Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/6623a826-3b26-3a89-aea7-8ae9a74fc81f.roa
File:                     6623a826-3b26-3a89-aea7-8ae9a74fc81f.roa (raw, json)
Hash identifier:          aHjI3u0mCxrbWrQbwuJ05pOsKri3cm4sEBDBaYh9lcI=
Subject key identifier:   CC:26:25:D0:2A:82:E7:F3:7F:94:85:66:C0:88:59:FA:99:69:0D:C1
Certificate issuer:       /CN=69686900-f201-4b2c-a1c7-afb725abe47f
Certificate serial:       010D0C9F4328584ED6FC81EDED86F0024FFE6B80
Authority key identifier: 46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/6623a826-3b26-3a89-aea7-8ae9a74fc81f.roa
Signing time:             Sat 15 Aug 2026 01:00:12 +0000
ROA not before:           Sat 15 Aug 2026 01:00:12 +0000
ROA not after:            Fri 13 Nov 2026 02:00:12 +0000
asID:                     29951
IP address blocks:        70.99.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d6:fc:81:ed:ed:86:f0:02:4f:fe:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69686900-f201-4b2c-a1c7-afb725abe47f
        Validity
            Not Before: Aug 15 01:00:12 2026 GMT
            Not After : Nov 13 02:00:12 2026 GMT
        Subject: CN=fedbf700-23d5-456f-92a2-b9541ba242af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ca:de:72:13:5c:f5:19:c5:47:f7:f7:14:29:
                    16:71:0d:cc:6f:9c:84:89:b9:fe:e2:42:50:69:4e:
                    7c:7b:08:11:68:a0:83:b2:a5:71:50:dc:7e:cd:f2:
                    c3:43:1f:78:e5:1b:a0:5d:9e:f9:c1:1e:fe:0a:92:
                    a6:2d:12:fa:65:3e:53:38:65:6e:1d:2b:b8:ec:99:
                    b6:c2:ab:40:3b:21:f8:68:c3:d0:96:be:e1:e0:1b:
                    78:1a:21:82:18:fd:59:05:7e:fb:96:f7:52:25:3a:
                    0a:96:66:6f:9b:4c:ce:56:59:4d:0c:31:b9:e4:bf:
                    cc:73:6b:60:1b:4e:8b:7d:32:87:43:19:b1:30:b1:
                    00:5c:06:ac:57:c7:97:a0:b9:7e:43:76:42:a0:9f:
                    40:35:9a:a7:c1:ec:45:6a:d9:ae:cf:84:f2:55:a2:
                    b7:49:e0:30:bc:b5:8a:73:5c:4c:93:cf:7d:44:c9:
                    31:9b:ae:3a:bd:6a:d7:33:4a:70:a4:48:ff:79:c3:
                    f8:38:c5:79:b7:f9:16:96:63:6d:41:72:6f:cc:80:
                    fd:8e:3c:07:0e:07:9e:d8:af:c2:96:bf:04:d1:f0:
                    50:aa:5b:96:0f:ca:cf:d2:87:be:1f:54:c0:dc:25:
                    df:ba:8b:a1:ea:09:b9:43:8f:8e:09:6b:f5:6c:ac:
                    39:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:26:25:D0:2A:82:E7:F3:7F:94:85:66:C0:88:59:FA:99:69:0D:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/6623a826-3b26-3a89-aea7-8ae9a74fc81f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl

            X509v3 Authority Key Identifier:
                keyid:46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.99.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:0a:5d:67:4f:70:1a:d6:37:ec:5d:f3:61:43:0d:e5:d6:1a:
         f3:a6:7c:cb:2e:a5:ae:12:c9:c6:ea:c5:96:d9:68:29:af:e3:
         56:87:0b:e2:2c:2f:51:85:74:32:e7:80:0c:c0:2e:f2:5b:b2:
         42:20:36:a9:2f:29:f8:30:2b:ab:e8:70:d8:8e:9c:8e:5b:1c:
         20:70:70:b4:1f:5d:6d:93:fd:f2:61:7f:66:aa:43:a5:20:2e:
         22:d8:07:20:09:a6:43:74:b2:91:72:45:5e:56:43:9b:2e:92:
         bf:0c:ac:96:ff:e2:d3:09:01:5e:b6:32:90:a2:19:37:a9:80:
         24:f5:3a:e4:d9:c7:f7:fb:fe:ae:b7:4a:f5:2c:7d:50:e6:f9:
         84:8e:72:92:d4:2f:18:a7:48:36:9a:4f:da:2f:7e:54:14:ce:
         45:9e:f4:d6:51:ae:cb:1c:ea:c8:82:30:11:9b:49:8a:53:b9:
         91:1d:9e:b3:36:ad:a5:e0:45:aa:1c:b1:77:02:06:02:75:6c:
         c7:b2:65:1b:75:e2:cb:c2:56:b5:3f:59:0d:ef:27:08:bb:fd:
         fb:07:0a:a5:6b:e1:ac:44:fa:29:f6:4f:34:54:79:f9:77:47:
         7a:95:30:93:8b:2d:70:ec:4e:61:25:64:bc:3f:54:1f:9e:df:
         76:01:d1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:55:36 2026 by rpki-client