Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/15d5ec7e-044b-30c5-90d8-02693f5c0795.roa
File:                     15d5ec7e-044b-30c5-90d8-02693f5c0795.roa (raw, json)
Hash identifier:          bH9ClTw/KowQiW4CDqrSvBkgAU05ySTP+IVmfgqxzwE=
Subject key identifier:   B2:96:A9:09:05:2B:F2:D4:6D:9B:53:93:D1:C8:9D:17:E0:CE:CC:F9
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F4328584F89A85BAE04667A4B2F61CF00
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/15d5ec7e-044b-30c5-90d8-02693f5c0795.roa
Signing time:             Sun 18 Oct 2026 01:00:13 +0000
ROA not before:           Sun 18 Oct 2026 01:00:13 +0000
ROA not after:            Sat 16 Jan 2027 02:00:13 +0000
asID:                     11260
IP address blocks:        76.11.0.0/17 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:89:a8:5b:ae:04:66:7a:4b:2f:61:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: Oct 18 01:00:13 2026 GMT
            Not After : Jan 16 02:00:13 2027 GMT
        Subject: CN=6bbed8ec-e2e0-4f70-9856-95d330f58a85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d7:cd:39:1b:10:d2:9a:d6:99:0a:aa:22:90:
                    1e:e6:87:52:18:2d:e1:31:04:48:6e:51:f9:ff:18:
                    8e:a0:ae:94:a9:21:92:4e:e7:10:99:e1:c8:ec:bc:
                    89:b5:f5:db:27:88:f4:65:a2:7c:44:e9:b8:e4:1f:
                    2c:8b:12:ad:05:10:dd:1e:58:6e:c4:ee:dd:b5:8d:
                    f4:c3:79:71:5c:33:57:fd:65:23:4a:95:a5:19:01:
                    24:83:7f:3f:73:37:65:02:6e:eb:78:7a:16:f5:6c:
                    de:9f:4c:d9:61:bf:1d:03:ee:93:72:af:ec:88:d3:
                    fb:15:79:12:89:be:2b:0a:bd:ca:da:a1:b2:17:91:
                    37:cf:b6:f2:46:8a:0a:05:10:db:26:7f:33:c6:b8:
                    2f:85:5f:63:58:60:7d:56:65:68:cc:37:0d:7c:c2:
                    25:b4:a7:0d:78:a5:43:bd:72:5b:59:85:b5:a5:19:
                    2a:54:6b:74:64:75:4a:c3:e2:a8:7d:ca:4b:13:2c:
                    4c:15:b5:2a:be:32:6d:51:05:8f:c9:e1:e0:87:9e:
                    ab:ed:33:52:ad:59:e7:d2:14:ae:39:3b:61:ae:01:
                    d5:97:7e:ea:b1:4d:2f:e2:6c:95:f3:14:66:5f:e9:
                    c4:ac:64:96:d4:fd:51:8c:b3:f3:1d:12:a4:9c:50:
                    dd:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:96:A9:09:05:2B:F2:D4:6D:9B:53:93:D1:C8:9D:17:E0:CE:CC:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/15d5ec7e-044b-30c5-90d8-02693f5c0795.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.11.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:e9:f1:0e:c0:e6:9d:13:44:14:c2:79:d7:3d:94:b5:d8:2c:
         5b:5f:e9:19:e6:03:1f:d9:08:9e:24:7f:9a:43:b1:03:db:2c:
         1d:17:e7:7c:25:93:cf:96:bd:fc:d6:f2:31:4f:2e:8b:2e:0a:
         17:99:9a:1c:55:39:0e:17:64:86:05:3b:a2:ff:9a:d5:8a:92:
         d2:d4:09:58:0e:7c:6d:0a:9e:b9:47:e6:bd:92:9c:e0:9a:27:
         ff:90:ff:0f:a4:11:cb:02:1a:63:74:16:59:eb:80:f0:b6:1b:
         3d:ec:23:1f:a8:2d:07:20:ee:d5:37:e5:2f:67:69:94:c8:3b:
         de:bc:6a:d3:62:5f:d9:49:01:32:81:de:63:53:90:b2:af:bf:
         99:c2:c1:db:6c:4a:84:b6:a5:b2:5e:e9:36:c4:b8:cb:4c:dd:
         d5:55:22:6c:51:94:38:05:42:e9:e4:e9:15:5e:9d:7f:a7:dc:
         f3:04:d1:2a:54:3d:22:d0:26:9b:05:58:d6:47:65:06:cc:1e:
         ae:68:63:4e:af:92:60:04:bb:66:f6:e9:0e:47:04:c1:8f:56:
         24:49:96:8d:f3:63:98:23:8e:5f:2d:9b:02:ad:5b:72:7d:c8:
         d3:22:1a:65:66:e3:83:22:fe:8f:a2:99:a9:31:f5:fd:78:85:
         9c:90:09:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:14:56 2026 by rpki-client