Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/308b6c3f-9e13-4485-98fb-f2ee3ad9d276/5cf39a5a-58db-33c1-bc0c-547720da1b8b.roa
File:                     5cf39a5a-58db-33c1-bc0c-547720da1b8b.roa (raw, json)
Hash identifier:          TVhGs7QULh50k0SNODksajZOLFFVNCgC1XjxD/N/aD0=
Subject key identifier:   77:35:CD:D0:77:26:AE:CA:67:1B:18:FE:4A:B7:9C:F8:C7:3F:01:33
Certificate issuer:       /CN=308b6c3f-9e13-4485-98fb-f2ee3ad9d276
Certificate serial:       010D0C9F4328584F6F75C2C6D5DEB667504AF500
Authority key identifier: 84:5D:3D:38:87:83:BE:B5:F3:61:12:86:FE:BE:D3:2D:60:25:7C:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/308b6c3f-9e13-4485-98fb-f2ee3ad9d276.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/308b6c3f-9e13-4485-98fb-f2ee3ad9d276/5cf39a5a-58db-33c1-bc0c-547720da1b8b.roa
Signing time:             Thu 08 Oct 2026 15:47:27 +0000
ROA not before:           Thu 08 Oct 2026 15:47:27 +0000
ROA not after:            Wed 06 Jan 2027 16:19:19 +0000
asID:                     27268
IP address blocks:        69.8.63.0/24 maxlen: 24
                          69.170.224.0/24 maxlen: 24
                          72.9.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/308b6c3f-9e13-4485-98fb-f2ee3ad9d276/308b6c3f-9e13-4485-98fb-f2ee3ad9d276.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/308b6c3f-9e13-4485-98fb-f2ee3ad9d276/308b6c3f-9e13-4485-98fb-f2ee3ad9d276.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/308b6c3f-9e13-4485-98fb-f2ee3ad9d276.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:75:c2:c6:d5:de:b6:67:50:4a:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=308b6c3f-9e13-4485-98fb-f2ee3ad9d276
        Validity
            Not Before: Oct  8 15:47:27 2026 GMT
            Not After : Jan  6 16:19:19 2027 GMT
        Subject: CN=4758d23f-9c38-4d48-9606-a9feb9d5641f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:15:79:68:8c:a6:d7:c1:d0:90:d2:4c:68:9f:
                    4f:16:a5:83:72:6e:bc:5b:bd:7a:ee:b7:59:55:d5:
                    3a:f9:76:1e:78:62:cb:be:2c:56:56:84:41:42:72:
                    39:80:ae:18:ea:e8:dd:b0:73:d6:82:cd:98:cb:68:
                    8e:1a:10:4a:b4:f2:74:e7:2b:90:4f:0e:74:85:e5:
                    64:78:6c:d6:81:77:f5:d9:67:e6:ee:db:65:25:d9:
                    3b:11:d0:4e:d2:89:e4:4c:1a:08:72:7c:00:7f:c4:
                    18:7f:fe:58:58:4e:fd:26:3e:a7:49:a4:00:1f:b5:
                    f0:94:c5:2b:9e:a3:91:64:cc:e0:63:89:a3:89:76:
                    b0:c7:25:fc:dd:03:ac:5c:3b:47:c5:d6:65:72:7b:
                    9b:41:1d:a2:5f:0a:b4:a7:b1:d9:fa:bc:96:a4:7b:
                    49:1b:51:7e:75:66:4e:98:04:d2:57:c1:f8:ec:22:
                    92:04:8c:54:f5:46:7c:19:62:71:b9:e0:e8:4e:ff:
                    2a:73:00:42:3e:ab:26:1f:d2:71:07:3b:e3:99:54:
                    e1:e8:5f:0f:2f:45:33:ee:b9:4f:06:0d:c9:2c:de:
                    d1:d2:17:55:85:f8:32:1f:36:ed:b8:43:80:40:ea:
                    3d:ea:a9:39:a0:56:3d:f7:81:9f:7e:e0:85:7b:7c:
                    e0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:35:CD:D0:77:26:AE:CA:67:1B:18:FE:4A:B7:9C:F8:C7:3F:01:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/308b6c3f-9e13-4485-98fb-f2ee3ad9d276/5cf39a5a-58db-33c1-bc0c-547720da1b8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/308b6c3f-9e13-4485-98fb-f2ee3ad9d276/308b6c3f-9e13-4485-98fb-f2ee3ad9d276.crl

            X509v3 Authority Key Identifier:
                keyid:84:5D:3D:38:87:83:BE:B5:F3:61:12:86:FE:BE:D3:2D:60:25:7C:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/308b6c3f-9e13-4485-98fb-f2ee3ad9d276.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.8.63.0/24
                  69.170.224.0/24
                  72.9.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:2b:9e:fa:37:8e:6b:b7:9c:2c:f0:a9:fd:32:12:4e:b5:b7:
         76:ea:c9:4e:8b:34:c0:c3:b6:b1:bb:40:9b:e0:10:c4:e8:5d:
         77:30:d6:96:47:dd:c7:15:bf:cb:de:1a:60:29:22:ea:90:a1:
         09:ea:e7:0e:d6:94:99:84:3e:3d:a6:dd:60:84:cc:67:14:4c:
         a6:1c:ef:f3:74:d4:01:28:69:3d:7d:55:14:67:93:3c:1f:48:
         01:e6:5c:1a:1d:48:e9:ab:a5:a9:a8:f1:38:45:1b:94:f8:02:
         76:44:13:82:ca:ab:44:06:44:e4:9a:2a:0d:c3:3b:8a:2a:68:
         f6:7c:fd:1a:eb:5d:18:5b:29:fc:8e:10:f6:f5:ec:cf:96:7e:
         15:1d:d3:1f:83:cf:9e:cf:44:44:75:f7:0f:70:24:15:a5:e2:
         b6:3d:7b:f8:e2:e6:de:b1:ae:b2:13:d8:d0:d6:12:dd:77:17:
         03:3f:4f:0b:2e:5e:ee:c3:d8:bb:7a:a7:cc:54:b1:ae:fb:75:
         99:12:2a:b5:b4:7c:19:db:65:a7:6c:37:68:5f:a1:db:4e:e9:
         9b:79:e7:27:7d:91:65:20:ad:36:fd:fd:5d:8e:08:ac:6c:5f:
         57:70:96:1e:f4:8a:71:ec:8c:ce:11:a4:d5:71:b5:fa:c7:ee:
         b3:34:72:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 02:23:27 2026 by rpki-client