Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07b4eaeb-b7eb-3fed-b31f-5aa633428551.roa
File:                     07b4eaeb-b7eb-3fed-b31f-5aa633428551.roa (raw, json)
Hash identifier:          IRPZdY1TbppfF+iupzrFOxZKd9iNV8mDhVIi0W9VZPk=
Subject key identifier:   E1:1B:F5:07:12:19:45:D5:F6:FB:9F:1D:DB:C7:87:3A:09:CB:F0:DE
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584ED0020453F8A146CC67700680
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07b4eaeb-b7eb-3fed-b31f-5aa633428551.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     36183
IP address blocks:        172.226.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:02:04:53:f8:a1:46:cc:67:70:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=2bf3d39d-0f26-4565-8906-2e7444c81f2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:52:5b:93:0c:0b:6e:a4:31:c6:c1:78:98:5b:
                    05:16:fa:da:cc:b7:6b:78:2f:a5:76:00:89:61:5a:
                    60:fd:10:d5:ba:54:23:12:29:9b:e9:34:9f:aa:2f:
                    32:a2:b1:79:90:30:6f:a0:20:01:37:ab:6b:6b:26:
                    96:ee:8d:a9:a5:5a:3e:2c:e3:2f:3e:d3:2a:3d:cc:
                    9e:ff:35:50:09:44:a0:cc:5a:6d:01:6a:32:af:d4:
                    8d:a3:38:48:b7:05:ab:c5:48:05:75:36:65:59:0f:
                    6d:0f:5d:4f:b4:23:0f:e5:47:9d:a7:c8:f1:7e:81:
                    67:4a:3b:9b:88:64:39:18:5c:bf:8a:8b:80:5d:10:
                    1a:d7:de:1a:12:cd:cc:69:f5:5a:32:c8:c0:cd:7a:
                    17:a2:3e:b2:8e:7f:0d:1f:41:54:dc:c2:03:c5:e7:
                    03:07:e2:97:87:45:07:04:0a:ce:6b:f7:c2:b4:ea:
                    e7:8f:82:58:ea:00:fc:03:2b:6f:d0:7c:aa:8d:cb:
                    26:37:de:9b:9c:c3:52:e2:e3:a3:5f:84:e0:1a:8d:
                    dc:82:dc:c0:ab:42:d9:72:f0:5f:ce:a1:75:e1:9f:
                    96:fd:2f:20:c0:a2:fe:99:98:5d:2d:5e:4d:de:ef:
                    08:40:ad:7c:1f:52:56:c3:9a:e3:81:81:c9:06:bd:
                    16:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:1B:F5:07:12:19:45:D5:F6:FB:9F:1D:DB:C7:87:3A:09:CB:F0:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07b4eaeb-b7eb-3fed-b31f-5aa633428551.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.226.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:fb:2f:38:c7:4a:0a:96:15:f4:aa:4c:dc:4b:8f:55:77:87:
         2f:84:21:9a:5e:95:90:c7:30:e9:99:81:62:fb:17:39:3d:e0:
         72:25:2f:32:bb:b3:da:0b:11:97:90:1a:ef:ca:1f:61:6d:da:
         44:70:89:0d:42:e1:42:aa:81:15:3d:ba:06:c0:6d:b1:cf:2f:
         d4:9c:00:16:9f:01:9a:85:4b:34:dd:80:1a:ae:8d:95:af:aa:
         3d:25:65:ae:d4:8e:cd:ea:61:e3:b7:dd:a4:f0:c0:3e:7a:eb:
         86:01:03:d7:42:d5:8b:83:bf:4f:a1:25:10:d4:bc:0b:cd:ef:
         74:e6:53:90:f7:80:07:88:33:37:35:5c:99:7e:f9:ba:99:12:
         31:fa:7d:f7:5c:0d:7a:f3:da:18:bb:48:29:56:1b:64:e8:cb:
         5f:b2:1b:0e:fb:41:59:f1:12:26:2c:fa:cd:4d:35:41:2e:2f:
         69:04:e4:cf:0f:23:5e:78:1d:24:8d:a1:dc:97:39:8f:cc:04:
         b7:86:9a:66:dc:cd:35:0f:12:e2:5d:cd:91:19:90:ae:34:02:
         81:13:b6:55:c5:7c:a2:78:49:6c:90:12:a5:42:47:13:e3:ad:
         15:cb:61:1d:70:33:fb:84:cc:89:da:c6:57:05:46:4f:55:2c:
         f7:bd:eb:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:44:33 2026 by rpki-client