Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/cc978535-2a8a-351d-a84c-f1f5bcf0f310.roa
File:                     cc978535-2a8a-351d-a84c-f1f5bcf0f310.roa (raw, json)
Hash identifier:          eq64Pb62xg0jJsY5b+sW2JlMcvL/dGv1zf1J8t0Ghik=
Subject key identifier:   DA:23:A1:F2:04:4B:B8:57:43:4A:E6:34:E8:2C:1D:75:BD:9A:3A:9C
Certificate issuer:       /CN=b8624cbb-ba19-47a6-b5ac-d0747149714c
Certificate serial:       010D0C9F4328584F89A85C5B7A03D83824035000
Authority key identifier: 71:6A:5A:21:EE:66:2B:9C:10:67:F0:E2:38:07:78:CB:12:8C:8C:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/cc978535-2a8a-351d-a84c-f1f5bcf0f310.roa
Signing time:             Sun 18 Oct 2026 01:00:13 +0000
ROA not before:           Sun 18 Oct 2026 01:00:13 +0000
ROA not after:            Sat 16 Jan 2027 02:00:13 +0000
asID:                     11260
IP address blocks:        69.17.201.0/24 maxlen: 24
                          69.17.219.0/24 maxlen: 24
                          69.17.223.0/24 maxlen: 24
                          199.193.230.0/24 maxlen: 24
                          199.193.231.0/24 maxlen: 24
                          207.2.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:89:a8:5c:5b:7a:03:d8:38:24:03:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8624cbb-ba19-47a6-b5ac-d0747149714c
        Validity
            Not Before: Oct 18 01:00:13 2026 GMT
            Not After : Jan 16 02:00:13 2027 GMT
        Subject: CN=f8b27f07-b572-47b0-a1ea-53e2ee153be0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c0:ec:03:2d:fa:27:8f:01:59:96:4a:c6:ee:
                    40:9a:66:5a:00:e8:c1:d9:8d:74:0a:c6:5b:26:31:
                    a6:38:5d:ae:b6:34:79:f0:6f:27:65:44:e4:aa:c9:
                    1e:ec:94:12:de:6a:76:9a:78:14:95:cf:dc:56:ec:
                    ae:e3:91:5c:5e:87:29:fc:91:65:94:0c:78:51:75:
                    36:90:26:68:59:bb:65:cc:e5:47:ff:87:9f:b1:73:
                    a4:0d:2c:ea:5a:2a:07:d5:f2:f3:8f:d9:01:bf:de:
                    b3:bd:d3:fc:10:89:45:c6:a1:eb:53:d4:35:15:e4:
                    44:9e:8a:ad:e0:9e:26:6c:07:76:5e:10:09:b4:52:
                    07:02:a7:0c:6d:62:cc:68:dc:87:9f:78:b8:32:46:
                    bd:3b:7c:1b:ac:5a:55:58:01:e9:ca:e8:14:23:c2:
                    a2:93:a9:46:8c:ae:e7:a8:2f:fe:81:86:d3:74:3f:
                    34:81:74:90:62:d8:e4:49:d4:f7:16:a0:f9:fe:d8:
                    b3:68:5f:0b:7d:78:99:2e:9f:0c:5d:46:cc:e0:e7:
                    e8:4d:ca:9e:80:3c:eb:ef:bf:d6:96:92:40:d4:c3:
                    d9:45:bb:89:cd:06:d7:07:8f:07:a7:52:a5:11:39:
                    a7:28:c8:52:d5:5d:e8:0d:d2:8d:48:d9:0b:06:d0:
                    85:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:23:A1:F2:04:4B:B8:57:43:4A:E6:34:E8:2C:1D:75:BD:9A:3A:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/cc978535-2a8a-351d-a84c-f1f5bcf0f310.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.crl

            X509v3 Authority Key Identifier:
                keyid:71:6A:5A:21:EE:66:2B:9C:10:67:F0:E2:38:07:78:CB:12:8C:8C:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.17.201.0/24
                  69.17.219.0/24
                  69.17.223.0/24
                  199.193.230.0/23
                  207.2.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:80:4a:48:c1:a0:95:57:e3:6f:d5:b5:48:59:e7:01:9a:86:
         34:c8:02:b3:a4:f7:a1:aa:7a:19:9f:2e:fb:10:5d:f4:99:58:
         1c:6b:96:ab:65:ce:40:2b:53:2a:0a:fe:d8:01:74:52:d8:5d:
         f2:84:19:19:9f:86:87:ec:7d:b0:76:8e:b5:57:98:f0:e1:23:
         4f:85:06:0a:fc:30:7d:9f:d3:51:b8:9f:16:13:13:10:cd:08:
         53:51:20:2c:2a:6a:27:44:87:66:eb:51:21:17:9c:7a:fa:c2:
         2f:97:36:77:4e:12:1d:b4:62:b5:f1:f7:df:5c:83:f8:70:72:
         f7:0d:e7:0e:aa:c0:63:9b:25:1c:3d:f1:34:f4:55:53:9e:0a:
         40:3b:4a:e7:53:aa:35:16:8e:05:ee:0e:86:44:90:26:2d:f2:
         07:12:38:72:b2:3f:98:fd:b6:e2:e3:13:5b:16:00:15:31:c2:
         13:14:2d:cd:06:88:d6:4a:32:22:57:f9:39:aa:25:3f:8d:ac:
         c0:7a:cc:65:e3:d5:7f:4d:5b:7e:2d:0c:5b:32:ad:d1:fe:39:
         73:16:20:3f:a4:c6:b6:fc:0a:68:11:f8:95:0d:ca:59:0a:99:
         ca:c2:b4:f1:3b:4b:9f:75:8b:c6:bb:74:66:ab:a2:5a:75:19:
         69:cf:4d:9b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 27 18:07:52 2026 by rpki-client