Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b892dc1b-885d-3051-aa76-c1ce652ce9a4.roa
File:                     b892dc1b-885d-3051-aa76-c1ce652ce9a4.roa (raw, json)
Hash identifier:          Tum7T+UCU3cC4kx3552SbmhyN5J7zcr9qgQw4b3fjIU=
Subject key identifier:   D0:03:9E:1A:45:7B:30:9E:BC:D1:2A:0C:3B:04:82:07:EB:8F:2E:58
Certificate issuer:       /CN=b8624cbb-ba19-47a6-b5ac-d0747149714c
Certificate serial:       010D0C9F4328584F03A790B92CAF0482081282A0
Authority key identifier: 71:6A:5A:21:EE:66:2B:9C:10:67:F0:E2:38:07:78:CB:12:8C:8C:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b892dc1b-885d-3051-aa76-c1ce652ce9a4.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     55159
IP address blocks:        69.17.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:90:b9:2c:af:04:82:08:12:82:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8624cbb-ba19-47a6-b5ac-d0747149714c
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=bbe4e710-61f3-4f3d-899a-5d9c8bb3181f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d5:d0:a8:9c:0c:bc:93:21:ea:e3:56:06:10:
                    c5:44:f5:c1:af:1c:a2:d9:3b:9e:10:08:89:f7:0d:
                    62:9a:61:d8:55:8c:1d:04:e1:a6:6c:f8:89:7f:a6:
                    e7:6f:8c:1f:a7:ca:eb:56:ba:bd:5e:e0:a2:1b:5b:
                    a2:fe:ad:21:c6:31:ca:95:64:d0:be:ef:3a:9d:db:
                    0c:e5:d9:7b:69:7a:4e:08:9a:61:96:52:aa:18:36:
                    ba:20:02:02:34:ad:7c:58:24:24:7f:b8:77:1f:64:
                    68:32:98:09:7f:0c:ce:b6:6d:a6:64:82:a0:4b:9b:
                    e9:ce:45:a8:e7:e1:15:9c:ea:13:d9:c8:7c:3e:58:
                    58:a8:e9:73:cd:6f:f5:ee:cd:6c:f9:6c:3d:43:52:
                    cd:d8:59:df:0c:bb:10:db:7d:d6:41:42:7a:88:b2:
                    92:12:c3:82:e1:1a:95:a1:43:e9:1a:2f:62:f0:4a:
                    f9:84:f1:88:3a:41:2e:54:dd:31:b8:86:ba:96:d2:
                    12:83:b4:ba:a0:c9:f4:de:03:13:36:2b:c8:48:b4:
                    be:03:a1:a6:9d:14:f6:46:2e:a6:94:c5:ae:c0:20:
                    2f:10:f2:60:65:0b:84:1c:7c:be:5f:ca:eb:25:b3:
                    b4:43:b6:98:e8:5d:49:28:73:74:14:40:b9:06:0c:
                    49:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:03:9E:1A:45:7B:30:9E:BC:D1:2A:0C:3B:04:82:07:EB:8F:2E:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b892dc1b-885d-3051-aa76-c1ce652ce9a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.crl

            X509v3 Authority Key Identifier:
                keyid:71:6A:5A:21:EE:66:2B:9C:10:67:F0:E2:38:07:78:CB:12:8C:8C:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.17.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:22:e2:cb:81:9e:c3:83:6d:d9:7a:d4:1a:a1:b3:43:d2:25:
         8b:fb:69:55:a1:25:06:aa:12:af:42:65:f7:e0:21:89:3c:14:
         28:e8:9f:80:4e:d9:74:ae:0b:1d:b1:bf:d1:0a:23:93:3a:8c:
         e8:e9:fe:74:b1:1c:65:28:51:8c:8d:f8:c8:89:8f:8e:3a:15:
         17:77:d9:31:52:85:08:64:0b:ab:22:ad:20:c2:f1:0e:df:aa:
         b6:58:d3:17:23:9b:ac:e2:de:f6:ce:5a:c8:53:cc:fa:fc:ae:
         5d:06:65:4a:09:ac:35:d9:ba:7f:88:85:84:89:a5:50:2b:b3:
         3a:ca:72:e6:75:6e:46:7d:20:ae:ca:46:c6:46:4d:36:2c:f8:
         00:4b:28:7e:9d:41:6d:3c:bb:af:f0:54:7f:fc:dc:7a:ea:69:
         db:d0:85:b5:ae:83:7b:ca:60:36:d8:c9:8b:36:c5:95:c1:2b:
         76:f5:1c:5e:0e:d4:4d:14:be:87:73:54:ac:b0:79:66:c0:ac:
         de:59:72:75:31:5a:18:7e:73:6b:58:97:4b:5e:1a:c1:11:3c:
         9d:ef:07:ba:25:8d:21:fa:93:42:7b:12:a9:f1:ac:fe:db:35:
         0d:d7:32:cb:10:de:7a:57:ea:ab:c7:91:5c:d9:0a:20:70:a9:
         b3:b7:c3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:39:57 2026 by rpki-client