Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/9ea9ad86-5212-3fb0-b1d4-ea7aa18a5efe.roa
File:                     9ea9ad86-5212-3fb0-b1d4-ea7aa18a5efe.roa (raw, json)
Hash identifier:          XQRGG6wvVVVpo1dzx/Xo1rprmNkg+b8Bp9Rjcb1rE/U=
Subject key identifier:   EE:CB:DC:35:F3:8E:DA:63:C0:B2:21:F2:15:E1:7F:6C:CE:71:E3:1E
Certificate issuer:       /CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Certificate serial:       010D0C9F4328584F15CCF335A1DF9364DAB19E20
Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/9ea9ad86-5212-3fb0-b1d4-ea7aa18a5efe.roa
Signing time:             Sun 06 Sep 2026 13:00:12 +0000
ROA not before:           Sun 06 Sep 2026 13:00:12 +0000
ROA not after:            Sat 05 Dec 2026 14:00:12 +0000
asID:                     6079
IP address blocks:        216.220.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:15:cc:f3:35:a1:df:93:64:da:b1:9e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873
        Validity
            Not Before: Sep  6 13:00:12 2026 GMT
            Not After : Dec  5 14:00:12 2026 GMT
        Subject: CN=23c0d092-9cc6-48f2-be80-c24bb94774ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e3:ad:4e:64:77:07:ec:d6:56:4d:0e:df:76:
                    d7:77:07:1e:e1:da:70:cf:48:6a:da:1e:d7:9c:a1:
                    b1:76:00:8e:3e:f4:af:0d:92:7b:18:d3:df:8d:de:
                    c2:a4:92:b9:46:55:30:f9:26:42:07:d9:72:72:67:
                    0c:53:65:9b:0d:5c:96:fb:2f:c9:49:cd:e1:ee:4c:
                    3d:0d:c2:92:ca:e5:1b:b5:6f:56:2f:9d:ed:91:12:
                    f2:e2:53:1c:de:88:cc:0e:3a:3d:60:ff:c8:27:c2:
                    a6:71:9f:2c:f0:95:7f:28:65:80:8b:f3:ee:84:50:
                    b8:fe:c0:0f:2a:6f:d5:b3:a7:d7:6f:e8:25:07:06:
                    ba:5a:b6:1f:a1:fa:78:c1:09:9e:37:33:f3:85:4e:
                    48:9f:4b:d7:6b:19:6e:0b:4d:61:12:5d:00:c6:d1:
                    16:f2:b4:79:ce:b8:78:17:4c:8b:b2:1d:7d:81:dc:
                    02:50:9f:32:f4:66:42:af:4b:39:9e:4e:6a:72:b2:
                    ea:b9:c4:5b:dc:3b:5a:55:16:cd:91:2c:a5:68:e3:
                    a5:14:e8:44:b1:dd:b0:b0:63:a0:94:da:1d:e6:6a:
                    58:6d:94:af:e6:a3:b3:ea:64:e9:9f:01:7f:06:c8:
                    7a:42:de:9b:c7:76:32:71:02:0e:02:30:4b:de:df:
                    1b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:CB:DC:35:F3:8E:DA:63:C0:B2:21:F2:15:E1:7F:6C:CE:71:E3:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/9ea9ad86-5212-3fb0-b1d4-ea7aa18a5efe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl

            X509v3 Authority Key Identifier:
                keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.220.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:e2:1a:ae:61:25:81:b7:22:8c:37:9f:64:04:69:48:e7:44:
         a0:21:97:f4:51:aa:13:26:7c:22:2f:ca:a5:5f:3e:15:5f:d4:
         1b:45:ef:8c:6e:b8:fe:84:38:36:84:fc:7c:55:4a:d6:83:d8:
         f5:46:44:aa:a9:e3:83:eb:78:ad:e6:4f:ed:a9:43:60:2d:bf:
         5a:d6:52:82:74:c5:40:76:65:3a:c5:4b:3f:2b:af:72:8f:77:
         90:a2:f9:74:7b:9c:4a:83:40:0c:cf:8f:a1:b1:10:e1:2c:43:
         a1:4d:03:ee:4b:54:ac:5d:d6:ea:31:71:88:f7:95:92:37:35:
         06:a3:0f:4b:26:2c:50:3c:7b:41:34:e3:2e:9b:f3:03:21:84:
         0f:cf:1d:7d:ff:4f:14:a1:4e:88:19:d6:27:64:18:c1:81:50:
         a0:16:c8:64:6c:7c:ab:fd:c6:08:c6:ce:4c:1a:b7:c2:17:0a:
         8b:7f:b8:62:90:27:b5:2d:a6:b3:86:71:3e:5a:69:ad:19:33:
         f5:42:49:99:a6:3d:4f:b1:cc:27:3c:22:91:58:09:40:45:71:
         f4:e9:73:e3:6a:c6:10:ec:b3:9a:56:0f:c3:6f:f0:95:7f:23:
         12:70:8c:cf:7e:5f:c7:ef:cc:e3:33:63:fe:2b:b6:9b:dd:77:
         2f:21:71:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:33:59 2026 by rpki-client