Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/96256949-7af4-3046-9e7e-84a6583c5064.roa
File:                     96256949-7af4-3046-9e7e-84a6583c5064.roa (raw, json)
Hash identifier:          4cmFyGVQcp6HOAQvrN3OLLwHvRaR7ao005ekaf6VAVk=
Subject key identifier:   8E:4B:D4:4A:35:57:19:14:37:16:AA:D7:03:46:EE:E4:94:0D:CE:CF
Certificate issuer:       /CN=174db496-399b-48c7-919e-3e6dfd4a5584
Certificate serial:       010D0C9F4328584F89A87A7FBCDC5E28C7EAF180
Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/96256949-7af4-3046-9e7e-84a6583c5064.roa
Signing time:             Sun 18 Oct 2026 01:00:13 +0000
ROA not before:           Sun 18 Oct 2026 01:00:13 +0000
ROA not after:            Sat 16 Jan 2027 02:00:13 +0000
asID:                     396982
IP address blocks:        69.48.232.0/24 maxlen: 24
                          69.48.233.0/24 maxlen: 24
                          69.48.234.0/24 maxlen: 24
                          69.48.235.0/24 maxlen: 24
                          2602:fc4e:f00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:89:a8:7a:7f:bc:dc:5e:28:c7:ea:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584
        Validity
            Not Before: Oct 18 01:00:13 2026 GMT
            Not After : Jan 16 02:00:13 2027 GMT
        Subject: CN=fabf2643-ab4c-437b-8cc2-33f7d46fc7ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:df:22:24:d0:85:a8:16:34:8a:b2:17:ba:78:
                    26:7d:d8:b0:8e:63:ef:cc:da:9f:90:52:8f:02:93:
                    f9:b2:bf:4a:7d:ff:fc:42:59:6a:59:bb:37:05:37:
                    22:dd:d4:94:9f:4d:40:2f:80:a5:e5:83:c4:e0:a9:
                    43:57:c2:9e:b2:42:2d:78:30:55:b0:52:9c:a5:aa:
                    12:e3:23:dc:14:84:3a:8c:26:7c:7f:86:a4:47:f5:
                    64:5f:37:33:ec:77:10:12:78:de:c9:c9:b6:83:a2:
                    1b:ed:d3:21:1d:74:3a:d6:f2:3f:30:5a:22:4a:80:
                    fc:91:75:28:3f:69:3d:a7:d1:cb:43:1f:75:a9:0b:
                    5d:55:83:5e:60:40:49:7a:f0:0f:48:5e:d9:df:88:
                    53:4c:7c:b9:e6:ae:bb:4f:30:7d:64:ee:c7:8b:7d:
                    c6:e3:49:9d:af:44:3b:ad:86:85:30:fe:32:aa:ae:
                    d8:b0:8c:98:8f:2f:cf:a3:78:8f:33:2f:88:d3:a9:
                    1b:6c:bf:5f:fe:52:82:59:2c:76:f8:07:5d:ef:37:
                    ec:42:18:bf:77:d5:7f:57:d9:93:c3:78:d4:c5:92:
                    6a:ce:d8:7e:35:53:d2:53:47:e0:66:74:0a:6e:b6:
                    58:09:37:a7:9a:37:d5:6a:5d:d3:85:a9:0a:25:01:
                    a5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:4B:D4:4A:35:57:19:14:37:16:AA:D7:03:46:EE:E4:94:0D:CE:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/96256949-7af4-3046-9e7e-84a6583c5064.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl

            X509v3 Authority Key Identifier:
                keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.48.232.0/22
                IPv6:
                  2602:fc4e:f00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:b8:38:08:1f:0a:ce:3c:54:0d:5a:48:ea:fb:2b:be:aa:67:
         78:7c:6e:18:65:70:ca:2f:bf:79:1d:19:27:08:e7:f7:8f:00:
         3f:a8:77:ea:70:ab:4e:00:09:0a:ae:0d:78:88:4c:8b:ae:0c:
         9a:bd:0a:fc:ad:93:4f:e3:13:f6:64:42:d5:d6:30:34:48:cf:
         94:68:0b:75:d9:95:de:e4:89:fc:f6:8e:e5:9a:8c:00:8d:51:
         19:01:a9:5b:e3:6a:a3:26:b1:18:bf:64:5b:76:8d:f6:f1:84:
         45:d9:f9:03:e2:fa:bf:dd:a1:fc:4b:d0:e9:c3:ef:9a:62:6b:
         f9:69:3d:e3:bd:20:f2:80:34:5c:b5:58:52:1f:f9:a1:ae:a2:
         2d:a3:6f:b5:9e:3d:33:04:7d:19:af:b4:c4:e1:a7:40:bc:45:
         73:1e:99:da:02:ab:c5:d9:01:1b:88:0d:da:5b:ec:2a:29:6c:
         35:53:5d:dd:de:15:cd:f1:8d:c2:e1:0a:3b:ec:c6:4e:5f:5c:
         8e:d0:ea:2d:96:9f:5f:a1:1a:73:25:ed:ac:18:86:a5:27:b1:
         88:37:c5:55:42:b1:b0:fc:32:f3:6c:7e:d0:6c:5e:47:8a:dd:
         cc:25:2b:4d:ec:8c:9b:f8:88:75:eb:ac:00:24:e1:09:da:40:
         d0:81:50:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 01:31:43 2026 by rpki-client