Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ffd96fbe-80e0-41c6-9f9d-38e3a991f0c9/cb2f6d6d-3b55-3444-96ca-e8df5f1e65ce.roa
File:                     cb2f6d6d-3b55-3444-96ca-e8df5f1e65ce.roa (raw, json)
Hash identifier:          AE4HNm6amOQM41FheGSuGDXeaWCpbuyVisnrxu1LzZs=
Subject key identifier:   64:D7:39:A8:FF:AB:1A:D0:28:3F:95:B9:57:21:A8:8A:80:88:DB:C3
Certificate issuer:       /CN=ffd96fbe-80e0-41c6-9f9d-38e3a991f0c9
Certificate serial:       010D0C9F4328584F63F81811AC87B78E87606500
Authority key identifier: 41:EA:CF:00:CF:55:36:EE:11:FB:1E:3D:03:C4:20:D5:38:36:69:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ffd96fbe-80e0-41c6-9f9d-38e3a991f0c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ffd96fbe-80e0-41c6-9f9d-38e3a991f0c9/cb2f6d6d-3b55-3444-96ca-e8df5f1e65ce.roa
Signing time:             Sun 04 Oct 2026 13:00:13 +0000
ROA not before:           Sun 04 Oct 2026 13:00:13 +0000
ROA not after:            Sat 02 Jan 2027 14:00:13 +0000
asID:                     64230
IP address blocks:        69.161.205.0/24 maxlen: 24
                          2620:e2:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ffd96fbe-80e0-41c6-9f9d-38e3a991f0c9/ffd96fbe-80e0-41c6-9f9d-38e3a991f0c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ffd96fbe-80e0-41c6-9f9d-38e3a991f0c9/ffd96fbe-80e0-41c6-9f9d-38e3a991f0c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ffd96fbe-80e0-41c6-9f9d-38e3a991f0c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:63:f8:18:11:ac:87:b7:8e:87:60:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffd96fbe-80e0-41c6-9f9d-38e3a991f0c9
        Validity
            Not Before: Oct  4 13:00:13 2026 GMT
            Not After : Jan  2 14:00:13 2027 GMT
        Subject: CN=fc546c08-0980-4aec-b568-f8570aceffb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b0:1c:ad:a9:60:1c:8a:3a:37:a6:75:f4:e6:
                    27:2e:e1:85:8e:c0:7d:ea:43:70:17:64:56:ca:3e:
                    9d:00:5d:ad:8e:66:f1:0b:b5:3f:de:98:13:f2:bb:
                    69:cd:f6:f8:20:b7:67:23:b3:12:8f:a0:0a:2a:17:
                    5a:7b:98:47:bf:52:29:ac:ac:47:75:1d:0a:75:8b:
                    59:26:75:04:9e:0e:9e:96:74:aa:19:d8:c5:5e:03:
                    14:70:ec:44:5b:f7:53:5c:9e:9d:9c:5a:64:62:9c:
                    a2:22:48:6d:3e:28:2d:bf:59:af:30:85:ea:67:cd:
                    70:ef:cc:09:0b:12:c7:25:3a:8e:2b:2b:e5:2b:c2:
                    67:5e:92:9c:cd:1a:45:24:cc:c4:1d:c2:8f:34:67:
                    63:03:6f:af:e1:96:89:07:38:01:18:2a:8b:24:2f:
                    2c:b5:85:cc:93:82:c7:b9:2a:ea:1b:16:79:1c:b6:
                    d3:e7:0c:84:f6:3c:30:63:d8:bd:e1:0d:c4:f0:b5:
                    5f:fc:8d:e4:3a:0b:49:1e:17:34:6a:1c:db:cd:e8:
                    30:b8:01:9c:07:ff:aa:6b:3c:4b:c7:2c:22:d3:0a:
                    e6:c9:d2:03:f8:c7:74:f0:53:ff:4d:19:e9:77:f8:
                    b8:a8:6b:0c:03:1f:59:b0:09:d5:51:cf:7e:d3:46:
                    45:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D7:39:A8:FF:AB:1A:D0:28:3F:95:B9:57:21:A8:8A:80:88:DB:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ffd96fbe-80e0-41c6-9f9d-38e3a991f0c9/cb2f6d6d-3b55-3444-96ca-e8df5f1e65ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ffd96fbe-80e0-41c6-9f9d-38e3a991f0c9/ffd96fbe-80e0-41c6-9f9d-38e3a991f0c9.crl

            X509v3 Authority Key Identifier:
                keyid:41:EA:CF:00:CF:55:36:EE:11:FB:1E:3D:03:C4:20:D5:38:36:69:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ffd96fbe-80e0-41c6-9f9d-38e3a991f0c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.161.205.0/24
                IPv6:
                  2620:e2:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:bc:9b:96:19:88:e8:a4:94:dc:39:e2:27:52:0f:54:80:d9:
         ce:5b:3e:88:25:a7:08:bf:e2:79:fe:4b:e5:6a:6b:7e:a7:ca:
         42:f7:18:8a:9d:0d:ef:d4:f3:46:0b:8f:96:e9:87:b4:8d:e1:
         80:c9:ee:14:f7:17:f8:87:51:9d:f2:3d:e1:5a:65:fb:78:fe:
         bf:9f:aa:98:08:f6:63:82:4c:2c:e8:6b:27:86:62:c7:b9:e2:
         22:4f:0a:bb:e8:49:68:7c:83:0c:e0:01:7c:38:97:5a:f7:11:
         a2:50:ec:22:48:d3:a8:2b:04:d6:7e:b8:f0:ae:4f:69:5d:04:
         ba:d3:08:37:1e:16:a4:28:49:aa:78:7d:42:c0:dc:8c:73:2f:
         d5:87:18:f4:bc:85:bb:3d:73:17:2e:00:e1:38:0e:35:2d:6b:
         66:b6:26:3c:4a:f7:82:51:e0:62:9f:e3:a1:1d:0d:6a:73:d2:
         a0:f0:bb:cb:c3:d4:72:de:22:ba:97:a3:32:e7:8f:02:e8:59:
         fe:08:da:5d:09:f9:66:ef:a2:2d:70:af:49:2a:b3:5f:88:f7:
         88:6a:37:54:6f:57:f2:31:ec:79:28:68:0e:f7:55:ca:50:10:
         bb:68:13:9c:e1:4d:d2:b1:31:55:a2:40:dc:a1:76:40:74:38:
         12:ee:e1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 05:56:43 2026 by rpki-client