Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/38582e71-36ac-4b58-9873-71368cfb9343/1fd280d4-3322-3105-940a-b4ad1e719cc4.roa
File:                     1fd280d4-3322-3105-940a-b4ad1e719cc4.roa (raw, json)
Hash identifier:          mYv6cO/E9WFjzN2T+0e5q7B++fB39nW/k/OOgo/zB/k=
Subject key identifier:   B6:B8:B5:D5:7B:44:CD:77:BE:EB:01:F5:7A:B3:4E:DA:F1:A3:35:94
Certificate issuer:       /CN=38582e71-36ac-4b58-9873-71368cfb9343
Certificate serial:       010D0C9F4328584F77835A003A257BBC126F9600
Authority key identifier: 8B:E3:2A:6B:29:40:65:E3:BB:DE:F9:A4:D2:F5:57:42:B1:C2:F4:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/38582e71-36ac-4b58-9873-71368cfb9343.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/38582e71-36ac-4b58-9873-71368cfb9343/1fd280d4-3322-3105-940a-b4ad1e719cc4.roa
Signing time:             Sun 11 Oct 2026 13:00:12 +0000
ROA not before:           Sun 11 Oct 2026 13:00:12 +0000
ROA not after:            Sat 09 Jan 2027 14:00:12 +0000
asID:                     35280
IP address blocks:        208.69.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/38582e71-36ac-4b58-9873-71368cfb9343/38582e71-36ac-4b58-9873-71368cfb9343.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/38582e71-36ac-4b58-9873-71368cfb9343/38582e71-36ac-4b58-9873-71368cfb9343.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/38582e71-36ac-4b58-9873-71368cfb9343.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:77:83:5a:00:3a:25:7b:bc:12:6f:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38582e71-36ac-4b58-9873-71368cfb9343
        Validity
            Not Before: Oct 11 13:00:12 2026 GMT
            Not After : Jan  9 14:00:12 2027 GMT
        Subject: CN=64afe0de-783c-45d8-9c60-e1188cd26df0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:8b:be:01:d5:57:ef:16:c6:38:75:b9:ee:b2:
                    30:11:d2:66:c5:23:da:28:07:58:b7:58:06:db:66:
                    84:f4:19:00:5e:c3:84:c3:3d:2f:84:53:9a:17:a9:
                    fe:8c:30:f7:25:0a:43:4b:cf:76:18:a2:8d:74:fa:
                    f7:6c:bf:05:e6:36:6c:4a:2c:8a:d0:ff:0a:81:05:
                    06:dc:b0:d0:0b:3b:bb:b8:a1:cf:2a:e3:1e:f4:ed:
                    9c:97:de:c3:2f:1c:73:75:19:73:71:40:a1:99:d9:
                    98:40:ef:99:30:a0:98:8e:2d:51:29:d1:22:14:9b:
                    cc:d1:a1:33:b2:fd:29:5e:4f:1c:d9:47:95:55:24:
                    3c:aa:a0:3d:61:fa:6b:88:7a:aa:bc:9a:7b:0e:84:
                    2c:74:a9:ff:d4:76:0f:ca:49:ed:39:dd:c0:20:40:
                    ac:9c:de:b8:22:48:4d:2a:de:9b:4a:0e:b3:eb:b8:
                    b3:ed:0e:47:f0:5a:14:a6:5a:80:b4:fe:11:06:8e:
                    c9:09:71:83:56:b7:93:cf:4f:61:74:3b:e2:db:b6:
                    92:59:37:18:dc:52:95:37:44:fb:03:c2:c2:be:38:
                    48:be:41:1c:13:eb:30:69:ef:29:e2:28:34:78:7d:
                    77:54:1a:af:2b:89:86:82:91:64:93:00:ea:32:cd:
                    30:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B8:B5:D5:7B:44:CD:77:BE:EB:01:F5:7A:B3:4E:DA:F1:A3:35:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/38582e71-36ac-4b58-9873-71368cfb9343/1fd280d4-3322-3105-940a-b4ad1e719cc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/38582e71-36ac-4b58-9873-71368cfb9343/38582e71-36ac-4b58-9873-71368cfb9343.crl

            X509v3 Authority Key Identifier:
                keyid:8B:E3:2A:6B:29:40:65:E3:BB:DE:F9:A4:D2:F5:57:42:B1:C2:F4:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/38582e71-36ac-4b58-9873-71368cfb9343.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.69.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:46:e3:aa:9d:32:44:f1:80:0f:83:76:d3:f4:ed:7e:47:12:
         c9:18:65:56:9d:9d:0b:68:d5:ee:f8:5b:96:6b:c4:bb:14:db:
         f5:6b:25:90:29:4d:e1:dd:ea:56:17:d3:ba:23:76:90:2a:3b:
         00:c3:8f:c8:cd:ef:e1:07:48:4a:c3:3f:af:48:a4:84:bf:a5:
         b7:65:fd:e8:e9:11:19:9d:d6:fa:70:0e:7f:34:b9:12:72:6f:
         fe:a8:00:47:58:2b:e8:c5:d8:61:57:c5:19:07:ae:90:de:ae:
         62:cf:06:2a:a6:0e:84:83:e2:66:f1:68:e7:7a:b5:05:e8:63:
         38:6c:74:0b:21:bd:cd:7f:4b:aa:9e:d8:c3:fa:30:d7:a1:a8:
         64:4d:4d:82:9c:cb:1c:36:7f:47:02:09:87:1b:eb:93:91:dc:
         f1:cf:3b:0f:04:d4:fa:f9:39:0c:63:36:5c:20:1f:52:a2:2c:
         11:3d:e4:31:2d:a5:49:a4:09:a3:c4:76:8f:c3:1b:43:02:a5:
         d0:b6:a5:81:aa:4f:5d:15:fc:7a:23:01:07:fa:3e:83:d5:0e:
         f6:02:05:d7:fe:39:83:65:d7:48:e1:6f:bf:17:f9:0e:b1:a7:
         2a:30:c6:9c:b0:fa:13:c3:a5:a0:f9:af:cd:d2:b9:4e:57:08:
         0a:f5:d0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:10:31 2026 by rpki-client