Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1cfad67d-a829-3e67-af1e-49e06b9803c4.roa
File:                     1cfad67d-a829-3e67-af1e-49e06b9803c4.roa (raw, json)
Hash identifier:          Tr85xdki9cgZT/JlSVVuhxbx21UEt3r0o0Vkcxw9PEk=
Subject key identifier:   F1:9A:81:18:7D:D7:31:2F:28:FE:00:07:43:E9:7C:D0:5D:C3:BF:D0
Certificate issuer:       /CN=1f7c91ae-026c-479d-9cb5-d3837e3d4751
Certificate serial:       010D0C9F4328584EF87CB3963BD676351B4840E0
Authority key identifier: B6:31:20:DC:30:4B:1B:26:F4:1F:E4:5B:2B:92:7D:62:52:7E:13:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1cfad67d-a829-3e67-af1e-49e06b9803c4.roa
Signing time:             Thu 27 Aug 2026 01:00:12 +0000
ROA not before:           Thu 27 Aug 2026 01:00:12 +0000
ROA not after:            Wed 25 Nov 2026 02:00:12 +0000
asID:                     812
IP address blocks:        69.164.176.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f8:7c:b3:96:3b:d6:76:35:1b:48:40:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f7c91ae-026c-479d-9cb5-d3837e3d4751
        Validity
            Not Before: Aug 27 01:00:12 2026 GMT
            Not After : Nov 25 02:00:12 2026 GMT
        Subject: CN=87d83cd5-620f-4ab6-bfad-cc7777432b6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:87:2a:7a:f9:c5:bf:b2:e3:42:7b:c3:c1:21:
                    8b:e1:72:05:d3:e7:27:8d:b3:10:ea:ed:3a:4e:f5:
                    46:af:86:af:f3:23:de:74:6e:22:fd:e8:44:4d:86:
                    de:b3:80:10:5e:84:98:8c:a0:1b:5c:80:67:39:ce:
                    36:33:fc:83:80:69:b7:c4:4b:d9:26:e8:59:8b:db:
                    e7:c6:0b:dd:dd:59:b3:5d:b8:82:2f:54:ef:99:d1:
                    f5:8e:8e:7a:f9:27:14:76:c9:ba:fb:49:2d:56:c0:
                    1d:aa:34:12:d4:eb:a4:23:54:5f:24:24:55:0d:10:
                    d6:ee:09:e7:04:8c:ff:bd:4b:c5:00:cf:3c:60:53:
                    80:4c:80:df:69:1f:ad:c4:95:3f:34:cf:cd:67:8d:
                    1c:f5:ad:db:dd:04:d8:b4:2b:a8:aa:27:a0:3f:e0:
                    a8:a4:e5:8c:3f:cd:50:83:18:e6:08:f9:2c:62:2e:
                    81:81:57:76:cc:6a:d0:bd:67:40:aa:ef:9a:7f:ae:
                    e4:bd:0f:46:10:a3:02:89:ca:de:3c:70:a5:8f:cd:
                    26:0c:dc:20:54:ba:07:03:31:1f:41:99:c5:a8:59:
                    2c:cf:0e:88:2a:db:37:21:02:63:0a:02:f6:65:d7:
                    23:72:9e:a5:07:e0:7c:33:5b:13:c5:09:4c:c0:b8:
                    38:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:9A:81:18:7D:D7:31:2F:28:FE:00:07:43:E9:7C:D0:5D:C3:BF:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1cfad67d-a829-3e67-af1e-49e06b9803c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.crl

            X509v3 Authority Key Identifier:
                keyid:B6:31:20:DC:30:4B:1B:26:F4:1F:E4:5B:2B:92:7D:62:52:7E:13:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.164.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:30:c0:6e:7c:9f:3a:b2:ae:aa:af:7a:6c:77:a3:f8:f9:70:
         42:e2:99:d8:67:88:42:4c:d5:b3:33:ab:77:99:2a:c7:38:5b:
         ba:c9:fa:80:50:bd:af:2d:d5:30:82:ae:14:ec:8d:73:25:56:
         c6:e9:63:16:93:c3:89:53:7f:97:7c:6c:2b:19:88:e9:59:e3:
         98:eb:e9:92:b8:e7:2d:40:76:21:a4:16:36:88:9f:63:f0:aa:
         01:7f:63:47:64:7c:60:a3:4c:a1:8b:d1:d7:2a:72:1d:25:78:
         26:8b:04:ad:74:40:d7:cd:39:a0:3a:ec:5c:d0:e7:c7:92:ca:
         e1:a1:1c:b1:85:b3:71:66:ee:e6:e0:06:40:96:60:ef:21:6e:
         6b:b5:29:20:e8:ab:a2:29:d2:1e:25:2a:da:f4:d4:37:3f:ed:
         dc:9f:77:55:58:82:4a:4f:1b:ff:a2:4d:11:fb:63:c1:92:e0:
         1e:74:01:42:89:1c:ed:4e:0b:07:9b:fa:dc:80:c5:1a:4a:cc:
         82:47:ba:e0:b7:40:f2:16:b7:12:83:3c:d9:f9:96:51:eb:42:
         05:a1:a7:a0:3b:54:67:3f:aa:2f:a3:e1:25:98:c7:99:51:eb:
         87:6b:ff:1a:47:f1:ad:f9:2f:fc:d9:62:67:1f:e2:4c:2a:40:
         db:e6:f3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:44:49 2026 by rpki-client