Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/77f16fd0-9efa-3b30-8db5-bae8fd0e10eb.roa
File:                     77f16fd0-9efa-3b30-8db5-bae8fd0e10eb.roa (raw, json)
Hash identifier:          Ubx5uC8NnfljVafPdeEnNW0B5EyAvTxaX9yw3oHkXso=
Subject key identifier:   88:BD:66:D0:46:1C:0D:E5:F2:B1:66:32:BF:1F:31:B3:CE:D0:2F:15
Certificate issuer:       /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
Certificate serial:       010D0C9F4328584EA78798DD93822D47AC35AE00
Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/77f16fd0-9efa-3b30-8db5-bae8fd0e10eb.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     399629
IP address blocks:        69.48.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:98:dd:93:82:2d:47:ac:35:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=96bc9f7d-e533-4092-8267-349a9f1c2c02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a5:14:17:e7:6d:5f:d3:e1:3d:51:8c:44:51:
                    90:57:dc:fa:2a:81:f6:38:32:95:52:16:2e:bd:10:
                    96:0c:f9:75:2b:bd:07:ec:7a:78:05:ac:96:7f:6e:
                    33:c9:03:99:58:6f:10:53:8c:ed:68:3d:23:43:50:
                    36:fb:23:0e:6d:73:0e:8e:fd:40:f2:03:9a:33:d4:
                    c6:6a:a6:ce:f8:6e:1a:bd:91:ee:93:cf:f7:79:b7:
                    16:35:65:8e:a1:f7:96:9d:f5:0e:4a:80:ed:be:a8:
                    9f:c0:1a:19:ed:fb:e4:8a:4c:ca:c2:90:e8:f5:9a:
                    3b:86:df:c1:ff:11:ef:6f:e8:3c:2c:86:08:e9:7b:
                    f6:2c:41:a7:79:b9:58:f7:4c:f8:f0:61:01:25:9b:
                    a8:04:87:99:c5:16:8a:eb:39:59:4d:32:f6:d7:41:
                    22:ab:38:31:84:ba:77:5c:b5:7f:f0:48:8a:a3:b6:
                    ca:fe:04:62:33:38:5a:10:d4:6f:5a:f1:66:1d:a0:
                    50:03:64:37:f7:3a:50:dc:15:ef:0c:66:4a:ec:d1:
                    97:ac:f7:8c:d1:a7:d2:ac:3e:33:26:e7:28:99:5b:
                    86:3b:e3:10:b2:13:8d:48:e3:eb:a3:ee:c9:48:a0:
                    20:eb:80:9f:a8:f1:de:c6:f8:4b:79:0e:ea:88:0c:
                    5c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:BD:66:D0:46:1C:0D:E5:F2:B1:66:32:BF:1F:31:B3:CE:D0:2F:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/77f16fd0-9efa-3b30-8db5-bae8fd0e10eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl

            X509v3 Authority Key Identifier:
                keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.48.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:a8:07:39:99:e1:52:44:9b:af:42:f6:22:0e:0b:e9:55:60:
         4f:db:a2:1a:61:34:79:98:18:6b:37:2c:e1:17:58:a4:24:d2:
         bd:a8:fd:37:2c:0c:ac:2b:73:fe:22:6f:96:e0:63:99:38:dd:
         30:0b:a7:16:4f:bd:b2:7e:2c:3e:f0:46:24:07:ef:11:eb:a4:
         54:6b:05:5c:89:57:5a:10:65:81:2b:c6:c2:80:6f:08:2f:9f:
         40:ef:84:7f:3b:1f:6a:42:f2:a8:fb:8c:70:89:d0:cd:90:5a:
         1b:a6:a3:3b:29:03:b1:f1:5b:99:a7:06:14:67:6a:38:1d:2a:
         c6:dc:14:e8:cd:fa:ef:9d:ea:be:10:ec:37:27:39:7a:26:2f:
         e0:74:71:0a:41:51:67:ef:12:7d:00:de:96:f3:cc:fd:9e:42:
         95:1c:e7:a8:ab:ac:22:48:1d:fe:66:40:68:84:e8:ac:18:0f:
         1b:5b:ae:fb:52:20:43:24:7d:c9:32:d6:b2:14:c8:b0:4f:64:
         60:dc:1c:38:a4:b3:97:d6:b8:5a:bc:76:09:b1:3c:b8:cf:db:
         92:6a:83:b7:fb:b9:74:84:b8:57:3e:a0:e9:9d:d4:0b:c0:2f:
         6e:a3:54:42:c3:68:8f:31:25:70:61:53:82:9f:ba:54:76:30:
         6a:7a:2e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:41:33 2026 by rpki-client