Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/66993f61-5d14-39cf-bcf4-7f17d511f679.roa
File:                     66993f61-5d14-39cf-bcf4-7f17d511f679.roa (raw, json)
Hash identifier:          Hd9Q/lkOLMB32/pqK9+87LOR3ASacxajVf7yZ9vIk2E=
Subject key identifier:   F2:3D:9E:A1:F3:FD:32:A9:CC:3E:AE:C6:6E:2B:8E:D6:E4:58:F3:96
Certificate issuer:       /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Certificate serial:       010D0C9F4328584EA8A298019C3887EF3C813640
Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/66993f61-5d14-39cf-bcf4-7f17d511f679.roa
Signing time:             Wed 29 Jul 2026 10:31:55 +0000
ROA not before:           Wed 29 Jul 2026 10:31:55 +0000
ROA not after:            Tue 27 Oct 2026 10:31:55 +0000
asID:                     16740
IP address blocks:        69.60.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a8:a2:98:01:9c:38:87:ef:3c:81:36:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
        Validity
            Not Before: Jul 29 10:31:55 2026 GMT
            Not After : Oct 27 10:31:55 2026 GMT
        Subject: CN=8e2aec8e-6f01-47ca-bb0b-58d541f252ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:43:b3:80:10:1b:03:73:d9:b9:d4:77:74:a4:
                    48:5d:ab:95:54:09:98:b5:f4:d4:d7:c7:bb:42:21:
                    4c:8f:56:9d:6c:cb:30:d6:3d:1a:1d:a2:aa:47:f4:
                    e3:15:5e:48:1b:91:06:aa:1b:4f:49:1b:7a:11:c4:
                    60:a8:ef:a8:ed:d7:49:b3:9e:c2:70:a7:9f:d0:95:
                    d7:e8:65:fd:6f:1c:a2:05:21:4d:34:ae:1e:10:9e:
                    a4:36:29:f9:56:6a:2a:b8:12:f4:64:91:f1:11:a9:
                    71:f2:02:e1:60:b0:44:ff:93:80:92:d0:ca:24:b4:
                    9c:0f:8b:55:0a:cd:02:b9:58:ce:eb:ab:48:08:21:
                    79:19:12:ca:9e:2a:00:be:f0:3b:97:61:4c:3e:19:
                    a6:f9:ca:00:89:44:20:15:62:86:76:fb:10:38:e7:
                    cb:a3:4f:d3:3e:38:e6:70:b8:7a:2e:18:18:60:bf:
                    a4:e5:88:b0:61:a8:70:9f:71:c0:73:37:41:b1:a5:
                    d9:dd:5f:9e:34:bd:11:bd:a3:c4:21:c6:f7:86:80:
                    52:95:b5:46:fc:05:3f:0c:46:a7:db:0b:57:90:18:
                    62:a3:94:e1:60:d2:d8:4c:00:9a:55:ee:9d:75:f5:
                    6c:98:fd:41:43:73:d5:50:b7:7b:65:e9:c3:a8:2f:
                    83:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:3D:9E:A1:F3:FD:32:A9:CC:3E:AE:C6:6E:2B:8E:D6:E4:58:F3:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/66993f61-5d14-39cf-bcf4-7f17d511f679.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl

            X509v3 Authority Key Identifier:
                keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.60.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:2c:b0:8e:8d:0d:86:e4:0d:04:48:63:4d:be:52:71:e8:b0:
         f3:65:cc:0d:55:75:23:22:5c:eb:05:a9:67:07:51:87:3e:e9:
         60:a0:f9:bf:cf:39:40:bb:ce:ef:5c:0b:9f:ef:9a:67:89:64:
         fd:ce:b6:e2:9e:76:90:54:6e:e1:7b:b5:29:28:b7:a3:8b:b4:
         60:2a:8f:5f:a6:1a:43:24:b5:9b:35:ef:22:b0:e8:64:64:31:
         93:02:da:c3:ec:bb:1e:82:de:de:72:fc:dc:34:28:4d:a7:bd:
         13:42:eb:7d:21:ce:6a:71:85:48:26:74:8c:60:9e:14:86:66:
         48:9d:31:05:bc:d3:b4:f4:6e:54:3d:a9:15:79:04:03:32:b6:
         7d:61:94:d5:d8:16:47:5d:53:9e:34:4f:51:c4:f3:43:9f:67:
         9e:df:2e:4a:7d:b1:57:8c:68:74:1f:6e:e1:69:03:71:9f:a7:
         3d:6a:36:ba:f5:7b:b1:49:c0:dc:d9:8a:e6:1f:22:d9:66:9a:
         1d:c1:7d:f1:0c:2b:f0:23:8f:b9:0a:99:33:06:fc:e9:24:5e:
         fd:26:7d:b0:fa:51:2d:19:1f:c7:f7:77:ff:30:47:36:ef:97:
         dc:cb:3c:0f:86:a5:a0:53:c9:06:23:38:c0:49:0a:9e:e5:8d:
         d3:15:33:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:41:10 2026 by rpki-client