Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/1fc74b11-0d15-3c22-887c-ef5f20b0b49e.roa
File:                     1fc74b11-0d15-3c22-887c-ef5f20b0b49e.roa (raw, json)
Hash identifier:          fCGye+qMman1RtGCVEQ7H6EIj9nok5Kc7peSnYuLG6M=
Subject key identifier:   8A:70:3A:5C:F3:4B:32:AB:86:DA:A8:09:BB:C5:28:8D:A8:96:75:D0
Certificate issuer:       /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial:       010D0C9F4328584F5458DFAB78FE54431C2C63C0
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/1fc74b11-0d15-3c22-887c-ef5f20b0b49e.roa
Signing time:             Mon 28 Sep 2026 22:42:25 +0000
ROA not before:           Mon 28 Sep 2026 22:42:25 +0000
ROA not after:            Sun 27 Dec 2026 23:42:25 +0000
asID:                     834
IP address blocks:        69.176.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:58:df:ab:78:fe:54:43:1c:2c:63:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
        Validity
            Not Before: Sep 28 22:42:25 2026 GMT
            Not After : Dec 27 23:42:25 2026 GMT
        Subject: CN=e3f28bf6-32f9-43ba-9552-6e9fd98e0223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a9:23:99:8c:be:db:47:49:a5:42:27:5c:7f:
                    33:fc:bd:e0:44:ab:ec:29:28:91:74:37:1e:ba:db:
                    92:17:3c:d9:57:29:3d:2b:10:04:76:a0:0c:82:e7:
                    3c:d8:05:ff:b8:cc:cf:2e:56:2e:94:fb:48:59:33:
                    6c:fc:a3:3b:de:47:87:ba:7c:b9:da:15:b8:f8:6e:
                    85:ea:7f:96:d8:d5:13:b0:0b:66:fc:77:4f:6d:70:
                    8f:2f:5b:22:5e:16:b2:56:b6:03:3a:31:9e:67:7a:
                    64:9c:0c:72:61:f6:a9:a9:05:2e:02:3f:fe:08:a9:
                    65:1e:e2:7c:92:10:d9:d3:b1:71:24:77:b5:4b:70:
                    f3:4f:78:14:e8:f8:f3:dc:9f:bb:f7:cc:4a:66:6b:
                    32:f9:7d:f9:14:b7:5f:29:00:68:04:90:cb:97:00:
                    73:dc:a6:41:61:3f:cc:7c:25:98:15:b7:89:45:8c:
                    ce:49:97:1c:00:e2:cc:3e:10:19:23:53:20:dc:3b:
                    97:d2:ce:bd:98:e6:59:b0:9d:c5:b1:3a:88:39:d6:
                    5b:80:5b:6c:03:0d:03:13:62:a2:9e:b2:0a:1f:18:
                    0c:84:53:19:b1:c3:e8:b6:81:78:fa:f0:1e:ad:53:
                    37:58:a0:50:17:18:71:82:76:b8:4b:7b:f1:e1:0c:
                    de:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:70:3A:5C:F3:4B:32:AB:86:DA:A8:09:BB:C5:28:8D:A8:96:75:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/1fc74b11-0d15-3c22-887c-ef5f20b0b49e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl

            X509v3 Authority Key Identifier:
                keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.176.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:1b:d9:1d:58:61:56:f4:67:20:f2:ba:1e:02:50:01:17:70:
         83:50:d9:a4:14:e9:11:01:ab:fd:58:59:d5:3b:1c:d3:80:a8:
         a7:0d:f1:d2:96:94:09:4e:f2:4b:4c:c8:01:7a:ea:18:3c:d0:
         71:ca:c6:d7:e1:4c:33:3c:7c:d1:62:bd:e0:68:56:98:df:0d:
         42:60:63:bb:90:5f:5e:fb:7a:7b:82:b9:29:b4:25:1f:b3:8c:
         d4:bc:56:2f:a2:74:29:f8:2d:cb:ac:c9:2a:95:05:70:27:5f:
         0b:c8:fb:e2:a5:dd:13:9e:52:d7:15:d9:0f:10:9a:fc:15:2b:
         08:1f:32:84:d3:e0:8c:cc:c5:f4:1d:3e:61:5b:fc:52:cf:df:
         90:c8:71:2f:1f:02:ca:08:00:1c:1d:a0:2b:01:50:97:67:ad:
         fe:7b:c1:da:14:cb:f9:51:68:10:fd:6a:63:cf:1e:84:39:e4:
         ab:bd:16:dc:0f:ac:21:54:9b:8d:30:b9:ac:9a:52:2e:c7:08:
         fa:ce:e3:76:f0:b0:53:36:a8:a5:f9:72:d6:57:86:f8:1c:4b:
         71:fb:ea:27:39:13:b3:ec:5e:69:51:67:f4:33:91:bb:b7:9e:
         11:80:28:1b:0b:dd:e2:51:82:b7:fc:78:a7:2b:d3:2f:39:82:
         51:58:04:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:20:18 2026 by rpki-client