Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/397ccd4b-21a6-3965-83b4-1fd20ac4f6bb.roa
File:                     397ccd4b-21a6-3965-83b4-1fd20ac4f6bb.roa (raw, json)
Hash identifier:          NKrnU9sSABeZ1CxccCc8yrTlVXvZRwzfyjceJaBd+Ik=
Subject key identifier:   77:CA:68:FD:BA:11:C0:FD:94:6B:68:CE:68:0B:37:9C:50:24:E4:10
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584F4975F08FC8C6DDC60E540800
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/397ccd4b-21a6-3965-83b4-1fd20ac4f6bb.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     11233
IP address blocks:        69.1.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:f0:8f:c8:c6:dd:c6:0e:54:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=72429950-4a5f-46df-b9d3-652d14b72957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:49:ab:05:a6:ab:6d:55:41:0f:f6:a6:68:3c:
                    a0:98:f7:d7:2c:b6:45:ce:4b:ef:d1:78:fe:ab:0f:
                    65:ed:24:ba:84:3a:c1:f1:07:9a:00:27:1a:27:31:
                    4d:89:22:d0:bf:d1:97:61:b7:d5:d0:07:f0:5d:52:
                    a8:5e:8a:96:05:c1:95:b3:b3:1a:25:39:4f:24:3c:
                    09:3f:d1:0b:ee:7f:45:95:7a:8a:8b:60:a9:a4:4b:
                    f9:cb:f2:63:21:9a:f1:67:d4:de:d0:be:4b:2c:87:
                    0f:65:86:1e:1d:38:e9:36:58:ba:b2:b6:32:bd:0f:
                    07:4f:2c:a6:fd:8c:a3:d2:7a:bd:ab:3d:a1:7c:54:
                    84:04:92:84:91:02:f1:6f:81:85:0c:09:5e:a0:7b:
                    7d:d0:0a:f4:60:ad:d5:77:77:c8:71:d4:5c:29:19:
                    9a:20:36:48:ff:83:af:b2:ec:6c:00:bc:0e:cf:63:
                    e6:b6:9a:fa:c6:5d:24:a1:34:09:7b:f1:69:fb:fc:
                    4a:3f:ba:f7:8e:bd:41:b2:b3:0f:fd:3e:4c:36:6d:
                    1b:31:31:74:98:c6:fa:37:ee:71:02:b3:3f:dc:8f:
                    6b:06:46:66:ad:9a:30:de:8b:7c:7b:bc:5d:ee:28:
                    43:8d:1d:5f:c6:88:56:19:19:19:a0:ec:38:2f:8c:
                    c9:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:CA:68:FD:BA:11:C0:FD:94:6B:68:CE:68:0B:37:9C:50:24:E4:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/397ccd4b-21a6-3965-83b4-1fd20ac4f6bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.1.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:1d:43:97:32:d9:c4:5d:c6:3a:29:de:a6:9b:26:08:9a:58:
         a2:95:8e:c6:3e:29:92:15:83:62:d6:13:e0:b8:ba:f5:1d:43:
         6c:db:9f:31:a1:93:00:bb:23:3c:e7:5c:59:be:ff:ed:4e:18:
         f6:7a:e6:82:9c:9e:dc:30:24:2f:63:c9:2c:db:c2:1f:8e:f4:
         19:5b:e3:8a:c2:d9:80:3f:a6:6a:16:d5:4f:4d:76:ca:ee:bb:
         c8:48:67:91:d6:33:fd:d5:d5:af:b1:df:72:c5:c5:56:66:35:
         b0:4f:30:3d:11:83:7a:3c:03:57:b5:1b:cc:26:1c:d9:b7:24:
         e4:4c:25:cb:3f:06:77:a2:7b:35:ae:0c:5e:5b:59:4e:97:1d:
         bf:c2:c2:f5:35:96:dc:ac:5e:2b:40:51:ff:21:b5:64:95:4e:
         e7:0e:58:cb:3a:b2:b2:c2:80:bc:18:0f:5a:b5:0e:c5:2a:ba:
         2c:99:1e:35:2d:44:e1:99:ca:15:14:e1:2b:78:5a:f7:ff:f4:
         3a:db:e5:56:84:37:84:7c:45:57:f2:cb:e3:17:ae:47:dd:48:
         b3:82:eb:10:2f:6d:48:74:4e:d5:90:63:b7:a0:0b:0a:8a:af:
         55:79:df:df:8b:67:38:04:31:55:35:b2:f3:f7:17:3c:d0:92:
         68:20:46:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 11:16:27 2026 by rpki-client