Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/ab8b7f08-0866-3038-9cb4-c53544963986.roa
File:                     ab8b7f08-0866-3038-9cb4-c53544963986.roa (raw, json)
Hash identifier:          1Pcgq95CAQifbPjNTgZXge5sLUlJDLxdlOryYrqrvJc=
Subject key identifier:   DD:95:07:40:B5:E4:74:87:E7:82:25:1B:44:4A:DD:9C:B6:2D:10:1D
Certificate issuer:       /CN=269d2481-9b5f-41f2-a09c-92994a3ae335
Certificate serial:       010D0C9F4328584F851D7E42F389B2654E85A540
Authority key identifier: 6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/ab8b7f08-0866-3038-9cb4-c53544963986.roa
Signing time:             Fri 16 Oct 2026 09:57:23 +0000
ROA not before:           Fri 16 Oct 2026 09:57:23 +0000
ROA not after:            Thu 14 Jan 2027 10:57:23 +0000
asID:                     40676
IP address blocks:        128.254.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:85:1d:7e:42:f3:89:b2:65:4e:85:a5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=269d2481-9b5f-41f2-a09c-92994a3ae335
        Validity
            Not Before: Oct 16 09:57:23 2026 GMT
            Not After : Jan 14 10:57:23 2027 GMT
        Subject: CN=17b9a693-c739-47a1-a63c-22f24ebaea84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:82:8d:34:18:fc:1f:b4:7c:9d:5d:8e:a2:88:
                    32:a5:73:28:7d:e8:03:ab:8c:ee:c3:fa:9c:82:89:
                    18:58:fd:8e:f5:d6:95:7c:a7:54:63:ca:f7:a5:8a:
                    fb:cd:b5:67:2c:46:99:a6:48:90:e8:7e:5d:9d:0c:
                    a2:6f:e9:d7:d2:2b:17:9f:ce:26:ed:8b:fa:94:c8:
                    bc:a4:02:a8:48:66:63:cf:29:2d:44:f6:70:99:60:
                    32:b8:ea:ac:b1:04:ab:7c:96:46:53:46:b7:be:a3:
                    ff:2b:85:38:ae:53:fd:fd:25:28:7e:6e:3f:6f:ae:
                    7c:81:4b:97:97:f5:b8:1c:94:b5:04:91:01:ee:2c:
                    e2:db:d3:60:51:ab:5d:03:cd:32:ad:db:ed:8b:2d:
                    95:54:bf:71:72:a4:29:32:8e:6e:51:a6:54:5c:da:
                    6b:89:aa:68:27:0a:1d:59:6b:5b:72:7e:ce:fd:83:
                    8b:f8:b6:c8:55:08:f6:d6:26:21:6a:03:9f:33:e6:
                    4c:ba:2b:5c:ed:09:0d:fa:69:19:ce:cd:3f:42:a3:
                    2b:41:fd:00:de:a3:d3:6c:a5:1e:30:79:ea:d8:f1:
                    75:ac:ba:f4:26:f5:a1:07:2d:f3:fc:ed:4d:26:26:
                    da:9e:45:50:7a:bc:f5:e5:32:28:db:81:03:9d:97:
                    d4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:95:07:40:B5:E4:74:87:E7:82:25:1B:44:4A:DD:9C:B6:2D:10:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/ab8b7f08-0866-3038-9cb4-c53544963986.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl

            X509v3 Authority Key Identifier:
                keyid:6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:4f:63:cd:60:82:42:3f:a4:ff:69:1e:e8:6c:cf:8d:cc:b7:
         2c:e2:76:47:d3:4e:b4:16:aa:39:38:09:68:e9:bd:be:21:09:
         ce:b2:af:92:b4:84:e7:c3:a8:bc:14:74:af:7f:6d:f8:3a:55:
         2f:fa:bf:69:c0:50:55:bf:1e:22:f0:21:5e:6c:99:ba:8f:b7:
         16:f3:24:26:6d:3d:2d:3d:31:8f:77:ac:f4:20:13:b3:80:fb:
         65:74:7a:b1:8a:e7:55:94:9e:3e:0d:6d:c0:f6:f5:2d:a4:de:
         f0:26:9e:dc:72:09:ba:0b:b1:fc:c5:93:9a:66:e3:5e:91:8c:
         76:80:5c:dd:4d:1f:22:6b:9a:48:1a:d5:c2:bc:92:1a:e1:2a:
         bc:f1:69:46:44:2d:09:0a:9c:be:b7:1c:18:9b:48:99:72:91:
         c5:18:6c:53:fd:13:d5:28:5f:a7:ae:41:62:40:18:92:ea:1b:
         e6:3a:9c:fd:ce:b1:79:30:31:67:ae:09:27:91:2e:84:36:9b:
         4a:b5:7a:c6:5f:ee:02:71:0e:a9:4f:86:dd:73:dd:fd:71:1c:
         f8:7c:27:84:99:93:30:ef:eb:94:be:fd:64:81:a1:5d:f5:72:
         e3:69:3a:c0:f8:1d:0a:30:7d:02:d3:dd:4e:02:fa:b7:71:ef:
         94:7b:af:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 17:54:39 2026 by rpki-client