Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/1a878653-d353-3f23-94ac-36d7d98c84d1.roa
File:                     1a878653-d353-3f23-94ac-36d7d98c84d1.roa (raw, json)
Hash identifier:          1dGK88s8T9dg8A4q97Vm+0Md/hbSRr4PlsNSbCVE6hE=
Subject key identifier:   77:1D:7E:19:B7:23:36:62:EB:A7:D9:A6:2B:8F:73:FB:7C:81:ED:80
Certificate issuer:       /CN=2de5d746-3402-4263-b880-ea4d7ecfc168
Certificate serial:       010D0C9F4328584ED431D91EFA4A2B6DBD91A020
Authority key identifier: 6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/1a878653-d353-3f23-94ac-36d7d98c84d1.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     22359
IP address blocks:        69.161.210.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:31:d9:1e:fa:4a:2b:6d:bd:91:a0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2de5d746-3402-4263-b880-ea4d7ecfc168
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=99fb835e-a9cb-414e-b69b-91567d041b12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a8:1f:42:4f:e3:0d:e8:4c:05:10:1f:da:4e:
                    1b:e3:1c:dc:4d:8d:3e:f1:ad:8f:af:34:13:b4:0c:
                    5e:cf:30:d8:41:b0:e1:eb:0e:0b:79:f2:a9:ea:ae:
                    15:dc:4a:7b:7d:48:44:62:5b:1b:c4:09:e7:ec:a6:
                    21:25:c5:0a:e3:8a:e0:c9:87:b9:eb:d0:24:14:eb:
                    1b:62:74:f0:78:8d:fd:e2:0b:69:34:fa:85:86:92:
                    cd:d9:53:f6:60:34:be:c5:9b:19:37:87:95:a4:a9:
                    ec:8a:be:19:d4:8e:17:d3:4a:c0:42:89:95:71:eb:
                    d0:27:24:b5:a4:a6:b8:8f:4e:1a:e2:57:0b:5e:f5:
                    e4:a6:1c:32:41:85:3c:b3:b0:f6:69:8e:02:92:3f:
                    6b:77:c3:fc:8f:aa:84:2b:a0:eb:b0:1f:e9:ab:74:
                    c0:f0:a5:93:6d:7b:49:4a:ef:88:89:28:85:53:d4:
                    32:d4:f5:94:15:3f:51:f8:74:12:4b:b3:f8:19:c2:
                    7a:a0:fc:36:2f:35:79:8b:4d:63:41:66:04:e3:25:
                    86:14:69:26:c5:e4:1e:b3:cd:b6:94:47:ce:84:54:
                    cf:6f:90:48:19:93:e4:cc:bd:90:ff:28:f9:7d:ce:
                    bf:f9:1a:dd:cf:62:ec:32:ad:1d:3c:b4:56:b2:b4:
                    c7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:1D:7E:19:B7:23:36:62:EB:A7:D9:A6:2B:8F:73:FB:7C:81:ED:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/1a878653-d353-3f23-94ac-36d7d98c84d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.161.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:41:b0:92:b1:69:2c:90:2a:ee:15:07:52:a2:c7:d3:72:48:
         5d:da:8a:72:1f:b6:a4:3c:11:c9:ea:2e:fc:51:f2:cf:3b:ce:
         65:9f:8c:94:a1:d0:46:98:5e:7b:f5:d9:42:d6:4b:ce:60:b7:
         b6:e7:2c:4e:27:3e:0f:a9:fd:54:e0:90:bd:7a:de:62:84:e8:
         2a:d2:22:0b:94:be:80:cd:c6:5f:88:20:7e:2c:d2:d4:ab:22:
         73:f2:f3:e6:58:95:99:cc:29:9b:2b:f3:78:80:93:fb:1b:7e:
         75:e0:02:73:06:a7:50:98:52:64:eb:cf:b3:de:67:fd:fd:98:
         70:80:1a:15:29:dd:43:c3:6a:6f:1c:d5:b5:f7:a3:fa:36:32:
         45:17:01:12:86:69:b2:35:10:20:25:b4:5a:d9:6a:6c:f1:cf:
         a0:14:5c:90:9a:71:25:9d:5e:bc:ca:20:d0:3a:96:70:da:95:
         77:9e:20:88:0a:18:e0:ba:f8:e2:4f:f3:a0:0a:fb:10:7e:97:
         40:99:f8:93:6d:38:95:df:fb:07:7c:e7:56:88:a7:e7:c3:f3:
         9f:df:ea:5d:c8:95:0e:42:21:73:84:3e:7d:62:4e:f6:30:9b:
         7c:d4:ae:e8:53:f6:62:36:bb:6a:31:12:01:1b:23:de:c1:a2:
         8f:57:2b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:15:09 2026 by rpki-client