Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f8a2f43a-93cd-36dd-8bd2-b76d45f869c4.roa
File:                     f8a2f43a-93cd-36dd-8bd2-b76d45f869c4.roa (raw, json)
Hash identifier:          dRfsSUPjlb3qJ7P/1wB0if0y/b/KIT2tj1FO4xZujP0=
Subject key identifier:   BD:F3:3B:3B:CA:49:58:E4:7A:3E:26:73:62:9B:0E:6A:76:95:AF:1F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F4982E6E3301A4D2C1B97B380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f8a2f43a-93cd-36dd-8bd2-b76d45f869c4.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7922
IP address blocks:        69.139.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:82:e6:e3:30:1a:4d:2c:1b:97:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=104961e5-06ff-4163-b681-248ed3780675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fb:27:c1:eb:ef:20:45:61:37:37:03:8f:d8:
                    7c:a9:93:0b:e3:b0:a1:81:ef:35:f9:be:99:7b:c6:
                    34:7d:da:1b:9a:4d:7b:0a:0e:55:51:19:12:e2:05:
                    72:10:45:bc:2d:b0:34:cc:23:39:24:ea:6e:67:69:
                    77:29:b8:57:2a:c2:a0:57:94:f1:2a:78:bf:77:c9:
                    45:a6:18:95:86:45:fd:8a:57:c9:2f:76:61:8f:2c:
                    f9:5a:74:30:59:b8:46:ea:2d:b0:3a:61:96:17:0f:
                    21:38:40:c1:31:ca:61:55:8f:ee:05:f7:f4:20:5c:
                    2e:2e:b5:b4:29:8e:7f:2b:8f:7c:fe:4a:5c:54:3c:
                    71:60:e4:ce:bb:2f:1d:e5:2e:ad:e8:6c:63:21:d4:
                    59:11:5c:7b:47:64:65:4e:e3:d0:46:40:a0:e2:3b:
                    f5:ef:33:f2:73:93:22:b6:3c:8d:3e:37:9d:4b:66:
                    73:42:84:c7:9f:e0:4b:c9:fd:18:b1:ad:cc:1c:42:
                    99:67:0c:b4:a9:7b:c0:b8:1d:c3:69:45:fe:02:3c:
                    44:70:5a:83:b6:1e:25:5e:04:d1:9a:07:8d:d5:ed:
                    25:17:f8:e6:a2:13:be:99:5b:1e:d3:8a:c9:9a:5e:
                    a5:77:2c:a7:f4:90:fa:67:f4:f6:b6:82:9b:91:61:
                    c8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F3:3B:3B:CA:49:58:E4:7A:3E:26:73:62:9B:0E:6A:76:95:AF:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f8a2f43a-93cd-36dd-8bd2-b76d45f869c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.139.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:7f:31:bd:84:3a:6d:d2:b4:82:c7:8a:b3:36:10:50:e2:d8:
         ad:76:cf:95:3d:99:db:03:1f:4f:24:a4:9d:6d:d3:ea:f2:08:
         e0:ea:f3:f8:96:4f:5d:16:c3:0a:e6:4f:25:4f:c3:89:3c:d4:
         51:79:e8:f1:e0:56:2d:9e:92:6a:b1:b0:ea:eb:ef:47:ca:4a:
         db:ad:6f:7e:64:d9:11:ed:0a:8a:2f:3e:e3:69:c2:66:5f:2a:
         e0:3c:a2:6f:56:11:69:0e:e3:f1:fc:d7:9f:6c:59:67:c0:c9:
         1f:65:3d:30:63:d1:4d:7b:93:4f:3d:c0:48:0f:fa:8a:dc:31:
         93:92:7f:58:c4:c6:d6:0d:b8:30:b5:d7:fd:f6:8f:3d:db:ce:
         66:f6:b9:6f:86:44:42:3a:a8:7d:15:d7:55:97:cb:b2:d6:b8:
         94:f0:d8:06:07:e8:6f:bf:b5:29:b2:ab:a9:83:4a:a5:5c:94:
         8f:cb:79:fc:7f:60:4e:14:30:f7:cf:57:3f:11:01:ab:ec:86:
         3f:de:50:70:2f:81:4b:ad:3a:ef:68:df:f8:ef:cc:9e:15:e3:
         d3:0c:3c:10:13:7b:82:b6:10:44:fe:8c:e6:98:4f:51:8f:8d:
         4e:fc:11:7a:fc:b0:08:9c:17:44:30:16:12:1e:f2:06:d1:7c:
         6c:38:eb:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:23:02 2026 by rpki-client