Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/65367c5e-1c86-38e9-9c97-3db70f4b8110.roa
File:                     65367c5e-1c86-38e9-9c97-3db70f4b8110.roa (raw, json)
Hash identifier:          Wdz8l6xJv0jWu9i/Sx04q0skK/O/qFcOxCKhEbgmcgU=
Subject key identifier:   1A:5A:42:EB:DE:91:AE:96:0B:D4:43:D9:C1:A2:D0:02:49:58:C3:D7
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F4328584EE38C9BC790D3FC8AA1978500
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/65367c5e-1c86-38e9-9c97-3db70f4b8110.roa
Signing time:             Wed 19 Aug 2026 13:00:11 +0000
ROA not before:           Wed 19 Aug 2026 13:00:11 +0000
ROA not after:            Tue 17 Nov 2026 14:00:11 +0000
asID:                     11260
IP address blocks:        24.89.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e3:8c:9b:c7:90:d3:fc:8a:a1:97:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: Aug 19 13:00:11 2026 GMT
            Not After : Nov 17 14:00:11 2026 GMT
        Subject: CN=dd7d4e8e-99e2-4eb3-afe7-fecee51f3afc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c3:24:77:c3:8e:78:ac:bf:ec:4f:41:2d:d9:
                    1f:26:6f:84:92:f1:37:1e:4f:9a:59:11:57:b3:d6:
                    df:b3:13:69:23:cd:47:83:59:ba:e4:3b:7c:ac:27:
                    43:69:5e:f8:73:ce:25:9c:66:bc:95:db:1f:f5:67:
                    77:3e:cd:b9:e8:bc:27:d6:69:a3:5d:d7:b9:01:5b:
                    30:6d:4d:0c:89:a0:22:0a:7a:ce:3b:0e:63:f6:e0:
                    03:3b:86:bd:b9:1d:88:d2:de:74:0f:35:af:42:d4:
                    8c:9b:f2:bb:7a:2d:22:f1:b1:16:8c:e3:1d:f8:89:
                    6d:0a:6e:ac:96:50:80:fe:1a:a2:71:c6:fa:67:02:
                    41:32:4e:6b:28:66:8d:58:91:59:f1:e2:eb:ac:a5:
                    11:5e:b9:29:ce:0e:d4:db:b7:4b:6e:3d:e9:dc:b1:
                    03:d5:7b:e1:d4:bb:c0:c6:02:45:2d:97:7b:ec:c0:
                    6b:52:ae:c3:2d:2d:8d:41:4b:ee:b7:e1:9c:34:52:
                    14:32:cb:32:4d:53:a9:74:99:ca:4d:8e:de:24:5b:
                    77:f4:8a:66:33:6a:d8:53:1b:d1:32:24:91:82:da:
                    ec:69:bd:32:93:57:bc:de:92:6f:f9:14:68:96:33:
                    dd:b3:01:08:c0:65:d3:33:5a:f2:cf:91:47:73:81:
                    38:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:5A:42:EB:DE:91:AE:96:0B:D4:43:D9:C1:A2:D0:02:49:58:C3:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/65367c5e-1c86-38e9-9c97-3db70f4b8110.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.89.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:fa:0b:3a:28:dd:aa:37:9e:fc:99:d1:1d:29:78:b4:01:73:
         52:e0:77:a6:39:c6:c8:2a:cf:7e:55:c1:ce:06:36:92:cd:25:
         c9:3b:dd:f8:ad:ec:80:85:db:4e:32:61:39:c7:9b:94:71:92:
         0e:98:fe:9c:6d:ba:6e:ef:f1:13:c1:e2:8d:f8:12:96:a0:dc:
         bb:7d:a2:7b:d5:68:d2:f4:8f:28:fb:d6:1b:60:5a:3c:3c:b7:
         d3:0d:24:87:1f:64:a8:47:de:bd:ef:f1:9b:4e:21:d3:17:43:
         47:3f:7d:78:11:9d:63:40:71:9a:0a:88:87:db:13:6e:85:80:
         43:90:22:75:f9:eb:8a:43:47:44:46:0b:02:f1:3b:dd:ec:45:
         aa:48:fc:46:2b:fa:5a:52:ac:10:a6:e7:8c:2f:fc:7a:09:7c:
         29:40:8a:8a:d1:f0:01:44:34:45:bb:c1:60:13:d6:8c:2d:07:
         3f:f6:20:d1:a6:33:bb:c1:00:25:bd:74:71:f9:52:39:e6:24:
         5a:14:da:d5:7a:1c:59:61:b8:2e:84:fc:91:bd:cf:0a:a7:08:
         e8:25:64:54:e2:d8:5d:1a:51:6a:3c:42:50:f3:2e:0d:45:83:
         6c:44:ef:b7:1e:5b:50:46:e1:6e:23:50:63:c3:52:ca:61:a6:
         48:46:33:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 16:08:27 2026 by rpki-client