Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/8c452a66-4e9f-3444-b629-2728254e6256.roa
File:                     8c452a66-4e9f-3444-b629-2728254e6256.roa (raw, json)
Hash identifier:          RvB8qNmh6LGhz0SmmsKLmxPqw/eQQcejc1jjYhWU8wk=
Subject key identifier:   EA:A7:1C:F5:9A:F6:A5:A2:9B:7A:7E:7A:0E:DB:86:7D:88:0B:A8:C0
Certificate issuer:       /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial:       010D0C9F4328584F43DD7AE3688A26477886B0E0
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/8c452a66-4e9f-3444-b629-2728254e6256.roa
Signing time:             Wed 23 Sep 2026 01:00:12 +0000
ROA not before:           Wed 23 Sep 2026 01:00:12 +0000
ROA not after:            Tue 22 Dec 2026 02:00:12 +0000
asID:                     31898
IP address blocks:        69.195.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:43:dd:7a:e3:68:8a:26:47:78:86:b0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
        Validity
            Not Before: Sep 23 01:00:12 2026 GMT
            Not After : Dec 22 02:00:12 2026 GMT
        Subject: CN=2166a687-9fa4-4e6d-b9fb-d7b583584885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6b:23:df:a0:f0:ef:38:6f:0f:f3:8f:1f:8c:
                    f0:cf:b9:a3:c1:83:95:83:5f:02:9e:67:e2:ea:8d:
                    57:7d:4c:8b:9e:ee:b5:f0:e3:4e:b1:ed:17:bc:b4:
                    ed:02:7a:bc:64:d6:79:24:4c:a4:92:94:f0:83:56:
                    ec:f5:57:ab:b3:a6:41:83:a8:71:43:0c:f7:3f:df:
                    0f:97:fb:10:3c:0d:d3:7c:fd:e4:9b:b2:be:15:14:
                    88:34:6f:d2:86:60:df:33:e4:94:b0:c1:2a:21:03:
                    2b:06:01:b4:a6:e4:f3:fd:65:96:27:a2:7e:b9:18:
                    1c:49:57:8e:bb:8d:2e:0e:1e:55:68:d4:4e:03:93:
                    f9:82:28:0b:41:86:7c:8f:d5:65:c2:a4:e1:eb:7d:
                    16:37:f9:0b:ec:12:59:17:97:e5:0d:49:0a:ad:66:
                    3c:17:fb:6a:ae:f6:d0:7a:b9:26:81:dd:ba:26:4d:
                    3e:5d:6a:a0:76:ea:38:a3:a7:80:fc:30:e1:46:c6:
                    19:d4:fe:20:fb:75:dc:03:bb:c4:26:6b:42:29:3f:
                    f0:c9:bc:0f:2b:3d:73:ee:92:b5:45:e1:69:90:e8:
                    3d:e9:42:37:fe:9f:f1:59:98:50:3c:0f:00:56:e4:
                    c4:7e:22:f8:56:ba:6c:99:5f:6f:e9:5e:4b:34:f5:
                    37:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A7:1C:F5:9A:F6:A5:A2:9B:7A:7E:7A:0E:DB:86:7D:88:0B:A8:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/8c452a66-4e9f-3444-b629-2728254e6256.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl

            X509v3 Authority Key Identifier:
                keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.195.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:7a:96:a3:a3:0c:59:41:c9:14:cd:48:9c:27:a0:99:a1:4d:
         5a:f2:75:87:f9:0d:d6:89:1b:63:7e:d3:74:07:bd:81:c2:2b:
         3b:88:8d:58:f2:12:9e:9a:d6:ac:cb:46:96:b6:44:ea:a2:4f:
         04:2b:48:47:e7:ec:98:01:91:99:c1:a7:fd:35:e6:7e:90:7d:
         cd:d5:67:ec:11:75:d1:d9:76:f9:c6:74:bb:96:51:86:d0:7b:
         a5:eb:d8:42:0e:be:11:c1:45:f9:3d:0a:e0:ae:63:d5:d5:93:
         6b:e2:36:b9:ba:38:fc:89:47:1c:cf:17:ae:40:77:07:ff:00:
         25:c5:94:64:3d:b3:1d:a9:7f:de:e3:d1:d1:2e:7e:f5:8a:77:
         5e:83:07:97:0f:2a:ef:a8:81:72:64:e5:01:cd:bb:d5:1c:13:
         40:fd:c9:b2:73:d1:49:d8:14:e1:38:61:ce:88:48:13:b6:ed:
         6d:6e:a5:a5:60:8e:8f:00:4b:6c:9b:d9:65:fe:ed:ed:2b:30:
         32:a8:58:6d:0c:4c:b9:59:8f:4f:42:f4:58:57:5f:75:a9:c4:
         f6:ea:72:b3:b2:17:fe:c7:30:a0:4a:84:e8:63:cc:87:8b:b6:
         54:19:58:ec:37:3d:0b:66:09:f9:e8:71:1c:fd:8b:5c:99:6e:
         ac:85:4c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:35:53 2026 by rpki-client