Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/8a6f32c4-dc58-3dc3-82d8-9190199e51ba.roa
File:                     8a6f32c4-dc58-3dc3-82d8-9190199e51ba.roa (raw, json)
Hash identifier:          Zg4Zxuve46OvLRshH5auPTCm9a7hKReQD6sRqNh6hw4=
Subject key identifier:   5F:B3:D8:A4:F6:68:C0:E9:A2:2B:EC:43:70:13:2E:9C:D2:D3:D2:E3
Certificate issuer:       /CN=5f6f7623-0788-410a-b9dd-8040879aa924
Certificate serial:       010D0C9F4328584F71ED8A66121ADDA215057A00
Authority key identifier: 6C:F1:38:A9:DC:91:8A:D7:97:D6:E0:2C:FD:36:EA:97:60:B3:CF:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/8a6f32c4-dc58-3dc3-82d8-9190199e51ba.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     19197
IP address blocks:        69.41.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:8a:66:12:1a:dd:a2:15:05:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f6f7623-0788-410a-b9dd-8040879aa924
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=18f9649d-5de0-43d4-9c23-b20f0047dfb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3d:75:fd:cd:0a:83:5b:58:93:45:1c:52:db:
                    b4:29:a6:15:58:bd:4e:98:95:ed:e9:84:11:cf:40:
                    19:a7:14:5f:88:b8:37:ca:51:1e:b8:52:4e:ec:3d:
                    32:51:ea:f7:f3:9f:21:4c:ab:31:c0:bd:9f:79:1e:
                    1f:8a:99:96:a4:50:0e:84:e8:62:a5:2e:c1:08:9a:
                    44:6f:f5:52:c5:7f:98:5d:9b:a4:c5:f0:bf:c5:a4:
                    b1:0f:81:69:fd:7e:fb:4d:34:75:a3:38:af:4c:f2:
                    94:09:30:22:03:af:42:b7:ab:8c:dd:78:1b:b4:a5:
                    d0:eb:9a:a0:d6:ff:26:70:0f:ef:0d:ed:6c:67:4d:
                    8f:ac:33:e1:ce:65:b9:c2:87:a7:28:79:70:a9:34:
                    1d:ba:3c:62:53:e9:d4:c2:2a:07:50:82:d2:10:71:
                    00:40:8f:45:9a:85:d0:8e:14:b2:11:41:0a:9c:6a:
                    f9:5d:50:cc:3c:59:03:b6:b1:d8:9c:39:42:41:7a:
                    bd:23:85:55:4f:f5:ab:23:16:ae:2c:a7:30:53:d7:
                    a9:7d:f8:8b:27:a9:18:ae:d8:d7:c1:c4:60:b2:1c:
                    fa:64:b9:b1:57:85:b2:b2:ed:eb:44:73:2f:35:8b:
                    7c:1f:39:1e:f1:37:ad:5f:35:b0:80:36:c4:e2:4b:
                    e9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B3:D8:A4:F6:68:C0:E9:A2:2B:EC:43:70:13:2E:9C:D2:D3:D2:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/8a6f32c4-dc58-3dc3-82d8-9190199e51ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.crl

            X509v3 Authority Key Identifier:
                keyid:6C:F1:38:A9:DC:91:8A:D7:97:D6:E0:2C:FD:36:EA:97:60:B3:CF:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.41.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:cb:c8:22:e0:72:2c:05:ed:ef:4a:17:42:70:c8:1f:7a:1c:
         1e:3c:18:21:21:15:fc:31:68:15:2c:a1:a1:42:64:59:26:32:
         f3:60:5e:15:e3:95:58:ba:be:7d:e6:cf:14:07:34:f8:30:9b:
         7b:f1:24:80:89:e4:e2:c0:36:ab:49:f3:6f:83:b4:85:73:ee:
         c5:1c:a2:ee:02:13:8a:9a:81:27:09:73:c4:25:5a:96:7d:99:
         c3:a9:a3:ce:90:ff:e2:ee:85:31:fd:2c:6b:43:f8:2e:34:cb:
         99:5f:61:09:f0:2e:a5:62:b4:42:41:bb:9b:14:52:48:35:36:
         7c:fc:cf:df:88:28:fc:82:d9:62:7e:d2:63:0e:11:c4:29:5f:
         7a:03:26:14:a0:b7:62:b3:26:d4:d3:56:07:01:24:f5:e1:d9:
         70:b9:52:47:f0:f1:48:37:e2:23:8d:c7:2f:14:8b:84:d4:d7:
         f7:1e:e4:3e:ff:24:8a:06:c9:91:22:e9:8a:a3:8e:a7:37:28:
         0c:92:3e:99:6f:4e:90:40:bb:66:54:1d:7c:14:3f:7b:e2:26:
         98:e4:a7:d1:77:d1:9e:be:b4:99:56:c7:47:b8:b2:0d:2e:df:
         d5:71:f2:15:a5:78:17:1f:f4:95:84:2f:5a:17:7b:76:ff:f0:
         3d:65:77:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 17:13:45 2026 by rpki-client