Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/1ceb4c33-c21d-3a29-a89f-5cbeb80fe1bf.roa
File:                     1ceb4c33-c21d-3a29-a89f-5cbeb80fe1bf.roa (raw, json)
Hash identifier:          phqL8H3I1gzE5pZ6+4g+3mfvYW8CuD02wOfj+84K7Vw=
Subject key identifier:   48:97:AE:95:2C:17:59:B0:BB:E5:E7:03:2A:40:68:65:58:C4:EE:64
Certificate issuer:       /CN=86fea470-b380-45c0-9f6b-033b7d884388
Certificate serial:       010D0C9F4328584F48DBAD6057554A75B36D2500
Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/1ceb4c33-c21d-3a29-a89f-5cbeb80fe1bf.roa
Signing time:             Thu 24 Sep 2026 19:56:16 +0000
ROA not before:           Thu 24 Sep 2026 19:56:16 +0000
ROA not after:            Wed 23 Dec 2026 20:56:16 +0000
asID:                     218588
IP address blocks:        69.42.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:db:ad:60:57:55:4a:75:b3:6d:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388
        Validity
            Not Before: Sep 24 19:56:16 2026 GMT
            Not After : Dec 23 20:56:16 2026 GMT
        Subject: CN=99d73cf0-ae14-4e64-8a5a-22773c23f9c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:87:8c:cb:d0:0a:8f:26:59:09:49:3c:04:27:
                    c3:ac:d2:d3:45:c7:64:81:93:17:e5:ed:31:ca:b4:
                    70:6f:46:92:25:71:f3:53:be:ce:eb:54:d6:aa:c7:
                    2b:af:2d:ef:d6:be:8d:2d:64:bc:48:e8:6d:3d:c0:
                    9e:11:c5:10:8f:e0:e9:16:eb:a8:2d:ed:13:98:a3:
                    0b:22:c0:0c:c7:6b:33:10:ba:0b:3b:30:d3:94:9f:
                    15:b7:c4:df:7d:aa:d7:20:41:43:f6:a3:d4:92:ea:
                    5a:e8:60:5f:41:00:61:1b:5d:b3:5e:f1:65:e4:d7:
                    9c:c5:9e:ac:6a:e9:26:7c:93:47:12:8d:3e:32:6b:
                    db:ab:9e:71:cb:02:3e:68:18:b0:fd:2a:1b:85:60:
                    c4:35:d7:4f:47:30:49:a1:07:36:3b:53:18:25:22:
                    1b:f7:ae:8e:5d:9a:34:dd:9b:2f:e7:a6:ea:ff:66:
                    17:73:90:28:3b:13:99:2f:d5:24:2c:89:04:29:5b:
                    a5:50:e2:a8:f0:d2:37:3a:ab:3d:2e:52:0a:fe:6a:
                    3d:58:09:83:a1:94:ec:2c:34:53:7b:92:d2:99:98:
                    f8:12:aa:74:89:70:04:10:53:c7:e7:cd:59:99:cf:
                    5b:00:0a:24:10:30:0b:9d:55:2a:6b:4f:f2:69:09:
                    58:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:97:AE:95:2C:17:59:B0:BB:E5:E7:03:2A:40:68:65:58:C4:EE:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/1ceb4c33-c21d-3a29-a89f-5cbeb80fe1bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl

            X509v3 Authority Key Identifier:
                keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.42.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:57:75:0e:c8:a7:4a:04:75:6d:2e:27:a2:db:e6:70:64:72:
         21:5c:e3:97:87:29:69:f2:13:2f:32:ef:93:0e:d8:6e:52:37:
         77:3b:78:3e:b2:cd:3a:4f:ed:a9:c3:4c:a6:b1:d8:73:70:76:
         ae:32:fe:b8:e1:c9:f8:f7:b1:d8:ae:eb:f7:83:f0:a0:e6:23:
         65:0f:cb:db:a1:3e:e4:55:af:3e:5f:4c:e1:15:65:d5:a6:66:
         6d:d7:02:29:55:8e:4d:1b:ad:ee:43:46:80:d2:78:73:be:f2:
         85:95:f4:5b:77:f1:11:7a:08:1a:67:c9:11:fc:35:c4:94:ba:
         7e:9d:62:e7:e6:d9:42:21:9c:a8:5a:e8:63:44:15:60:b0:b6:
         c3:28:28:bb:fd:b2:75:76:ec:4d:14:0a:40:b8:31:6f:ea:b3:
         c0:82:12:46:9c:5a:8b:f8:7d:dd:01:17:60:dc:af:b0:06:13:
         6f:4b:f3:56:8d:c8:c5:5e:8c:51:bd:f6:ac:41:1c:f4:e0:27:
         63:66:de:b8:6d:da:b7:79:7d:5c:13:03:44:ea:20:02:91:7a:
         75:b5:2b:7f:77:eb:cb:f0:de:07:2e:b3:d0:3b:fe:fc:89:ff:
         b9:3d:01:34:41:09:39:bf:50:ca:e1:7d:66:c8:40:1d:ae:23:
         c6:19:bd:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 11:20:58 2026 by rpki-client