Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/65367c5e-1c86-38e9-9c97-3db70f4b8110.roa
File:                     65367c5e-1c86-38e9-9c97-3db70f4b8110.roa (raw, json)
Hash identifier:          dUsT4zUQCxIOHT7J8Aiv9sLeeDOzONvfmCrFOtAZme0=
Subject key identifier:   59:A3:ED:13:A6:15:BC:B5:8F:06:3E:98:B9:B0:AA:92:F7:22:64:72
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F4328584F857865CDB1C1193FFE397140
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/65367c5e-1c86-38e9-9c97-3db70f4b8110.roa
Signing time:             Fri 16 Oct 2026 13:00:12 +0000
ROA not before:           Fri 16 Oct 2026 13:00:12 +0000
ROA not after:            Thu 14 Jan 2027 14:00:12 +0000
asID:                     11260
IP address blocks:        24.89.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:85:78:65:cd:b1:c1:19:3f:fe:39:71:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: Oct 16 13:00:12 2026 GMT
            Not After : Jan 14 14:00:12 2027 GMT
        Subject: CN=fca511a0-75cd-4683-bccc-254a9899e682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:01:c4:04:11:42:dd:f8:3e:82:f2:93:12:6b:
                    a1:b4:e8:17:a3:9b:d6:97:f1:12:05:5f:75:78:ff:
                    6e:59:69:a4:60:4c:55:ea:b7:55:e7:61:f1:72:7c:
                    8b:d7:46:7b:f1:15:7c:62:49:d4:e7:94:ef:43:95:
                    a6:b3:fe:6b:1d:38:e8:41:ce:a9:f2:69:92:b1:ba:
                    02:2c:53:c8:8d:74:0e:3f:41:82:a2:de:4a:bd:f7:
                    93:fd:7d:37:8f:5f:e5:ee:f3:c4:0d:ec:db:78:79:
                    ef:6d:69:e9:1b:60:87:82:e1:ad:06:16:f3:56:bf:
                    95:8c:6d:ae:c3:8b:33:8e:d3:6f:e2:4a:44:dd:28:
                    ff:8d:1f:73:09:bf:59:5f:8d:38:7a:ed:8b:6e:a2:
                    74:46:12:e7:d3:a0:7a:d7:a5:bc:fa:ca:35:82:09:
                    c5:a1:0b:c8:63:f6:ca:36:af:82:e4:39:15:d8:11:
                    64:9f:2b:fa:0a:5d:14:a8:9a:44:8c:79:19:87:7d:
                    08:74:7d:79:6e:d1:68:f0:89:0d:86:3b:ac:61:59:
                    89:23:ed:5c:d8:b5:b8:a9:58:51:bd:b2:d5:34:df:
                    45:8f:b8:17:aa:39:f1:9d:52:f7:fb:27:6a:70:6a:
                    f0:a4:e2:a9:c6:ae:a7:89:85:28:0c:fc:be:66:fb:
                    ad:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A3:ED:13:A6:15:BC:B5:8F:06:3E:98:B9:B0:AA:92:F7:22:64:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/65367c5e-1c86-38e9-9c97-3db70f4b8110.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.89.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:39:21:70:93:6e:89:22:4b:30:fd:90:fc:3a:07:cb:2b:61:
         c5:52:e6:fc:17:e8:6f:04:0c:c2:84:3d:ab:93:d9:82:da:74:
         b6:ee:04:bf:60:e6:4b:62:f4:37:f0:97:60:de:b7:93:d0:05:
         7e:87:69:9e:8c:da:68:45:aa:ab:82:da:c1:13:98:da:25:93:
         8f:a3:32:42:ba:d0:61:4a:28:72:26:0c:09:2c:0b:ca:5a:21:
         d1:11:27:2a:22:be:85:44:65:a3:54:1b:38:48:c2:fc:1d:f8:
         8b:e7:71:1d:4b:48:c4:a0:8f:c3:5f:1c:7d:3b:25:2a:48:5c:
         9f:d6:aa:cb:f7:f7:cf:2f:df:d8:5a:5d:0a:07:d7:dc:09:c9:
         84:23:94:7f:ae:9b:c5:97:c8:2e:26:a0:74:10:4e:e8:fe:fa:
         3b:c8:71:5b:f9:e7:94:d8:9d:a9:fd:66:a4:52:52:3d:39:77:
         c4:ff:1c:a6:14:f8:f0:c4:3e:7b:37:4a:70:cc:11:7f:68:e8:
         fa:c4:d5:63:80:b0:1c:ab:62:48:78:a7:32:ad:27:da:c9:f5:
         88:f3:95:2d:6d:4f:db:f1:72:f4:b1:8b:86:25:68:d3:63:2e:
         44:79:1c:01:7c:9c:46:d1:81:49:52:10:53:b8:39:03:35:f2:
         8c:7d:58:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:30:08 2026 by rpki-client