Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/c9baf2d7-7ac4-3b1b-ac7f-cd2e140bf477.roa
File:                     c9baf2d7-7ac4-3b1b-ac7f-cd2e140bf477.roa (raw, json)
Hash identifier:          zXhPQK1qreTLj5VUSQ0XwOoOZJ7KrX29hz2qwzucmAc=
Subject key identifier:   DB:5A:0A:8C:06:47:9C:1A:44:92:B5:AB:3E:40:CC:36:A1:BE:6E:C0
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F4328584F89A85B6E009EA1742B8A07C4
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/c9baf2d7-7ac4-3b1b-ac7f-cd2e140bf477.roa
Signing time:             Sun 18 Oct 2026 01:00:13 +0000
ROA not before:           Sun 18 Oct 2026 01:00:13 +0000
ROA not after:            Sat 16 Jan 2027 02:00:13 +0000
asID:                     394846
IP address blocks:        24.224.234.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:89:a8:5b:6e:00:9e:a1:74:2b:8a:07:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: Oct 18 01:00:13 2026 GMT
            Not After : Jan 16 02:00:13 2027 GMT
        Subject: CN=0f1e034f-ddbe-4207-8afb-5089883abe0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7b:d2:6d:3f:08:83:b6:db:79:da:b4:68:39:
                    c1:3b:08:da:50:21:47:b3:aa:0e:5f:89:be:75:a9:
                    a0:99:70:ea:78:47:85:48:5a:5d:88:7c:d3:56:9f:
                    92:36:ff:91:ce:94:db:a3:c5:db:41:b5:e0:ca:f4:
                    aa:81:42:72:8e:45:01:0b:21:c9:4b:ad:1f:99:ea:
                    d6:91:63:fd:9b:9c:2b:80:7b:b2:c4:98:d8:22:10:
                    b2:6b:26:8d:8e:99:24:27:e3:a0:e0:06:d5:eb:c5:
                    eb:6b:f0:9e:49:6f:86:9c:79:88:14:c2:53:04:fd:
                    06:e0:d9:d2:ea:45:99:59:00:fe:13:c0:45:5f:be:
                    1f:56:05:d3:f8:7c:8b:d8:e0:68:63:04:d3:cd:cb:
                    38:6b:92:1d:1a:3d:e8:b7:ec:9b:0d:f5:ca:d7:f2:
                    34:8d:9d:26:aa:76:37:ea:73:a1:b1:20:a9:a5:f3:
                    b9:d4:7e:a9:e2:52:3a:07:56:1e:a0:fc:e5:24:cb:
                    8b:dd:ae:a5:2c:70:76:da:2f:57:bc:38:a3:da:9a:
                    03:a3:a9:8b:b2:4c:ee:00:66:5a:36:d8:6d:60:82:
                    ec:1d:80:32:4b:21:7b:ed:03:19:e9:3f:f3:c9:f2:
                    3e:22:99:85:3c:4c:d5:8b:fe:5b:d6:f9:b1:0b:c1:
                    2a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:5A:0A:8C:06:47:9C:1A:44:92:B5:AB:3E:40:CC:36:A1:BE:6E:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/c9baf2d7-7ac4-3b1b-ac7f-cd2e140bf477.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.224.234.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:f6:e6:87:86:e9:82:22:ab:0a:a9:49:b1:35:01:ea:84:55:
         58:e5:94:2a:ef:38:a1:f2:4e:81:d7:99:aa:bc:06:db:a4:3e:
         0b:00:4f:f6:57:97:0f:11:a0:ab:62:e1:7d:4e:16:3d:69:95:
         4a:d1:00:6d:3b:a7:1a:b4:ae:4b:1c:31:94:b8:20:72:93:b1:
         e1:bb:63:89:9a:fa:99:6f:ec:d0:98:e2:f5:f2:eb:60:dd:ae:
         42:e7:e7:31:3f:aa:d4:4f:9f:5e:c5:60:d0:03:f4:3e:63:28:
         78:06:e7:c2:94:4e:4f:d8:05:f9:60:e1:f2:9b:d1:2c:62:9d:
         91:cf:a5:6a:59:68:d4:7f:f3:7d:64:f7:d7:25:79:3b:52:bf:
         57:ae:24:1d:48:dc:25:6b:77:b3:74:9f:d6:19:2f:db:38:e1:
         77:4b:7a:c5:b8:bb:79:ca:f8:f8:3b:d8:1e:11:2c:5a:49:3b:
         00:6a:0c:ef:1f:95:8a:98:b9:a1:0b:68:e0:ae:a7:d4:a6:3f:
         da:1a:4c:ef:09:35:63:b2:90:0e:74:d3:2e:7d:ce:5e:5c:95:
         10:f5:6e:da:4d:84:31:a4:cc:d3:d8:0e:a3:36:16:37:23:f5:
         c1:6c:3d:7b:01:bc:a5:ee:12:b2:55:56:58:d6:eb:23:6a:29:
         af:50:d9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:22:43 2026 by rpki-client