Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21/698c34f0-112e-3311-9be0-cb35fb62f459.roa
File:                     698c34f0-112e-3311-9be0-cb35fb62f459.roa (raw, json)
Hash identifier:          ueCPbFZCGKcUXFRI3ZNI3SZClMByIIjByW9o0n7ZwvA=
Subject key identifier:   C0:84:DB:A8:B6:5C:66:D0:32:22:4C:DA:2E:A1:29:FA:F1:32:4E:E7
Certificate issuer:       /CN=19eb256a-4db0-45f5-95c3-26a618298e21
Certificate serial:       010D0C9F4328584F90A300075BACA75009FE2C00
Authority key identifier: D3:6B:B7:B4:90:BB:05:13:0F:6A:EE:07:0C:17:85:68:8E:F1:3E:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21/698c34f0-112e-3311-9be0-cb35fb62f459.roa
Signing time:             Tue 20 Oct 2026 13:00:13 +0000
ROA not before:           Tue 20 Oct 2026 13:00:13 +0000
ROA not after:            Mon 18 Jan 2027 14:00:13 +0000
asID:                     55002
IP address blocks:        63.143.16.0/20 maxlen: 24
                          68.66.16.0/20 maxlen: 24
                          97.107.80.0/20 maxlen: 24
                          2604:f200::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21/19eb256a-4db0-45f5-95c3-26a618298e21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21/19eb256a-4db0-45f5-95c3-26a618298e21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:90:a3:00:07:5b:ac:a7:50:09:fe:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19eb256a-4db0-45f5-95c3-26a618298e21
        Validity
            Not Before: Oct 20 13:00:13 2026 GMT
            Not After : Jan 18 14:00:13 2027 GMT
        Subject: CN=08b9435a-c291-4d64-af56-e8dec3b3b712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:dc:89:40:19:14:ff:ff:52:ef:2b:12:13:1a:
                    e4:b4:90:7f:95:f4:b7:a4:09:96:7b:9a:0c:4c:5d:
                    c8:a9:26:79:26:c8:eb:0a:0a:13:6d:7b:f4:a1:5f:
                    31:e6:95:40:5e:97:70:9b:c3:51:63:0d:2f:be:6a:
                    b3:50:2a:e9:33:16:39:b2:82:f2:85:6c:df:7b:3b:
                    29:5b:8e:88:46:11:8b:99:98:dd:42:c5:1b:d1:2a:
                    5e:c4:41:a4:b5:65:2f:49:4f:27:33:88:2d:83:e9:
                    7e:ee:2c:32:1f:9d:de:8b:31:5a:a5:27:27:72:3b:
                    f9:f1:90:33:e3:33:0c:b2:4a:00:75:43:27:6a:a8:
                    6e:1c:5b:a9:b2:5a:28:c0:0b:11:a1:0e:a6:fc:a6:
                    34:cf:24:89:af:e9:d8:98:78:6c:ef:9a:a5:22:da:
                    76:39:61:49:63:71:8f:e0:2a:c5:70:51:3f:8c:b5:
                    e8:b5:e0:03:e8:d5:f7:ec:53:37:29:44:55:4e:ce:
                    ed:0e:0a:16:19:88:39:c5:27:f8:b1:15:01:50:f4:
                    99:dc:7b:32:d8:76:48:70:be:d4:d0:fd:ae:85:e7:
                    4c:9d:ca:73:09:15:29:8d:4e:e6:51:3b:e8:10:b7:
                    32:e4:49:cb:bd:6c:cb:2f:be:0c:87:89:df:a3:ed:
                    f1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:84:DB:A8:B6:5C:66:D0:32:22:4C:DA:2E:A1:29:FA:F1:32:4E:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21/698c34f0-112e-3311-9be0-cb35fb62f459.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21/19eb256a-4db0-45f5-95c3-26a618298e21.crl

            X509v3 Authority Key Identifier:
                keyid:D3:6B:B7:B4:90:BB:05:13:0F:6A:EE:07:0C:17:85:68:8E:F1:3E:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.143.16.0/20
                  68.66.16.0/20
                  97.107.80.0/20
                IPv6:
                  2604:f200::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:63:78:1d:22:eb:02:90:99:6a:3e:8a:89:3a:05:c9:17:4e:
         42:ba:bd:f5:bc:ea:a3:75:88:30:b8:32:26:b8:69:18:12:df:
         ad:ce:5e:2a:5b:48:84:2c:5c:30:4a:01:63:6e:69:b4:5c:4f:
         2b:5a:14:d8:e6:c7:93:af:40:c6:d3:41:b9:24:a2:45:9e:d2:
         6a:65:84:5a:4b:f1:2a:b7:f2:d0:7d:da:d9:83:dd:ad:b0:4d:
         36:a4:34:b4:3b:26:6a:64:75:1a:ad:72:13:fb:6a:6f:66:cf:
         39:29:e3:40:f7:a2:62:5b:cf:11:d3:40:59:ec:8b:62:33:6f:
         1e:ad:9b:25:43:b8:dd:9e:9d:70:b1:6e:9d:24:df:7a:c5:4d:
         5e:12:72:ed:c6:1d:32:84:7f:0a:85:85:ec:02:86:dc:0e:57:
         77:b1:d8:de:05:13:5e:78:09:4b:c2:4a:2f:28:c2:57:c7:3e:
         e3:4b:2c:24:95:94:e8:6b:f3:f6:4e:a7:2e:4a:9e:b5:79:ab:
         b6:83:54:33:29:dc:a2:e6:55:1c:82:e7:01:b3:3a:3a:e8:c3:
         a1:c0:19:71:4e:b9:c3:a6:50:43:bc:74:8e:f5:84:4f:bf:a0:
         1c:0d:0a:aa:c3:18:db:2a:87:1d:39:48:f8:f3:a8:04:4b:82:
         10:4d:c6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 06:56:33 2026 by rpki-client