Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/269265c9-b9fb-3d7a-add3-0109b6d1e5c7.roa
File:                     269265c9-b9fb-3d7a-add3-0109b6d1e5c7.roa (raw, json)
Hash identifier:          JtxxPEnrIE+4J5toN3Vg8Z61Q6Of9/TBS0i8BDkfLgg=
Subject key identifier:   6E:FD:FE:4C:7A:DA:60:70:F2:AD:BC:1B:EC:6A:4B:29:36:BD:EC:8F
Certificate issuer:       /CN=f2bc6b7a-b8f5-4109-b7af-8975e2444d75
Certificate serial:       010D0C9F4328584F497645F2EC445A49F0943C40
Authority key identifier: 58:74:A0:D7:3F:5C:F6:7C:EA:E0:36:90:47:16:07:B8:01:5B:F8:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/269265c9-b9fb-3d7a-add3-0109b6d1e5c7.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     15296
IP address blocks:        204.209.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:45:f2:ec:44:5a:49:f0:94:3c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2bc6b7a-b8f5-4109-b7af-8975e2444d75
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=6cec94c4-17b3-4a6b-becc-00a31ca7e381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:56:b1:78:e2:08:82:a1:e0:1b:49:d1:ec:fd:
                    d7:28:2d:c8:29:49:8f:7b:a5:bb:17:e2:ba:d7:8d:
                    9a:ec:0c:a7:18:84:44:f5:9d:81:bd:58:b3:00:c2:
                    1d:45:c7:c9:44:3a:63:7f:56:2e:d6:6f:68:47:10:
                    d9:9d:dc:83:17:9d:88:76:63:a5:0b:57:27:07:a9:
                    fc:58:11:e0:ae:86:33:82:73:0a:d1:2d:cb:66:ea:
                    09:98:2f:86:b9:50:3a:52:80:bd:61:de:63:74:50:
                    c4:39:29:58:11:a1:af:bb:18:7e:8e:29:1b:56:9d:
                    fd:06:a0:fe:8e:d3:0f:93:da:3f:70:cd:9b:4c:3c:
                    6e:6b:75:08:51:1e:a3:a7:89:6b:f4:b8:f9:ff:16:
                    1e:b9:26:77:cc:a5:aa:f0:52:27:87:76:4f:c8:1f:
                    c6:61:ae:f5:3a:66:c7:82:34:a6:1a:44:9a:6b:3d:
                    a3:8e:cd:6b:e8:c6:74:a3:5b:d1:26:6a:e5:96:5f:
                    4e:88:5b:ce:18:a4:f4:b9:ac:ef:f7:05:e0:5a:7e:
                    6f:f0:40:bf:dc:47:5d:fc:51:13:7d:d0:89:2c:5f:
                    0b:de:9d:49:89:01:f7:f4:fb:5d:01:57:c4:4f:45:
                    dd:70:45:4b:38:57:e7:bc:b3:dc:d7:e8:84:ec:f9:
                    c2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:FD:FE:4C:7A:DA:60:70:F2:AD:BC:1B:EC:6A:4B:29:36:BD:EC:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/269265c9-b9fb-3d7a-add3-0109b6d1e5c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.crl

            X509v3 Authority Key Identifier:
                keyid:58:74:A0:D7:3F:5C:F6:7C:EA:E0:36:90:47:16:07:B8:01:5B:F8:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.209.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:a9:67:1a:9d:9d:cf:e6:45:df:5e:4b:6d:45:e0:53:bd:ad:
         97:dd:4a:80:9d:8b:27:e6:5d:ab:d9:d9:96:23:b1:f4:d4:c9:
         ca:19:19:02:e0:b3:8f:cb:73:7f:49:32:b6:15:27:f5:b2:a9:
         06:d9:9c:82:0e:57:3e:75:ec:8f:95:48:dc:5a:67:75:d4:8b:
         c4:f5:fc:53:1a:c8:3e:15:80:b6:92:05:10:fd:3c:5f:b7:98:
         11:16:11:18:84:69:0f:9f:82:c8:2d:a7:46:b5:22:73:73:1e:
         a4:36:44:02:fa:fd:58:11:24:aa:7f:12:2e:ec:c5:1a:8b:7c:
         87:44:88:f5:8c:34:4b:4a:59:f8:e5:77:fb:ce:97:b5:4e:39:
         ff:62:3c:c3:1f:28:aa:56:3e:38:dc:ee:45:08:3f:b9:60:b3:
         df:60:83:50:7c:17:28:30:bc:51:34:ee:27:6a:0e:94:a8:59:
         4c:16:3b:67:39:5e:ff:69:20:6e:df:2c:b1:7b:03:99:6b:b2:
         bb:7c:65:c7:34:db:c7:78:51:1e:58:8c:fe:21:8e:01:c6:5a:
         11:5c:22:c0:03:93:49:ed:ae:64:9d:52:19:bd:9f:a1:53:39:
         60:73:4e:6c:87:48:af:76:01:dc:6c:05:16:ec:3a:0a:01:0f:
         b7:05:2b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:32:46 2026 by rpki-client