Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/5c69fb2f-eb2e-3864-bb20-0eb70bfc673e.roa
File:                     5c69fb2f-eb2e-3864-bb20-0eb70bfc673e.roa (raw, json)
Hash identifier:          LioypLbmnqf9u56rphlEdsIh2bcDP5G0YXVp+zQ+P0U=
Subject key identifier:   D2:FA:49:0D:DD:FD:75:B0:CF:04:52:7E:0F:DE:C5:AE:33:0D:29:02
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F4328584F89A864ECD097C507EA58D880
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/5c69fb2f-eb2e-3864-bb20-0eb70bfc673e.roa
Signing time:             Sun 18 Oct 2026 01:00:13 +0000
ROA not before:           Sun 18 Oct 2026 01:00:13 +0000
ROA not after:            Sat 16 Jan 2027 02:00:13 +0000
asID:                     11260
IP address blocks:        24.222.0.0/16 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:89:a8:64:ec:d0:97:c5:07:ea:58:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: Oct 18 01:00:13 2026 GMT
            Not After : Jan 16 02:00:13 2027 GMT
        Subject: CN=865663f3-6350-46d6-9af0-dbf8481e636a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:82:e1:8a:50:9e:6c:d2:26:51:0c:a7:b5:e5:
                    64:d3:5f:44:72:9c:a4:c7:5b:a0:6e:f9:5a:67:34:
                    2e:3c:b0:af:42:1b:2f:8f:3d:b2:77:77:5d:c5:3d:
                    41:de:eb:3f:b7:29:ae:03:ce:ac:2f:30:f5:ae:64:
                    5f:0a:06:29:db:c0:e6:9c:4f:36:cf:07:3e:fc:2c:
                    b8:71:48:7a:77:bf:80:50:d3:31:2f:2d:ab:d2:74:
                    08:c1:ef:72:7b:20:99:8d:f2:ea:2e:81:d3:87:11:
                    c4:47:e3:cf:67:66:58:fb:ba:51:c3:9d:59:ce:7c:
                    e4:4e:76:82:6d:94:f8:a4:f0:bf:94:c6:d0:be:2d:
                    fd:6f:3e:b8:dd:72:f6:99:b7:d2:92:dc:5f:55:8a:
                    37:f4:e5:f2:96:9d:cd:61:7a:56:a3:79:e5:64:90:
                    c3:df:bf:ce:56:5f:6c:dc:6d:c9:20:90:76:41:75:
                    85:6d:5b:4d:88:28:77:cc:2c:f9:12:ad:5e:da:b0:
                    52:97:9e:47:57:5e:ad:62:89:1e:d4:7b:52:fa:db:
                    cb:42:86:25:2d:9d:ad:43:3a:f4:76:fa:fa:63:20:
                    47:bd:22:2f:41:af:5d:e0:d2:79:25:3f:aa:e2:4e:
                    83:96:7e:0b:af:ac:15:da:57:b2:d7:20:c6:cd:d7:
                    bb:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:FA:49:0D:DD:FD:75:B0:CF:04:52:7E:0F:DE:C5:AE:33:0D:29:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/5c69fb2f-eb2e-3864-bb20-0eb70bfc673e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.222.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:f3:b9:cd:42:90:1f:cc:52:47:15:80:50:f9:63:de:09:45:
         73:a2:0a:f4:98:41:33:b3:b6:0d:63:5f:a4:7f:94:9b:6d:75:
         37:34:69:82:30:32:a9:3c:25:d9:d8:88:e2:bb:5b:58:0b:a4:
         93:12:66:d9:4a:c2:ff:f3:cd:d7:b9:53:66:bc:95:da:c5:55:
         e6:f9:71:f4:31:79:54:46:93:89:a9:1f:bb:b4:1a:5f:25:ef:
         a7:0f:95:c2:30:30:e1:3c:84:a6:1d:bf:99:16:3a:eb:be:ec:
         45:0e:e7:09:46:98:6d:0a:97:98:03:2b:63:ef:5a:42:3b:96:
         a0:15:39:9a:66:be:c4:75:59:f0:b9:15:a7:9f:e9:8b:4d:06:
         5b:76:fe:42:66:6c:3d:e7:7f:bf:ea:15:56:90:dd:10:a7:19:
         18:51:07:26:8d:34:95:15:41:f8:d0:56:e5:00:41:80:b7:1d:
         9c:c7:a5:7a:0d:8e:45:e6:94:62:af:b2:69:6c:30:f2:0a:7c:
         ba:1b:09:02:59:0b:35:ad:c8:b0:d9:f3:83:fd:28:b0:37:8f:
         40:00:f5:98:33:42:cf:53:de:9a:05:9c:bd:45:5b:cb:98:93:
         8c:bd:2e:9f:9f:61:85:64:6a:6c:fa:e9:be:cd:43:7e:75:86:
         d2:4d:67:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:48:28 2026 by rpki-client