Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/51937442-5d32-30f1-81fe-37da665c35d7.roa
File:                     51937442-5d32-30f1-81fe-37da665c35d7.roa (raw, json)
Hash identifier:          C9eRi4bmKjr1hCQJgZAyvDjGaW0RQGsGlrUYTB+mO7s=
Subject key identifier:   CA:52:92:BD:91:C4:59:39:50:1A:08:0A:B8:0B:04:0E:10:39:D8:D0
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F4328584F89A85BEA2A76B5C8E5C162C0
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/51937442-5d32-30f1-81fe-37da665c35d7.roa
Signing time:             Sun 18 Oct 2026 01:00:13 +0000
ROA not before:           Sun 18 Oct 2026 01:00:13 +0000
ROA not after:            Sat 16 Jan 2027 02:00:13 +0000
asID:                     11260
IP address blocks:        173.212.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:89:a8:5b:ea:2a:76:b5:c8:e5:c1:62:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: Oct 18 01:00:13 2026 GMT
            Not After : Jan 16 02:00:13 2027 GMT
        Subject: CN=9bf55599-6b44-476d-9be2-97cfb5ef8718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9c:8c:f4:e8:33:e1:e5:0f:68:5c:b1:13:dd:
                    53:9b:67:0b:1d:95:5a:b9:99:85:e9:ac:47:a7:cc:
                    6b:a6:e0:c1:3f:5a:33:da:b2:df:12:b5:04:8e:8a:
                    22:64:4a:b1:3e:37:70:9c:e7:d9:09:71:c9:00:88:
                    d7:fc:3f:e8:53:cc:34:93:8d:ad:d7:b0:5b:c2:3b:
                    7c:bf:9d:75:a4:7f:89:99:d8:46:f6:35:c1:4f:5c:
                    d9:e6:9c:87:b3:85:63:9e:43:ff:9e:06:17:25:db:
                    d8:b2:b3:26:9d:64:d8:8e:6d:2e:a0:a8:ee:a8:58:
                    49:f5:c0:56:5d:d1:b8:78:b7:f7:02:21:ea:d4:26:
                    29:c9:4a:c2:78:cc:d1:5d:af:54:28:e8:35:65:41:
                    a8:82:1d:26:0d:03:93:e9:a2:6e:84:3d:68:92:5d:
                    09:56:55:7f:9a:d6:46:88:14:2b:2e:db:21:c3:d2:
                    3d:5c:52:47:ca:f7:e4:e6:90:5b:88:45:07:10:41:
                    92:5f:4d:01:27:6f:b6:21:6f:6e:5e:8a:f4:c3:0b:
                    12:c5:e5:ee:d3:d3:81:5a:ab:0e:db:e1:28:5f:ad:
                    22:75:47:9b:fb:37:5e:00:1e:04:f9:c2:39:6c:ea:
                    ce:f9:4d:d1:67:c4:e6:2e:0c:47:4d:29:0a:11:6a:
                    10:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:52:92:BD:91:C4:59:39:50:1A:08:0A:B8:0B:04:0E:10:39:D8:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/51937442-5d32-30f1-81fe-37da665c35d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.212.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:92:cb:27:2a:8f:fb:57:ad:9e:47:a8:89:2d:3a:a7:0f:72:
         4a:24:aa:f7:9d:37:d0:b8:53:9b:a7:64:17:ac:00:6a:47:7f:
         90:2e:12:db:1d:ea:53:a0:8f:1b:b9:88:33:ad:3b:bc:2c:2f:
         16:e7:1c:ee:8f:02:04:08:b0:ba:38:eb:c5:b2:f1:26:68:51:
         aa:45:eb:ac:5d:3a:b2:fe:70:ed:36:b8:c1:15:90:02:b8:eb:
         a9:fd:e6:82:3b:8d:0d:73:11:78:32:60:de:1d:99:32:7e:da:
         29:0b:a4:ad:5f:34:1a:ce:2e:e2:97:bf:fa:1f:2c:18:87:47:
         e3:c1:93:f9:97:fd:a8:3b:5b:ce:59:bc:39:83:d8:1c:ad:4e:
         88:8e:a5:10:2c:a1:66:89:46:0b:7c:94:b7:10:bc:2f:e7:84:
         79:83:51:77:75:fa:97:6c:fc:a8:5a:ec:f1:11:c4:b6:91:49:
         1f:8e:36:ae:d8:b3:fb:ed:4f:a3:e5:08:49:f5:e2:39:a8:27:
         4e:81:b9:8b:29:0b:23:5c:0e:5e:6e:75:ed:23:62:5e:5a:8d:
         e6:96:66:83:9e:d5:c8:b4:15:87:35:c4:2a:6c:e6:17:46:2a:
         a4:45:e9:e7:14:36:ad:ce:1a:3f:2a:66:0c:6d:fd:db:03:0a:
         4b:ca:05:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:57:54 2026 by rpki-client