40:5b:6e:26:2e:da:2a:50:
         56:28:f6:82:28:4f:ab:cd:dc:ee:a0:ed:46:8c:a1:66:e7:21:
         a6:fe:4a:c6:6e:05:01:d1:8c:c6:8a:f8:4e:c4:84:1b:36:73:
         04:22:b7:93:53:81:4c:e9:2c:47:1e:1a:77:40:5e:c3:fd:6e:
         34:16:2d:b4:1a:e0:a2:ba:54:92:13:0e:63:0b:c6:77:8f:78:
         a5:af:bf:a6:81:bf:4f:37:64:1e:56:e0:41:d9:18:47:7a:1a:
         56:ae:94:f9:00:c5:fa:38:b3:21:46:fa:32:f2:82:8c:0e:e0:
         ec:85:34:03:1b:2f:d2:7e:af:7a:52:00:f5:8b:b4:a2:45:6b:
         a5:6b:9c:13:6d:f2:be:6a:44:32:bd:a8:59:54:98:ef:da:c2:
         58:63:73:a1:33:03:52:3d:9e:7d:7c:31:4e:cc:e0:89:02:02:
         d7:21:6a:a3:39:58:8c:32:9e:d3:37:c5:a1:66:37:a9:a6:0f:
         f1:e3:6f:6e:02:84:c7:8f:f5:f7:74:3c:73:4e:e9:e8:d2:1b:
         3d:d4:00:02:a3:d2:6d:f8:45:be:24:fb:ce:39:c5:85:75:96:
         24:34:db:ba:50:19:04:41:cf:5c:2e:68:6c:bc:ba:dc:38:87:
         1f:aa:07:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:38:36 2026 by rpki-client