Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/a8c11518-bdce-3d01-a936-a4f89138b126.roa
File:                     a8c11518-bdce-3d01-a936-a4f89138b126.roa (raw, json)
Hash identifier:          rX2lVEMmfTPSGHARZl7JzedkSJYdLcMdYmWJmTjAu7g=
Subject key identifier:   88:C4:3F:A0:DE:0E:BA:D3:F5:2A:40:66:5F:8B:65:A8:FD:24:A7:1F
Certificate issuer:       /CN=5c9a7da0-3974-48c2-a2c5-fca1ec32848a
Certificate serial:       010D0C9F4328584F4974433AFBE664B588EA9B00
Authority key identifier: CB:78:E8:D0:CE:C6:C2:B5:5E:A4:23:E7:09:CE:01:8B:39:F2:5F:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/a8c11518-bdce-3d01-a936-a4f89138b126.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6423
IP address blocks:        69.30.0.0/18 maxlen: 24
                          69.30.80.0/22 maxlen: 24
                          69.30.88.0/24 maxlen: 24
                          69.30.90.0/24 maxlen: 24
                          69.30.94.0/23 maxlen: 24
                          69.30.96.0/19 maxlen: 24
                          209.162.220.0/24 maxlen: 24
                          2001:19d0:100::/40 maxlen: 40
                          2001:19d0:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:43:3a:fb:e6:64:b5:88:ea:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c9a7da0-3974-48c2-a2c5-fca1ec32848a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=e655f46b-58ab-452c-a208-f41a8c0ca329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b0:68:fd:0f:da:98:fe:17:74:97:26:62:4a:
                    80:2b:a2:35:92:d3:db:5b:9e:89:f3:8d:aa:e3:bf:
                    f0:11:35:7f:10:95:68:b4:d6:52:9f:53:e4:48:2f:
                    3c:a7:cf:2e:ee:1a:c5:d0:cf:52:07:fc:96:6f:08:
                    9f:f7:d7:fe:0b:29:54:5f:fa:80:b1:22:89:8e:cc:
                    7e:c4:25:bb:a0:a8:fd:66:94:2f:b8:4e:d2:34:dc:
                    3b:1e:25:82:00:48:78:5b:ea:db:e3:ff:32:cd:0e:
                    df:fd:f2:68:ca:76:51:75:b5:13:44:de:15:eb:56:
                    10:1b:b1:66:76:88:d4:91:f6:07:c3:cf:9a:10:d6:
                    22:4d:97:41:e0:0c:f3:ba:92:bd:af:50:ea:0c:7f:
                    ae:72:4a:a6:eb:b4:cd:0c:ac:94:60:6d:4f:0e:26:
                    3f:cb:6a:67:0a:6c:c2:93:1a:6c:4a:09:26:fe:2a:
                    e4:fd:5d:ae:92:29:de:27:5f:cb:e2:d0:34:e1:2a:
                    e6:8d:a2:f9:e6:b5:d4:4f:ed:d5:c8:66:72:2a:b7:
                    59:10:70:c9:39:b3:45:05:55:0c:86:04:c3:91:21:
                    a1:9b:63:e8:9f:46:40:a0:84:75:0d:92:99:75:84:
                    30:a2:2b:76:1a:42:78:e6:2d:4d:65:67:0e:35:40:
                    9e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C4:3F:A0:DE:0E:BA:D3:F5:2A:40:66:5F:8B:65:A8:FD:24:A7:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/a8c11518-bdce-3d01-a936-a4f89138b126.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.crl

            X509v3 Authority Key Identifier:
                keyid:CB:78:E8:D0:CE:C6:C2:B5:5E:A4:23:E7:09:CE:01:8B:39:F2:5F:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.30.0.0/18
                  69.30.80.0/22
                  69.30.88.0/24
                  69.30.90.0/24
                  69.30.94.0-69.30.127.255
                  209.162.220.0/24
                IPv6:
                  2001:19d0:100::-2001:19d0:2ff:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:76:ec:9a:25:96:26:e5:0e:9d:64:2e:db:77:0f:4a:cf:ec:
         20:e0:41:eb:8c:32:8d:cb:cf:fa:5f:d3:86:c4:28:2f:8d:65:
         74:86:28:46:10:bf:14:0d:9d:15:1e:81:76:b5:55:54:30:df:
         dd:c2:ae:4b:e3:14:51:5a:8e:21:d1:57:e3:a9:88:38:29:bb:
         c8:f0:9b:30:5c:ec:25:2a:af:70:7b:93:8f:ea:b2:54:7f:11:
         d4:d5:fc:91:c8:43:f0:39:57:3e:af:0e:92:84:19:2f:5c:3c:
         4b:1b:af:3b:a2:8f:ff:70:e9:c2:89:4a:04:ba:0c:09:75:2d:
         c3:94:26:1e:9f:b4:ce:e2:2d:75:6d:e3:76:2b:42:38:1f:95:
         dc:35:64:01:09:5c:46:bf:2a:d9:41:d1:14:88:c8:97:63:7e:
         9e:dc:6d:9a:77:f0:09:53:2a:26:c8:96:a2:06:1c:3f:08:eb:
         a1:8d:08:de:75:f2:77:95:6e:82:88:b9:45:96:6c:28:d3:b1:
         36:2a:c8:91:6c:ec:c4:09:54:2f:a8:52:07:0f:4d:49:10:cd:
         c6:10:c1:56:67:3d:61:b2:d4:fc:07:a9:c9:0b:ba:41:42:c6:
         12:1e:94:7b:64:5a:46:c4:06:fa:9b:ea:6d:56:87:13:bd:3a:
         1c:24:52:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 05:43:41 2026 by rpki-client