Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/2aa5dc23-c986-39ec-b867-16642c4d55b8.roa
File:                     2aa5dc23-c986-39ec-b867-16642c4d55b8.roa (raw, json)
Hash identifier:          eYBJojzxZmOReVCrQBxIdMLhVsZAcvE4w0Ogg/ULO5w=
Subject key identifier:   C6:42:09:D2:58:F5:80:14:45:6F:E5:AF:7A:58:A6:AB:0C:B4:1F:DD
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F4328584F89A85BC65E0FA01B78342DF0
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/2aa5dc23-c986-39ec-b867-16642c4d55b8.roa
Signing time:             Sun 18 Oct 2026 01:00:13 +0000
ROA not before:           Sun 18 Oct 2026 01:00:13 +0000
ROA not after:            Sat 16 Jan 2027 02:00:13 +0000
asID:                     11260
IP address blocks:        96.30.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:89:a8:5b:c6:5e:0f:a0:1b:78:34:2d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: Oct 18 01:00:13 2026 GMT
            Not After : Jan 16 02:00:13 2027 GMT
        Subject: CN=3bb4c836-a485-4fec-9b2a-0e37319d3ff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ae:b7:b6:af:ab:33:3f:cc:32:cd:c7:6e:48:
                    28:86:f7:d3:d0:4b:ca:73:64:aa:a6:d8:7b:c2:e7:
                    f3:12:58:9a:ed:d9:67:5d:18:0f:2b:cf:fc:9c:52:
                    03:76:82:92:3a:e1:78:9a:5e:48:55:9a:75:a0:89:
                    4f:8c:ee:75:38:30:c9:20:23:c3:4b:30:a4:6d:6f:
                    3b:f4:00:1e:7f:0e:eb:1e:51:1b:55:b3:9a:59:09:
                    96:e4:5f:d7:56:e7:e5:d4:f4:e9:5b:55:27:33:a0:
                    d5:d1:c8:9b:7b:32:1f:02:92:f8:37:45:f5:ee:f8:
                    89:3d:5c:8a:e4:5b:fd:a3:a1:38:03:0a:b5:e0:34:
                    c1:cf:77:51:53:f2:a4:6e:b2:1c:a7:75:58:9f:1d:
                    79:62:61:00:a4:d6:de:de:97:11:20:e4:22:26:2a:
                    10:73:00:ba:d7:13:62:c3:40:9d:c1:21:0b:bd:78:
                    b9:56:87:37:1d:bd:2c:85:36:9d:7d:03:32:48:48:
                    fa:da:85:58:19:40:d4:e6:f0:23:69:e9:56:87:e0:
                    e9:8c:8c:9d:a7:43:e7:63:3e:38:e1:0a:22:24:f7:
                    90:2b:d0:22:cd:f2:12:4f:cd:ac:2e:11:7d:6f:41:
                    43:78:99:89:2d:1a:04:90:c0:10:e5:f4:6d:16:a0:
                    9f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:42:09:D2:58:F5:80:14:45:6F:E5:AF:7A:58:A6:AB:0C:B4:1F:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/2aa5dc23-c986-39ec-b867-16642c4d55b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.30.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:84:c2:2c:fb:00:fa:7b:4f:34:6c:76:0e:d6:5b:2a:30:cf:
         82:d3:aa:dc:4d:7d:05:fc:db:51:dc:00:36:26:de:74:04:09:
         14:77:05:01:66:47:04:79:4d:5f:37:ce:a4:3b:f0:5e:53:f2:
         34:56:f1:e8:67:f4:64:1a:de:81:56:fd:e9:e4:c5:0d:ce:4d:
         32:89:f9:b7:d5:ed:e9:4e:1b:e8:27:40:bd:af:95:37:92:e0:
         dd:e8:8e:9e:84:1e:3d:d5:41:fe:e3:e7:db:b9:ac:8a:b2:bd:
         77:a3:d0:2b:1b:43:03:4c:ae:8d:28:73:56:96:52:7c:ef:a2:
         7f:9a:99:c8:76:fa:67:cd:4d:47:81:04:99:fd:62:d3:5a:6a:
         34:98:7d:b4:7e:88:ed:a4:28:80:f8:1d:4a:0f:aa:36:04:71:
         0d:35:9f:cd:ea:3b:83:bf:41:4f:78:36:65:d2:4d:97:4d:48:
         8a:d3:2b:7f:0c:9b:63:f9:b2:f0:f9:5a:bc:a4:4b:d6:d5:2e:
         c2:47:61:c1:70:ea:29:a0:4f:f6:24:26:fb:7f:13:2e:7c:61:
         7f:a4:e3:fc:25:86:e4:f5:86:02:0a:6e:93:4b:54:f3:d4:ae:
         27:b7:c7:19:1e:9e:93:09:f6:ed:55:48:1f:7b:b3:72:e6:70:
         b5:da:ed:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:54:47 2026 by rpki-client