Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cd859190-aa61-4eed-bc0f-2e0800c1bb84/2f668666-eb36-3d4e-b97a-48f2c8ebdbce.roa
File:                     2f668666-eb36-3d4e-b97a-48f2c8ebdbce.roa (raw, json)
Hash identifier:          3squD03QcFL+ussEjACH1Amftf8zM6fy7vifoaWyDzA=
Subject key identifier:   FA:0E:AE:D6:FE:D0:B3:06:49:03:4A:6F:00:90:F8:8B:7A:EA:9D:48
Certificate issuer:       /CN=cd859190-aa61-4eed-bc0f-2e0800c1bb84
Certificate serial:       010D0C9F4328584FA2C875DBE2295AD73F2F47C0
Authority key identifier: 08:DC:DF:CC:FC:BF:1B:00:6E:25:79:50:8D:2A:EA:AE:56:13:F0:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cd859190-aa61-4eed-bc0f-2e0800c1bb84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cd859190-aa61-4eed-bc0f-2e0800c1bb84/2f668666-eb36-3d4e-b97a-48f2c8ebdbce.roa
Signing time:             Tue 27 Oct 2026 01:00:14 +0000
ROA not before:           Tue 27 Oct 2026 01:00:14 +0000
ROA not after:            Mon 25 Jan 2027 02:00:14 +0000
asID:                     7003
IP address blocks:        69.87.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cd859190-aa61-4eed-bc0f-2e0800c1bb84/cd859190-aa61-4eed-bc0f-2e0800c1bb84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cd859190-aa61-4eed-bc0f-2e0800c1bb84/cd859190-aa61-4eed-bc0f-2e0800c1bb84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cd859190-aa61-4eed-bc0f-2e0800c1bb84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a2:c8:75:db:e2:29:5a:d7:3f:2f:47:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd859190-aa61-4eed-bc0f-2e0800c1bb84
        Validity
            Not Before: Oct 27 01:00:14 2026 GMT
            Not After : Jan 25 02:00:14 2027 GMT
        Subject: CN=40441fab-3453-4e39-ae2e-c302b2bd6490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:15:75:8a:0d:6e:ff:9e:e8:d7:93:a1:0e:42:
                    c2:24:85:f5:63:db:70:7d:f8:d5:8e:f0:2c:cb:fc:
                    01:1b:ca:6f:32:5c:3f:3a:e6:85:ab:2b:78:60:36:
                    4c:b6:63:37:ff:69:97:b2:20:d9:fc:be:a6:09:19:
                    3f:88:d0:c6:b6:59:90:71:4d:8e:a3:58:ad:02:6f:
                    3f:a6:da:8f:3d:0b:79:f4:04:fe:96:2d:34:ee:ba:
                    6e:ec:81:cd:a5:4e:ab:5e:17:46:50:8a:b3:f2:7d:
                    69:d7:0c:21:1a:a9:91:e3:76:38:f2:b2:69:87:63:
                    81:b3:66:f6:f9:6b:50:74:4d:6c:4d:a9:e8:11:4f:
                    ef:d9:87:a4:1a:d1:33:91:3d:c9:b8:2c:41:00:c5:
                    c8:d0:c9:8c:f4:cb:05:4c:41:83:3a:2f:00:96:88:
                    9e:97:5b:75:8c:f6:da:16:cc:53:63:c7:c2:3a:c9:
                    fc:aa:b5:c3:25:61:b2:18:9b:9a:16:60:c6:18:e4:
                    8a:de:61:3a:1d:e7:9d:4c:c2:96:95:8a:78:20:57:
                    a1:ad:e5:2a:f7:b4:c8:06:1d:29:2e:23:18:a0:2e:
                    9a:b5:60:7b:37:19:50:f0:cb:7a:68:04:e6:f8:a7:
                    a6:43:bb:e6:0d:0d:e6:51:eb:b1:31:58:2e:b0:1c:
                    d0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:0E:AE:D6:FE:D0:B3:06:49:03:4A:6F:00:90:F8:8B:7A:EA:9D:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cd859190-aa61-4eed-bc0f-2e0800c1bb84/2f668666-eb36-3d4e-b97a-48f2c8ebdbce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cd859190-aa61-4eed-bc0f-2e0800c1bb84/cd859190-aa61-4eed-bc0f-2e0800c1bb84.crl

            X509v3 Authority Key Identifier:
                keyid:08:DC:DF:CC:FC:BF:1B:00:6E:25:79:50:8D:2A:EA:AE:56:13:F0:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cd859190-aa61-4eed-bc0f-2e0800c1bb84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.87.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:a8:2d:ac:f2:60:cf:45:ac:c4:a2:84:de:bd:6f:94:7a:07:
         97:73:50:ed:b7:2c:4a:fe:1f:83:6f:23:b6:90:3a:e1:24:9f:
         8f:66:1d:63:1f:da:12:ba:53:f4:fb:de:b2:3d:58:69:88:7a:
         8b:65:5f:08:ab:dd:0f:42:df:40:df:f9:7b:f0:b4:93:30:3d:
         39:3f:c5:1e:fe:8e:ef:db:4f:a1:f9:d8:85:3c:38:06:7d:21:
         ca:36:4b:44:b2:0b:0b:f1:65:74:1c:1c:b2:9c:c0:e5:70:d3:
         cd:93:1a:58:2f:ae:2f:ed:f6:6e:18:ee:94:11:13:bb:bc:f2:
         f6:3a:92:67:48:bd:52:62:8b:87:7b:b5:68:35:b4:0f:08:b0:
         ef:21:ba:9b:09:a1:1c:69:a5:fe:b2:7f:44:b2:0d:0c:b8:b2:
         16:68:25:a0:f7:c6:21:9a:77:85:dd:47:35:a3:fa:c3:54:46:
         84:c6:3a:19:7d:28:49:07:d1:20:f3:b4:af:7a:b4:a4:6f:ff:
         a1:7b:6b:9d:0e:a4:67:8a:cf:b6:3a:86:49:46:2c:8d:c9:c0:
         9d:c1:48:d6:11:74:a5:e3:19:24:32:56:ac:60:87:bc:3a:bd:
         4c:91:33:d9:27:cd:04:f3:d4:1e:1a:bd:33:9d:a6:f5:31:78:
         3b:b8:f3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 21:47:14 2026 by rpki-client