Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/b7080a90-6dec-3327-8e1b-e9b100da6f3d.roa
File:                     b7080a90-6dec-3327-8e1b-e9b100da6f3d.roa (raw, json)
Hash identifier:          ZZYLcz9rXOhY/AXfdUWCe471tPPjnVs2m1PDfaq6kgY=
Subject key identifier:   AF:83:D7:34:81:D4:D2:68:2C:87:BF:FA:40:F7:94:51:18:80:64:46
Certificate issuer:       /CN=c69a1447-7cfa-456f-a600-4b2012c01dc7
Certificate serial:       010D0C9F4328584F655D6B539084D09FE2610E60
Authority key identifier: 02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/b7080a90-6dec-3327-8e1b-e9b100da6f3d.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     11776
IP address blocks:        69.161.96.0/24 maxlen: 24
                          69.161.97.0/24 maxlen: 24
                          172.85.7.0/24 maxlen: 24
                          207.255.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:6b:53:90:84:d0:9f:e2:61:0e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c69a1447-7cfa-456f-a600-4b2012c01dc7
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=546c5525-ce74-4342-9ffe-cfa39d152a0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:08:4c:a6:82:ab:6e:76:53:3b:40:8d:57:39:
                    ca:70:c4:a8:cf:a5:69:e7:52:3f:fa:35:ab:70:4d:
                    fe:d2:b7:18:19:97:71:3c:56:15:25:e4:c6:92:e4:
                    a1:f3:0a:af:bc:43:d8:5a:0b:0b:86:11:34:b7:c8:
                    37:3d:25:c9:ec:6d:f1:ae:6e:6d:a6:db:f1:54:5e:
                    02:d6:e9:75:e5:2f:ab:8a:2d:80:f2:7d:eb:40:c2:
                    1d:d6:0a:8a:e8:63:ac:ea:99:93:84:6b:22:7d:d6:
                    17:b7:81:8a:8c:83:d5:2d:6c:1e:cb:a2:a8:d8:49:
                    cb:01:bd:66:be:f2:b5:b2:60:01:0f:34:03:ff:9b:
                    5e:79:ab:0e:8b:ea:32:60:af:12:59:09:d9:66:c9:
                    4c:92:58:3d:3f:ce:a9:ec:24:34:30:1b:84:2f:54:
                    a9:98:31:f1:66:a6:2f:96:4b:db:6d:17:c9:d8:70:
                    46:91:51:95:ac:d8:ca:a0:54:29:c5:44:0a:90:eb:
                    6a:d0:dd:e2:72:9d:41:07:97:58:06:d7:8b:cb:16:
                    eb:56:b3:a8:e8:89:42:b5:cd:ae:00:e5:a4:ca:16:
                    40:e7:33:a0:05:20:3f:bc:90:6c:03:24:a1:c0:12:
                    c3:bb:18:a1:84:93:52:a6:da:28:2f:df:9e:5b:e0:
                    ba:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:83:D7:34:81:D4:D2:68:2C:87:BF:FA:40:F7:94:51:18:80:64:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/b7080a90-6dec-3327-8e1b-e9b100da6f3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl

            X509v3 Authority Key Identifier:
                keyid:02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.161.96.0/23
                  172.85.7.0/24
                  207.255.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:9c:89:dd:2e:12:ab:52:59:cc:2b:ea:8a:c3:2a:2b:23:61:
         48:7e:86:73:90:07:09:f3:14:c4:af:43:b7:46:22:68:eb:9a:
         2f:cc:3d:e3:ee:d1:aa:d1:94:89:42:7c:56:85:5a:0d:9c:86:
         66:1a:21:cb:5d:e7:93:dd:80:a7:c8:bd:e9:b0:51:b1:0c:d9:
         a3:af:39:e4:92:55:03:e2:27:22:87:6d:1b:d6:b4:60:90:20:
         a1:b7:9b:37:40:9a:63:10:af:af:d7:1f:79:c4:b9:e0:e4:72:
         41:5c:71:b6:f0:a8:b3:79:e6:34:97:ad:8c:a4:da:22:b7:22:
         7b:68:75:35:38:47:b3:2e:6e:fa:c3:0f:81:a9:57:83:53:5c:
         ee:2b:74:a7:f5:04:a5:84:d2:41:01:e1:03:2a:1e:47:0d:75:
         a1:c6:23:a0:97:d2:68:d8:17:d8:b3:c7:87:69:fb:85:04:f9:
         08:84:89:a9:a4:37:7f:5f:c7:d3:2e:8f:c0:51:ea:e6:47:52:
         a5:7c:8c:ec:b6:76:d9:fb:f2:0d:76:b5:bb:6b:b1:66:47:1f:
         37:43:d0:47:45:89:66:f3:4e:ec:bd:6e:1f:5b:cb:b2:9b:2a:
         a9:ff:81:7b:d2:20:0f:48:a1:d0:43:19:98:06:c3:11:80:c7:
         12:bd:51:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 11:50:29 2026 by rpki-client