Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/1267b6d3-8042-311c-b914-a826c2d84195.roa
File:                     1267b6d3-8042-311c-b914-a826c2d84195.roa (raw, json)
Hash identifier:          BfeAHAsxQF4LeeucD1yKSFQtaXEMHWmXggujYY+auSM=
Subject key identifier:   EB:F8:44:56:A5:56:28:AA:B6:22:F0:72:13:E1:33:51:1D:FC:5F:23
Certificate issuer:       /CN=937a6fc8-35c3-4151-aa2e-2513420f9344
Certificate serial:       010D0C9F4328584F497405BA2CC116426CBC0B40
Authority key identifier: 6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/1267b6d3-8042-311c-b914-a826c2d84195.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     13720
IP address blocks:        69.174.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:05:ba:2c:c1:16:42:6c:bc:0b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=937a6fc8-35c3-4151-aa2e-2513420f9344
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=0cfaf846-b4ef-43dd-8d85-d94181e021a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d5:e3:39:7e:5e:6e:18:8a:b3:fe:44:e9:22:
                    50:13:6c:66:ea:4c:4a:51:99:7d:95:3a:7c:75:11:
                    7b:b7:ea:cc:d2:a1:91:cb:5a:6e:7a:ae:39:48:ce:
                    c5:a2:14:3d:85:33:8a:89:76:d7:95:df:05:d9:b6:
                    03:cf:3b:0a:e2:d8:27:2d:47:49:90:15:a2:04:5f:
                    03:8e:8f:89:73:e3:ba:1f:1f:c9:e9:3c:83:54:60:
                    3b:4a:8c:33:c6:7e:5d:ea:a1:37:5e:9e:36:42:a0:
                    1b:61:fb:25:39:e3:11:14:ec:ab:0a:86:b7:3c:74:
                    88:16:71:bb:9a:1f:c3:5d:f5:ce:47:4a:14:d0:63:
                    e2:a5:66:ea:39:f6:77:12:77:32:2c:ce:e3:1a:39:
                    6d:67:a5:92:dc:0b:70:47:32:d1:4b:84:f3:67:08:
                    2c:a6:17:21:18:df:22:66:17:a8:9c:00:37:49:b2:
                    49:ff:25:49:e3:11:6c:6f:19:42:27:11:30:1a:e1:
                    85:21:32:70:68:70:27:5d:62:7f:5f:cc:1d:a3:ce:
                    05:ec:d7:f9:5b:2c:6a:d4:ca:ad:70:ad:f9:11:18:
                    41:44:3c:18:a4:09:8d:e5:aa:8f:3b:23:fc:d4:00:
                    09:23:10:81:1b:4f:1c:48:bb:1a:fd:22:9d:9f:9f:
                    39:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F8:44:56:A5:56:28:AA:B6:22:F0:72:13:E1:33:51:1D:FC:5F:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/1267b6d3-8042-311c-b914-a826c2d84195.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl

            X509v3 Authority Key Identifier:
                keyid:6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.174.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:a8:1a:92:13:3f:0d:f2:38:c4:9e:3a:e4:31:7e:6a:6d:cf:
         55:73:e7:f6:c9:64:bc:7f:93:4c:c6:c2:59:8d:46:5a:6c:12:
         d8:5e:28:6c:58:e0:75:e8:37:03:dd:a2:2f:e1:41:13:9e:55:
         b8:58:7b:03:d7:50:cf:a6:1d:ac:d8:ed:1f:a2:8b:4a:cc:5f:
         11:b3:28:47:7c:02:c4:27:65:f8:bc:2f:21:4d:93:5e:1b:5a:
         5a:74:a9:cc:6e:7b:cc:4b:84:52:fd:95:c7:29:75:ae:3d:35:
         1c:b6:ff:de:f5:17:32:ab:37:b6:95:c4:36:53:ad:b0:7f:95:
         27:28:74:7a:21:74:08:b5:e5:87:07:83:ed:9d:f8:d4:03:c4:
         92:95:9e:78:9f:eb:c7:0f:0a:cb:4c:5c:c2:a9:0c:d8:8f:a3:
         c5:9f:77:33:1a:49:67:f4:02:5d:2f:5e:0d:f3:cb:aa:82:46:
         3b:c8:17:0e:1b:78:c4:22:bc:03:3d:90:ec:ec:5b:e5:22:55:
         10:06:bc:57:0f:d2:7c:88:0a:84:06:b3:50:98:45:c7:9a:71:
         be:64:d7:21:24:39:3b:2c:25:d7:4e:23:63:86:cb:7c:7b:c7:
         fb:48:42:40:bf:1c:c7:3c:c9:30:22:d0:c1:30:50:ce:bc:3b:
         f1:62:d3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:03:50 2026 by rpki-client