Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/8a36e7fa-9c0c-39d9-8d73-1eec7757d97c.roa
File:                     8a36e7fa-9c0c-39d9-8d73-1eec7757d97c.roa (raw, json)
Hash identifier:          d2VdYP/qbCRwp1RjyH0mdHrxon5IRVkCxmJ34V6dav0=
Subject key identifier:   FA:90:C0:B4:FF:38:14:0C:63:A4:F7:04:11:5F:CD:53:DC:CB:16:99
Certificate issuer:       /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00
Certificate serial:       010D0C9F4328584F4972D66BF57044B2CB90F780
Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/8a36e7fa-9c0c-39d9-8d73-1eec7757d97c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        69.170.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:d6:6b:f5:70:44:b2:cb:90:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=3140ba9e-c4f7-4598-8f21-68479ce2fc1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:72:1a:51:02:0d:1e:d4:91:ce:2f:33:ab:b2:
                    32:51:31:70:5a:b6:d0:d7:a5:91:1d:29:3c:f1:4d:
                    39:f5:3d:f3:f7:15:70:1c:31:36:70:3d:c7:27:f5:
                    ec:cd:14:bd:fe:0d:a9:c9:6c:74:3f:9d:dd:0a:66:
                    dd:da:0d:92:d8:a5:88:98:64:60:4d:53:50:99:3e:
                    04:95:47:93:d4:fb:92:50:b3:bb:89:c5:44:57:25:
                    70:11:2c:a2:c9:27:ee:df:92:5b:96:c8:ed:29:b6:
                    bd:c3:0f:71:c3:96:68:e9:fe:be:7f:f5:79:95:a2:
                    82:06:6c:29:be:c1:23:e0:2c:22:de:6c:49:96:6f:
                    78:ea:88:d9:ea:96:9e:70:cb:11:70:b3:a6:d4:24:
                    b7:bb:f2:72:2f:c4:e9:48:45:d3:42:21:86:26:77:
                    ec:0b:ac:8c:af:16:6b:c3:9a:cd:8e:79:ea:a5:12:
                    0d:e9:25:f2:f2:8c:6a:c4:5d:5d:d7:c8:cc:e9:d7:
                    92:f9:6c:4d:d9:8f:7d:04:78:7a:09:d1:9a:26:df:
                    49:b4:7b:c0:6c:8d:aa:f7:53:24:61:cd:97:e1:4c:
                    aa:80:8a:5b:23:b4:72:e2:08:71:37:4c:6c:8e:72:
                    e7:25:e5:7f:5d:56:d8:43:b7:5a:4a:22:1a:4c:83:
                    5f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:90:C0:B4:FF:38:14:0C:63:A4:F7:04:11:5F:CD:53:DC:CB:16:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/8a36e7fa-9c0c-39d9-8d73-1eec7757d97c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl

            X509v3 Authority Key Identifier:
                keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.170.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:1d:c3:cc:bb:2c:d6:bc:21:d6:ba:41:d7:5f:ec:1a:b1:fa:
         46:46:5f:8d:ed:67:6b:44:68:84:13:9e:c9:8c:f0:28:80:43:
         69:71:79:3f:7b:8d:06:de:a8:f2:9b:6f:08:c4:19:8a:4b:bf:
         c4:c8:da:49:98:63:ce:41:eb:06:85:85:1d:eb:c9:07:58:7e:
         40:31:9e:7b:b2:df:65:e5:56:67:58:2a:e0:15:b4:f4:d8:4c:
         95:90:f8:91:cb:28:ff:e5:e6:24:c0:1b:f9:44:7e:9e:6a:5c:
         5e:a0:23:31:7c:43:e3:c2:92:aa:65:c1:56:1d:ef:eb:29:0b:
         cf:46:37:0e:3d:02:79:71:35:d1:25:c7:a8:0f:d0:78:70:ba:
         2b:03:1c:0f:29:af:5e:dc:0c:1f:14:a3:99:b0:a7:77:3a:8f:
         e0:cf:c0:66:42:f7:1f:f8:c7:9b:45:3c:ed:da:2d:a1:72:7b:
         38:65:9b:a4:3f:17:0d:0f:08:21:fe:c3:40:42:ff:23:f5:58:
         cf:ad:f5:67:89:be:bf:31:19:e6:71:c1:3b:ab:f9:3e:fe:37:
         eb:a6:f7:ed:c8:01:8d:4d:f3:c1:ee:9d:39:52:b7:40:34:37:
         84:3f:66:53:f0:ed:23:10:c6:1c:a3:d1:19:46:09:2b:3b:0a:
         fe:1e:0d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:46:23 2026 by rpki-client