Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/9829b46d-f07d-36a6-ae42-751dd886e99e.roa
File:                     9829b46d-f07d-36a6-ae42-751dd886e99e.roa (raw, json)
Hash identifier:          f1SljF6OGj32l2uzsR547p4Wq4cfSGbWeyEa9+vmfEk=
Subject key identifier:   98:22:CB:2A:E3:CA:AB:0C:B6:11:DA:A4:14:F2:6B:25:C9:21:AA:65
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584F5445C0794EB8EEDD3D8D6500
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/9829b46d-f07d-36a6-ae42-751dd886e99e.roa
Signing time:             Mon 28 Sep 2026 22:03:54 +0000
ROA not before:           Mon 28 Sep 2026 22:03:54 +0000
ROA not after:            Mon 07 Dec 2026 20:06:38 +0000
asID:                     23228
IP address blocks:        69.152.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:45:c0:79:4e:b8:ee:dd:3d:8d:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Sep 28 22:03:54 2026 GMT
            Not After : Dec  7 20:06:38 2026 GMT
        Subject: CN=b2c7236c-43ab-446f-aeaf-15cd61e38485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5d:40:63:ce:bd:2e:f2:0c:a0:77:c1:73:1f:
                    84:d2:ed:7f:d3:17:21:fa:81:cf:27:83:e9:cc:c4:
                    24:44:ea:02:e3:a4:49:d9:c9:19:6d:2a:51:d2:9b:
                    e1:f0:ec:6c:9a:57:3f:0e:40:97:92:14:1f:e0:7c:
                    b7:24:4e:fe:f1:9c:ad:fe:4a:c9:b8:75:c7:7f:19:
                    cb:4c:69:3f:53:55:33:d7:e5:34:a1:91:36:e3:6a:
                    a2:b5:9a:82:25:4a:01:fd:38:9b:59:59:ab:4f:3d:
                    18:08:7a:d7:28:7a:cf:53:fe:52:4c:e7:7d:ff:d1:
                    ba:c2:e5:54:04:04:73:5e:10:07:74:b1:fd:bf:49:
                    c7:be:c0:c8:64:4d:c7:fb:2f:33:40:a8:86:cd:74:
                    81:20:24:43:57:66:45:4a:49:49:d2:9e:eb:eb:50:
                    73:d1:83:3d:e6:31:b3:20:3a:a7:27:2d:32:23:b9:
                    c1:27:e9:7f:d9:55:cc:f5:ae:0d:5e:f7:46:88:86:
                    68:8d:be:c3:06:f7:33:ac:51:a6:fe:8b:11:46:db:
                    9b:0f:2d:d7:03:b7:94:65:6e:ad:8f:bc:ae:1c:c3:
                    1a:b8:83:f8:5d:ea:a3:64:d6:c9:27:2a:8a:4e:c5:
                    c0:54:b7:93:25:37:fc:1e:7e:53:c9:bc:aa:9b:65:
                    96:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:22:CB:2A:E3:CA:AB:0C:B6:11:DA:A4:14:F2:6B:25:C9:21:AA:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/9829b46d-f07d-36a6-ae42-751dd886e99e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.152.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:13:32:fc:44:3f:0b:24:b6:5e:10:b5:5e:9c:05:b6:4e:e4:
         48:de:67:ed:d9:48:c7:d7:22:6a:5f:44:a3:a3:2b:e9:84:5e:
         df:eb:41:de:7b:16:d9:5e:57:d5:b9:fd:53:80:e3:d0:28:d8:
         22:80:31:e3:17:a9:a5:4d:2e:74:c8:c2:75:26:bc:d1:7f:e6:
         4d:8e:ca:6f:ef:73:72:d1:2e:ba:3b:8f:64:cd:ac:2e:5c:88:
         ff:db:d4:f3:57:92:b3:04:bc:97:96:1f:6b:26:06:49:da:da:
         92:8c:01:62:77:db:34:6c:65:dc:2d:d1:15:af:b1:9c:e5:01:
         ab:2c:01:e8:7a:f1:66:8e:b1:37:e1:04:76:9f:9a:46:4c:96:
         14:99:cf:b2:43:83:2c:92:04:f3:3d:5e:ae:20:d4:d0:24:22:
         1c:b2:71:4d:40:b0:f5:75:ad:a4:2d:84:25:db:65:16:7c:e1:
         3a:51:84:15:16:83:86:ea:36:02:2e:af:9d:d0:33:09:05:ee:
         46:99:42:94:71:0b:34:90:57:84:cc:5f:32:16:7d:fc:42:bf:
         bf:c1:8f:67:d1:6c:a6:e8:9d:70:90:bf:41:0f:60:34:6e:3a:
         60:fb:ea:e9:47:65:1e:64:7a:cf:8b:19:1f:46:ee:21:37:39:
         5d:4c:16:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 02:33:31 2026 by rpki-client