Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c68ff263-b7fd-3997-a39a-567cbfe67c27.roa
File:                     c68ff263-b7fd-3997-a39a-567cbfe67c27.roa (raw, json)
Hash identifier:          q7J7VzdN4dUr4jlrIAWGISW+raE3TR4KOET1sLqvi8Y=
Subject key identifier:   CE:E7:11:76:8F:01:A7:84:0D:76:BE:98:C1:AD:A0:78:F6:11:01:F7
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584F5E62BF3315964FF6B0FF2590
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c68ff263-b7fd-3997-a39a-567cbfe67c27.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     64267
IP address blocks:        168.91.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:bf:33:15:96:4f:f6:b0:ff:25:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=c9f28616-7694-413b-851a-cf0f8bd78d4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:10:37:c5:45:9f:2e:4b:36:fc:19:42:4a:b4:
                    53:44:7a:87:b8:e8:6d:56:51:44:fd:c4:7b:d8:4f:
                    12:58:21:00:dc:fb:1b:62:92:6a:72:07:82:83:05:
                    50:57:ad:dc:79:33:43:16:c7:3c:cb:16:8a:96:fe:
                    80:37:d8:07:b0:be:54:09:35:6f:db:3a:43:9e:f5:
                    6e:08:cd:fd:53:42:be:03:69:36:c8:18:d1:45:5f:
                    d2:33:b3:29:60:8d:a0:50:69:5b:84:27:75:bd:21:
                    f5:47:e7:83:16:4f:5d:42:ad:a4:5d:81:2b:fc:b0:
                    38:4b:7e:dd:07:6c:30:4c:de:f4:4d:d9:f4:a3:12:
                    0b:f5:dd:7e:88:01:3a:1e:8c:17:58:6c:cc:a2:c9:
                    94:f5:df:05:30:e8:1f:b8:84:10:8f:1f:5b:8f:64:
                    2c:b3:11:d5:0e:79:be:ee:28:da:50:d6:77:78:9c:
                    02:00:01:2c:7e:b3:c0:db:ae:a8:be:c5:74:39:e7:
                    07:3d:aa:79:ba:3a:28:0f:27:71:cc:3e:48:6d:9a:
                    02:73:59:f8:5e:6d:1d:59:6d:93:60:c3:35:0f:f0:
                    f9:d4:73:98:aa:37:a3:32:83:28:83:7a:fc:82:0a:
                    de:b1:57:07:19:fc:55:2c:d1:53:07:07:f4:05:40:
                    28:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E7:11:76:8F:01:A7:84:0D:76:BE:98:C1:AD:A0:78:F6:11:01:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c68ff263-b7fd-3997-a39a-567cbfe67c27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.91.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:6e:4d:fb:58:e5:76:75:75:85:bc:d6:8a:bb:48:67:3d:8b:
         27:84:8f:35:e2:35:1f:e7:5e:8c:9c:01:a4:c9:5a:03:6c:f4:
         17:7d:95:2e:59:ab:17:a4:87:95:4e:a6:2c:9e:97:a9:f7:d5:
         8c:c9:9d:62:d7:d8:ae:cc:39:0a:9b:8a:d3:4b:60:5b:cb:8f:
         51:ef:17:41:28:85:0b:04:77:ff:b1:3b:f9:5b:36:c7:03:13:
         86:c2:ef:d6:69:8e:5b:58:e2:12:e7:aa:ae:60:13:a5:59:04:
         2a:d1:f1:b8:e7:10:0d:3e:00:ff:f0:c3:1a:7c:61:69:8e:bd:
         56:6a:66:12:3b:0b:4c:87:0d:5d:d0:af:26:68:62:9e:29:6e:
         f3:05:c2:48:f8:af:6c:f4:d1:63:de:7b:fc:68:08:58:88:e6:
         21:81:d8:fa:0a:fc:ed:2a:42:94:6e:79:74:37:71:99:eb:6f:
         d2:cd:99:13:08:de:9b:e5:8d:84:42:33:30:7d:3a:25:f4:c5:
         90:aa:f3:52:e4:8a:19:98:6f:bb:ed:d0:0f:4f:22:30:d1:30:
         65:94:d0:ba:10:c8:f5:07:12:d8:69:a1:3e:aa:19:27:b9:9d:
         77:ec:4f:b5:b3:f0:4a:16:dc:7d:2c:e9:89:29:d5:df:17:5c:
         bf:48:11:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 01:01:02 2026 by rpki-client