Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/4b101789-80f2-392a-9f76-3a1bf4f4dc1e.roa
File:                     4b101789-80f2-392a-9f76-3a1bf4f4dc1e.roa (raw, json)
Hash identifier:          0ECWJnbPREHvEVPOcg9TdGjFdmrBsrV9LjR5LyHI4rg=
Subject key identifier:   66:90:DC:ED:B5:AA:A9:05:63:C9:B4:05:77:86:1A:4B:81:23:2A:6E
Certificate issuer:       /CN=b8624cbb-ba19-47a6-b5ac-d0747149714c
Certificate serial:       010D0C9F4328584EE7BCAAF70A78C32A06D91440
Authority key identifier: 71:6A:5A:21:EE:66:2B:9C:10:67:F0:E2:38:07:78:CB:12:8C:8C:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/4b101789-80f2-392a-9f76-3a1bf4f4dc1e.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     11269
IP address blocks:        69.17.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:aa:f7:0a:78:c3:2a:06:d9:14:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8624cbb-ba19-47a6-b5ac-d0747149714c
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=7f6a15b4-35f6-4f67-a55d-359174afb6a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b8:3c:5e:e0:a3:46:b1:01:0e:cd:9a:ea:02:
                    c5:29:b0:40:b8:48:b3:57:08:78:fc:58:e6:19:1c:
                    93:a3:84:fe:56:82:8c:93:b3:58:ad:04:6d:9f:34:
                    51:69:54:81:00:c0:79:7d:4d:2b:a7:16:cd:89:1d:
                    85:18:ef:16:6e:c7:97:57:2e:2e:45:86:cb:ec:44:
                    22:45:42:d1:3c:4c:71:23:3f:c6:f7:a8:5e:6e:07:
                    90:b7:66:ce:f8:98:8b:f6:cd:3d:dc:bd:11:d8:df:
                    1c:55:57:a6:1f:60:50:f1:4b:0e:42:8f:10:be:4c:
                    a6:64:8c:9e:01:cb:8d:d8:de:24:78:cc:80:0c:c4:
                    d8:7e:e3:2a:59:19:31:d1:de:06:79:70:75:51:ad:
                    cb:fa:8a:43:84:2f:8c:ea:ec:43:17:59:cc:c1:7e:
                    be:46:d5:4f:c7:89:1c:d7:f4:de:1c:6a:78:f2:71:
                    3b:55:c5:24:07:74:b7:e4:03:a0:f0:f6:16:3b:1c:
                    d8:88:51:62:b5:97:e6:25:f3:02:90:3e:08:1f:5b:
                    b7:26:10:1c:a2:9e:f3:35:20:08:28:d7:5a:3e:cb:
                    2d:46:d5:12:2f:7b:44:ec:e7:6e:9e:6a:35:f1:9c:
                    c1:61:e0:3d:34:83:3c:4f:a7:25:b7:ba:e7:20:5e:
                    ed:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:90:DC:ED:B5:AA:A9:05:63:C9:B4:05:77:86:1A:4B:81:23:2A:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/4b101789-80f2-392a-9f76-3a1bf4f4dc1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.crl

            X509v3 Authority Key Identifier:
                keyid:71:6A:5A:21:EE:66:2B:9C:10:67:F0:E2:38:07:78:CB:12:8C:8C:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.17.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:e6:63:83:03:22:85:3c:3e:e3:9c:1f:69:e7:b2:3d:02:c2:
         49:96:35:19:bc:1d:25:88:1c:c0:8d:e5:64:f1:c9:a8:10:d7:
         63:80:f4:95:f4:d4:e9:02:d2:e4:f7:27:12:a8:f9:9a:a4:30:
         7c:7d:ed:c4:09:eb:25:b0:b3:6f:c7:90:84:9d:27:8d:28:af:
         ec:e8:f9:92:85:b3:cf:09:14:45:b8:86:ee:61:af:13:c6:d0:
         7c:7d:76:4d:4a:86:af:52:b5:53:22:a3:b3:c6:73:29:5c:13:
         db:0b:77:90:5b:26:e9:bb:0f:97:31:d2:1a:5e:7b:cc:58:5e:
         b8:5c:6c:24:2f:83:06:ae:f9:18:bc:f6:c8:08:07:b3:49:41:
         70:8f:17:53:48:5e:62:e1:f8:17:7e:7a:fe:8d:62:70:d2:aa:
         5c:33:4a:f4:1b:37:98:45:6e:31:68:11:2d:f7:4e:f2:b1:2d:
         f9:db:1f:7b:a9:54:26:97:07:cd:55:5c:b4:0a:78:4b:96:2f:
         76:04:5a:d6:40:21:a3:47:ad:59:40:19:55:5f:0f:f1:a3:ae:
         a4:2d:df:a5:e3:b0:56:c8:10:16:1a:95:81:3a:ed:8d:ec:b8:
         38:98:5f:85:73:cc:0e:2d:f9:31:64:50:b1:6c:97:b7:e8:ad:
         a8:60:da:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:12:57 2026 by rpki-client