Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/fd75b3d8-3e5e-3a02-97ce-3a1a9c41177b.roa
File:                     fd75b3d8-3e5e-3a02-97ce-3a1a9c41177b.roa (raw, json)
Hash identifier:          EJUUfRT8BSEitRQiKfMgJicjuYLYFiKazunfbGmoBdY=
Subject key identifier:   E2:EC:E7:A3:BF:B6:34:32:81:C1:80:85:4A:58:9C:24:B0:59:4F:80
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F4328584F89A8657D8BB1CF798ADE7C00
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/fd75b3d8-3e5e-3a02-97ce-3a1a9c41177b.roa
Signing time:             Sun 18 Oct 2026 01:00:13 +0000
ROA not before:           Sun 18 Oct 2026 01:00:13 +0000
ROA not after:            Sat 16 Jan 2027 02:00:13 +0000
asID:                     11260
IP address blocks:        173.237.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:89:a8:65:7d:8b:b1:cf:79:8a:de:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: Oct 18 01:00:13 2026 GMT
            Not After : Jan 16 02:00:13 2027 GMT
        Subject: CN=bfe96508-77b5-4363-ab6e-312efd4e454a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f0:8a:32:5b:08:5f:cd:b4:3e:f7:bf:3b:c1:
                    2e:fb:74:46:cb:b1:b8:ad:ca:9c:2c:1a:82:04:59:
                    2f:1d:c3:1f:fc:32:b6:82:9b:9a:09:b0:2e:06:49:
                    c5:f6:7c:09:66:f3:cc:32:80:4b:ed:85:a1:5b:12:
                    54:46:80:28:d1:32:9e:92:25:e3:45:41:69:e5:18:
                    c2:f3:0a:96:66:65:d0:86:fe:c8:d7:94:00:8a:88:
                    69:e2:ec:24:5c:78:5f:3e:4f:49:34:2d:8b:42:6c:
                    c4:71:8a:dd:f9:90:2a:79:ba:b7:86:92:33:50:53:
                    f2:94:76:9b:1e:96:9a:a3:7a:96:a2:bc:81:71:63:
                    80:ed:fb:14:cc:7a:dd:c5:92:59:c3:6c:e3:bc:8d:
                    e0:a1:da:72:bf:2f:50:74:c6:80:91:9a:84:67:5c:
                    86:15:50:73:db:f9:d6:c9:40:da:41:6c:e7:c9:a1:
                    80:94:00:a5:a7:1c:4b:3a:42:ce:e7:a1:9e:4c:58:
                    45:80:98:42:2e:62:77:38:5a:e4:19:f1:fd:f9:c0:
                    52:f8:41:2d:e5:51:b0:01:4f:52:9d:be:b6:d3:1d:
                    84:c0:d4:82:50:b9:97:1d:7e:d0:59:47:0b:50:45:
                    f1:8c:8a:41:8a:c5:98:0f:ab:a7:13:d8:2d:e2:97:
                    44:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:EC:E7:A3:BF:B6:34:32:81:C1:80:85:4A:58:9C:24:B0:59:4F:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/fd75b3d8-3e5e-3a02-97ce-3a1a9c41177b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.237.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:13:71:f2:e1:9b:00:f7:cb:4a:09:1a:ea:39:da:54:36:5a:
         16:be:36:64:5a:83:0a:c7:d5:26:95:7e:0b:32:ba:b9:5c:6d:
         f3:65:89:44:1f:d4:c5:9a:2e:c8:79:97:5d:84:f5:d0:80:b0:
         91:be:77:a7:3d:e4:55:10:da:f3:28:b4:2c:5e:fd:16:c9:c7:
         9d:44:3c:60:74:c6:ec:60:59:15:88:48:30:02:55:78:f8:23:
         59:64:31:3a:75:70:f8:4b:68:d0:97:57:7f:63:b7:ac:4a:23:
         7a:fd:4b:c0:63:bd:d8:e8:c3:2c:9e:ce:06:37:e3:5e:ce:be:
         6d:e1:72:8c:27:33:1c:cf:0d:a0:46:41:86:43:5e:a2:e8:f8:
         76:bb:2a:eb:59:50:07:10:c8:06:27:9b:b6:32:c8:b7:53:a8:
         84:c8:59:7d:66:c8:84:8d:60:0d:94:a2:51:a1:48:fe:15:4f:
         ca:cb:07:59:8c:67:a0:18:5a:80:e1:8f:f7:c5:d2:9d:c5:c3:
         c6:36:ad:a7:7f:77:1b:8d:a2:94:eb:c8:f5:96:88:a2:30:1b:
         53:55:8a:09:98:cc:9f:d2:fe:a8:c6:6f:ed:30:89:bc:54:ad:
         ff:d3:3c:a1:7b:a4:bd:2d:0e:0d:20:b3:fb:f3:4b:c5:06:57:
         c6:02:0d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:23:47 2026 by rpki-client