Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/13dfd0ed-fc9e-3758-baa9-1c3d5090bb7c.roa
File:                     13dfd0ed-fc9e-3758-baa9-1c3d5090bb7c.roa (raw, json)
Hash identifier:          z6OLpJuOJF/9knTUj5IgH8txTpr/ZjFQeA7le9+kFSo=
Subject key identifier:   FE:4D:8E:44:06:4F:DD:DA:0D:61:75:F8:C5:3D:EB:5D:A3:F0:C3:30
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F4328584EE7BC9ED191E18F5CC4A15D00
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/13dfd0ed-fc9e-3758-baa9-1c3d5090bb7c.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     11260
IP address blocks:        24.138.0.0/18 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:9e:d1:91:e1:8f:5c:c4:a1:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=e5a617ae-ac32-4ca1-a813-c3875d1b47d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b7:6d:96:5e:b8:c2:58:f5:03:3f:e0:69:52:
                    44:eb:6b:d8:e5:bd:a0:d2:43:eb:6e:24:0b:48:3f:
                    17:40:ea:c4:bc:7e:47:fc:ef:36:67:3c:28:0a:62:
                    45:8b:d4:a4:5d:68:52:bc:07:1c:3e:bf:27:8a:d2:
                    e6:39:a7:ac:0d:b9:93:20:4f:07:ab:f8:8c:03:41:
                    ca:95:9d:60:b2:e4:44:cd:5c:a2:dd:89:78:f6:5b:
                    60:ef:a1:bb:a9:a0:84:e1:a7:5a:85:31:3e:41:97:
                    ff:7d:af:37:d5:8f:fd:0a:ee:65:c7:22:b2:ee:2d:
                    d6:a0:77:03:6a:d6:ff:1b:9b:54:24:0a:c5:e0:c4:
                    a5:77:ab:3f:0f:a9:bb:ec:e9:15:68:41:80:e8:94:
                    73:21:88:ec:43:14:58:52:30:25:73:1c:1c:ab:eb:
                    f7:ad:0b:7b:5b:a6:50:df:1c:ab:6f:a3:a5:bf:ad:
                    9f:9b:7b:85:ea:83:08:e9:db:eb:4b:e6:32:36:e0:
                    a2:71:c6:79:70:da:af:3f:3e:49:59:31:a6:2f:19:
                    2b:17:69:e4:1b:e9:16:d5:b3:7e:de:1b:96:23:83:
                    c2:b6:3c:cf:b2:a3:de:50:51:6a:c2:ac:9f:3e:5f:
                    32:81:22:fd:b8:58:a3:b1:f3:ef:a8:20:d5:82:13:
                    4f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:4D:8E:44:06:4F:DD:DA:0D:61:75:F8:C5:3D:EB:5D:A3:F0:C3:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/13dfd0ed-fc9e-3758-baa9-1c3d5090bb7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.138.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:0f:9e:2d:28:fc:9a:be:a8:e1:1a:67:bd:a6:90:a1:f0:d6:
         37:31:de:98:d7:67:60:d9:5f:90:b2:b6:54:2b:31:1e:2c:56:
         9c:df:b3:c7:11:d8:31:dd:25:29:b8:70:04:eb:50:45:b7:85:
         7e:e6:b4:4b:d4:b4:9f:95:8b:5f:e2:4a:75:ec:f8:81:92:4a:
         89:ea:15:93:38:fc:8a:64:78:bb:55:70:ac:3c:84:7a:ef:32:
         d4:cc:6e:6d:9f:10:b5:5d:f9:cd:8f:53:b4:ce:e1:65:b3:0a:
         7a:5b:2f:7d:92:b1:2b:a0:c1:e6:89:39:af:03:5e:74:3a:72:
         92:ad:ae:c1:d1:f2:06:47:36:8f:cf:53:a4:5c:e9:22:c1:40:
         bf:2e:86:62:56:a1:b5:a6:df:a2:66:47:b3:96:97:9f:a1:7f:
         01:6b:b0:dd:da:b7:56:8e:c7:1a:97:b9:14:64:88:48:30:e4:
         59:3a:a2:9e:ce:e1:11:1c:db:f2:bb:5c:e9:90:8d:6e:91:5e:
         f1:df:4a:53:ba:c0:20:52:35:ef:4a:fc:6e:d4:0f:7f:0d:10:
         3a:17:f6:87:f3:4c:04:09:1a:bd:0d:8b:83:0e:ee:8b:78:94:
         5b:7e:d6:77:c3:8d:e2:d0:a2:36:77:f9:09:19:7f:0e:41:27:
         a0:aa:9b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 12:43:42 2026 by rpki-client