Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/961dbf2a-aa65-45d0-ab69-205783d0db66/deece2f3-aaeb-3d77-94d7-880d879954ab.roa
File:                     deece2f3-aaeb-3d77-94d7-880d879954ab.roa (raw, json)
Hash identifier:          ssd9sJ3buiwGfh726/fb2UiFKEzEeNXomduku0YNVJw=
Subject key identifier:   F8:6C:43:6C:C2:70:B2:38:0A:16:CD:26:8F:36:11:B4:7A:A4:FF:7A
Certificate issuer:       /CN=961dbf2a-aa65-45d0-ab69-205783d0db66
Certificate serial:       010D0C9F4328584F4973A359C96F4611D2763F00
Authority key identifier: BC:3A:83:D0:54:60:17:44:44:2E:61:6E:3D:8E:B7:F8:3C:AA:0B:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/961dbf2a-aa65-45d0-ab69-205783d0db66.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/961dbf2a-aa65-45d0-ab69-205783d0db66/deece2f3-aaeb-3d77-94d7-880d879954ab.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     10423
IP address blocks:        69.176.128.0/19 maxlen: 24
                          72.44.96.0/19 maxlen: 24
                          2604:71c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/961dbf2a-aa65-45d0-ab69-205783d0db66/961dbf2a-aa65-45d0-ab69-205783d0db66.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/961dbf2a-aa65-45d0-ab69-205783d0db66/961dbf2a-aa65-45d0-ab69-205783d0db66.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/961dbf2a-aa65-45d0-ab69-205783d0db66.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:a3:59:c9:6f:46:11:d2:76:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961dbf2a-aa65-45d0-ab69-205783d0db66
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=4cca9e3d-8e7a-46e8-a466-a9513928b874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d3:ed:73:85:ed:4e:07:e1:ce:df:d9:8c:c0:
                    9a:69:6d:f9:ad:02:35:3b:96:75:20:58:16:ce:36:
                    1c:bf:2c:58:37:c8:bc:7d:46:9d:87:f9:a0:bf:47:
                    38:30:f8:4d:de:6d:bd:03:70:e4:6c:c6:ee:b5:ad:
                    1f:0c:f4:26:7f:49:fe:c9:a0:44:32:44:24:4a:cc:
                    52:08:00:f2:ac:5d:8b:eb:41:51:fb:4f:51:66:26:
                    91:e0:4f:75:aa:34:d5:9b:cb:1d:3b:ad:38:e7:10:
                    90:5d:90:8f:6d:54:92:2e:3e:c1:53:45:13:c7:c3:
                    b2:ca:55:21:aa:12:9f:f5:8e:ea:9e:2a:28:43:83:
                    86:42:0e:ee:83:ff:e0:14:86:74:47:da:75:8a:7e:
                    3c:ce:3e:40:9f:0b:6c:f4:94:c8:4f:8e:10:53:b7:
                    18:e2:8e:c0:c2:9e:6a:82:5b:53:a7:d9:24:77:12:
                    4a:ff:07:30:fd:af:4f:3f:69:78:3b:f4:16:4c:5a:
                    77:ad:1b:aa:26:3e:87:b4:7b:7e:2f:83:2d:db:32:
                    8b:f3:b8:3a:41:68:13:ea:51:bb:84:9c:00:36:c6:
                    73:c6:51:4d:98:e4:4a:64:9c:2b:f1:bf:f5:32:a2:
                    9d:07:83:9d:64:fa:1a:fb:f1:02:23:d6:68:e1:79:
                    1b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:6C:43:6C:C2:70:B2:38:0A:16:CD:26:8F:36:11:B4:7A:A4:FF:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/961dbf2a-aa65-45d0-ab69-205783d0db66/deece2f3-aaeb-3d77-94d7-880d879954ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/961dbf2a-aa65-45d0-ab69-205783d0db66/961dbf2a-aa65-45d0-ab69-205783d0db66.crl

            X509v3 Authority Key Identifier:
                keyid:BC:3A:83:D0:54:60:17:44:44:2E:61:6E:3D:8E:B7:F8:3C:AA:0B:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/961dbf2a-aa65-45d0-ab69-205783d0db66.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.176.128.0/19
                  72.44.96.0/19
                IPv6:
                  2604:71c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:d2:80:d6:8f:15:33:a3:00:d0:3d:88:3d:c0:04:bb:35:a1:
         a7:55:4e:cb:7a:51:13:af:cd:b9:93:59:6e:93:d3:0b:99:81:
         08:d0:64:8d:69:27:ad:b2:fa:5b:ea:9b:d9:8c:14:45:a8:1e:
         36:d1:a7:b1:2c:55:96:88:4a:38:d2:04:6d:76:6c:90:0e:85:
         a7:bb:cc:28:00:d4:48:76:80:59:ae:db:1f:bd:d7:d8:ba:2f:
         b5:97:5e:1e:2d:d5:db:0b:fb:af:c1:3e:4f:44:6a:39:59:c7:
         2c:be:92:65:04:38:de:c8:0a:ab:33:14:4f:d6:8c:47:77:d4:
         7b:3b:23:3f:6b:bb:56:b5:e5:c5:a5:fb:d1:8d:ad:96:1b:34:
         1c:ff:0f:a1:75:d6:77:c4:7e:fc:1b:cd:ce:f0:57:e0:05:fc:
         58:31:f5:06:06:c1:90:8c:66:96:89:ee:f5:84:63:b0:5c:93:
         dc:9f:c5:c4:dd:69:38:c1:9d:62:81:58:d3:cc:81:4a:fe:89:
         6a:30:94:bd:d4:8e:b1:bc:92:d3:ea:96:33:05:aa:f3:34:20:
         2f:88:88:b2:6e:d6:1c:d0:f3:c5:09:f4:e1:7e:39:fd:ef:95:
         83:cb:cb:ae:e1:f5:d0:92:ab:d6:26:63:77:b8:d8:90:08:5b:
         4b:fe:4e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 05:57:22 2026 by rpki-client