Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2/34ee3188-c8b3-3be6-82a9-90c6f0628e6c.roa
File:                     34ee3188-c8b3-3be6-82a9-90c6f0628e6c.roa (raw, json)
Hash identifier:          D8/jzmCQzGR9fUSEFrzEU0iJJtdt1C76xQPVXFESkts=
Subject key identifier:   46:92:53:2A:59:AB:C5:35:C5:80:70:48:19:14:0E:39:88:05:4D:F0
Certificate issuer:       /CN=d1d57239-6176-4c8d-9a7e-f9fea380a1a2
Certificate serial:       010D0C9F4328584F5A32A1C682CEF639FB722BD0
Authority key identifier: 6D:0E:19:88:64:18:83:E1:80:8D:48:79:CD:51:23:88:2E:59:37:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2/34ee3188-c8b3-3be6-82a9-90c6f0628e6c.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     12167
IP address blocks:        69.166.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:32:a1:c6:82:ce:f6:39:fb:72:2b:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1d57239-6176-4c8d-9a7e-f9fea380a1a2
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=e924bd43-b7a4-4518-960c-5cd0ab25759d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:53:07:40:f9:85:ac:98:57:60:f7:3b:93:3f:
                    08:3b:80:98:b7:26:9b:a7:bc:d8:99:71:2d:eb:18:
                    57:92:dd:b5:05:3c:30:10:fd:52:51:f8:11:ed:26:
                    c0:1f:1e:9a:ae:14:e2:aa:aa:53:fa:bd:5b:fc:c4:
                    6e:7f:4b:1b:b0:40:44:84:d9:66:bd:7a:7a:50:cb:
                    bf:aa:bb:5b:c5:28:79:ef:1d:31:c3:cb:d9:37:f4:
                    fe:43:f9:a9:f2:a9:89:44:e6:8c:67:c4:86:c2:95:
                    d4:aa:df:ef:9e:bb:47:00:65:38:19:5d:f9:44:b1:
                    07:06:3a:74:cc:80:61:f0:bc:0a:7e:5a:a3:c4:78:
                    a9:05:80:d9:8e:f5:94:93:32:d4:14:05:23:70:fc:
                    39:51:18:6d:8c:c8:20:37:0e:e4:52:ce:fa:37:84:
                    e9:b1:ce:7f:c5:9b:3e:9a:fe:e0:57:c3:81:11:50:
                    a3:c2:e9:68:97:49:8e:3e:4e:58:6c:f0:e3:cd:a9:
                    13:20:b6:d6:20:fe:04:5c:03:92:00:09:1c:cd:d2:
                    fd:76:cb:8f:4d:9d:ca:68:54:8d:7e:e2:cc:4c:f4:
                    3f:8b:44:1e:c5:a1:d5:bb:cb:4c:21:4f:27:1e:e1:
                    ff:62:29:dd:65:34:df:91:7c:8c:a5:cc:eb:65:f0:
                    0a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:92:53:2A:59:AB:C5:35:C5:80:70:48:19:14:0E:39:88:05:4D:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2/34ee3188-c8b3-3be6-82a9-90c6f0628e6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.crl

            X509v3 Authority Key Identifier:
                keyid:6D:0E:19:88:64:18:83:E1:80:8D:48:79:CD:51:23:88:2E:59:37:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:b9:0b:fb:f4:51:9e:86:34:58:ee:f5:61:09:f6:f2:41:9f:
         f8:da:0a:05:b0:5e:31:c9:53:90:b3:a6:08:57:0c:84:d9:19:
         63:ee:da:ca:2e:3c:c0:e7:e5:3e:f3:b3:4c:bd:fb:a3:08:9f:
         44:ed:b7:10:b8:50:dc:b3:da:87:af:4c:0a:d0:62:21:f8:66:
         01:38:03:04:44:72:6d:6d:ed:83:21:54:e6:f6:e9:b5:11:de:
         a9:d2:67:8b:b5:4f:1e:ef:23:35:d0:2b:0a:71:95:a5:7a:9e:
         7c:1f:98:ce:2a:db:4b:b2:97:cd:67:c8:53:3d:c7:bc:da:2b:
         36:86:cc:e0:e1:f8:f9:3d:20:63:35:57:94:38:21:e6:5b:b7:
         e2:94:99:b3:b9:61:93:29:4e:44:11:1d:66:b7:c5:01:dc:35:
         06:33:e4:2d:7f:ff:a3:17:da:7c:f1:bd:e6:4a:71:a8:c2:c6:
         1d:fd:34:59:b9:83:b4:22:93:bc:5f:6f:0a:a2:33:a6:a8:dd:
         a1:88:97:ed:28:5f:38:39:59:db:02:b1:62:15:4a:ef:b0:c5:
         86:a6:7c:58:98:da:d4:43:79:66:32:fb:87:97:f1:95:3d:fe:
         66:1e:45:e8:e5:83:ec:c9:fb:15:41:a7:8a:15:ea:a4:ad:39:
         ff:cc:9a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:01:36 2026 by rpki-client