Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6887eee0-416a-404d-ad65-190613613018/8866456b-6e57-3778-a0a6-34a22f81f0ab.roa
File:                     8866456b-6e57-3778-a0a6-34a22f81f0ab.roa (raw, json)
Hash identifier:          orjb1cyItYv9Q7Z/5Z9Xis9lsK4hLluy2hjKa5ivX9g=
Subject key identifier:   63:BB:DC:12:05:41:F6:C8:2A:2F:BA:81:11:3B:50:79:01:2C:99:24
Certificate issuer:       /CN=6887eee0-416a-404d-ad65-190613613018
Certificate serial:       010D0C9F4328584F96385A02801A0EBA798E9280
Authority key identifier: 7B:5C:D2:6F:07:D1:24:31:AF:CF:CE:8F:F0:9A:EB:8A:04:A2:06:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6887eee0-416a-404d-ad65-190613613018.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6887eee0-416a-404d-ad65-190613613018/8866456b-6e57-3778-a0a6-34a22f81f0ab.roa
Signing time:             Thu 22 Oct 2026 13:00:13 +0000
ROA not before:           Thu 22 Oct 2026 13:00:13 +0000
ROA not after:            Wed 20 Jan 2027 14:00:13 +0000
asID:                     1404
IP address blocks:        69.46.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6887eee0-416a-404d-ad65-190613613018/6887eee0-416a-404d-ad65-190613613018.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6887eee0-416a-404d-ad65-190613613018/6887eee0-416a-404d-ad65-190613613018.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6887eee0-416a-404d-ad65-190613613018.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:96:38:5a:02:80:1a:0e:ba:79:8e:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6887eee0-416a-404d-ad65-190613613018
        Validity
            Not Before: Oct 22 13:00:13 2026 GMT
            Not After : Jan 20 14:00:13 2027 GMT
        Subject: CN=b0f33ad5-06cd-44d1-aec5-8d8eedbed205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7d:b2:d1:3e:76:5b:87:5f:70:72:bc:15:0b:
                    6d:81:2c:9f:5b:06:5d:c0:48:01:66:25:62:ce:06:
                    fe:2f:e2:e0:21:9e:a8:81:df:e5:a8:d3:52:ae:cf:
                    f5:5d:e0:30:2c:55:4f:3e:1e:38:48:3b:70:4e:03:
                    50:ff:a5:08:4b:91:f9:e5:56:e5:30:ad:f7:61:83:
                    f3:5b:9c:75:83:70:0d:e6:58:6a:b6:29:47:4c:26:
                    94:07:52:9a:fa:d6:26:da:d3:cd:ec:99:44:ee:82:
                    8e:78:14:a9:fe:b0:09:58:63:35:08:a7:bd:06:7a:
                    58:47:2f:55:7a:02:09:44:10:ed:af:3a:b6:68:b5:
                    9c:e6:85:1d:e2:12:7d:11:cf:b5:94:6d:f0:c5:1a:
                    37:90:ff:1d:54:ee:00:01:6a:ba:2a:15:78:0e:d2:
                    83:7a:97:3f:6b:48:71:a8:f2:0f:3c:dd:2c:6e:8f:
                    3b:40:38:2e:07:f8:fc:ac:32:b0:2e:13:1f:2a:e9:
                    8b:e5:c1:8a:e6:e4:7e:66:8d:79:38:36:b6:ed:29:
                    08:43:04:c5:f2:2e:07:75:c2:31:23:5c:2a:4c:69:
                    1a:e3:7b:f8:99:a8:7b:91:91:20:e0:64:3a:35:08:
                    62:e5:cf:2c:04:b3:52:9d:fe:9b:0e:d1:a1:9d:ce:
                    65:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:BB:DC:12:05:41:F6:C8:2A:2F:BA:81:11:3B:50:79:01:2C:99:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6887eee0-416a-404d-ad65-190613613018/8866456b-6e57-3778-a0a6-34a22f81f0ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6887eee0-416a-404d-ad65-190613613018/6887eee0-416a-404d-ad65-190613613018.crl

            X509v3 Authority Key Identifier:
                keyid:7B:5C:D2:6F:07:D1:24:31:AF:CF:CE:8F:F0:9A:EB:8A:04:A2:06:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6887eee0-416a-404d-ad65-190613613018.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.46.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:b3:f2:ec:ca:5e:9f:ea:4c:c1:ab:37:1b:a3:47:62:99:09:
         9e:d3:44:b1:47:39:a5:a6:b8:cd:cd:36:54:fd:1c:55:6e:3f:
         10:75:8a:d0:5f:59:24:43:ca:34:a3:57:a2:c1:fd:09:54:a3:
         63:00:a5:04:96:31:fa:a7:8b:22:b6:b8:c0:e6:2c:a6:c4:49:
         a1:91:46:25:6b:af:44:b5:3c:82:71:8e:37:04:66:14:9c:0c:
         11:86:38:07:4c:54:30:e4:a2:81:34:47:88:94:4e:b4:68:68:
         7e:e0:db:fc:30:a1:7d:13:b3:dd:8b:a6:ea:d8:12:2c:ca:8b:
         67:20:cc:be:69:26:41:5d:3d:d0:c0:f7:13:8b:0e:9e:4f:48:
         e6:1a:77:50:7a:e2:f5:17:a4:3f:ef:82:4a:7f:8c:bf:6a:d9:
         0d:cc:54:19:6d:6a:dc:93:2c:fe:d2:f1:ce:21:0d:13:8f:f8:
         ce:ba:07:38:03:01:05:bc:bc:f9:5c:69:ed:f8:8f:0f:76:82:
         ab:63:f3:2a:10:8b:7b:cb:76:b6:8c:61:71:b0:dd:33:13:c4:
         00:66:2a:3a:35:73:9d:fb:1a:5d:50:78:bd:e4:52:32:f0:04:
         84:3f:41:af:07:f4:88:b9:2a:d5:b5:ee:75:17:d1:8f:35:32:
         b0:ac:3e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 15:10:16 2026 by rpki-client