Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/daa6b5a6-6fdf-3ea2-b161-6eb5154bf3ce.roa
File:                     daa6b5a6-6fdf-3ea2-b161-6eb5154bf3ce.roa (raw, json)
Hash identifier:          jtTv4C/TiliMKblsD5cwjkvP2HDsjV/9dwI2nK9nLfE=
Subject key identifier:   F8:76:DB:55:7D:CF:79:F6:77:4C:58:D4:FB:3D:66:8B:7F:D3:70:84
Certificate issuer:       /CN=69686900-f201-4b2c-a1c7-afb725abe47f
Certificate serial:       010D0C9F4328584EED51F6DDCA5FC285FE1D3C00
Authority key identifier: 46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/daa6b5a6-6fdf-3ea2-b161-6eb5154bf3ce.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     7385
IP address blocks:        70.97.88.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:51:f6:dd:ca:5f:c2:85:fe:1d:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69686900-f201-4b2c-a1c7-afb725abe47f
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=110c84ef-e83e-4154-a441-84cfbffd7625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ca:2d:7c:d3:97:4c:7c:f9:4d:89:b1:0d:11:
                    dc:94:4a:84:0a:e8:22:c7:aa:f9:da:68:86:13:7a:
                    4d:08:56:b7:3a:43:90:7f:a2:3d:05:af:ed:e6:f4:
                    82:33:4c:39:d9:60:97:85:3d:1c:22:bb:71:eb:f5:
                    0c:9a:55:65:d2:ca:d7:79:79:22:b4:cb:85:74:eb:
                    f8:32:7e:d0:24:e9:28:f1:78:fd:08:cd:bd:3f:da:
                    d4:10:dc:43:10:02:6a:2a:e3:d1:54:fb:99:e8:ea:
                    90:d7:e6:81:e5:50:15:b3:7f:3a:3b:35:33:8f:2e:
                    e2:7e:d5:c4:8b:80:f4:5e:09:0f:f1:34:00:c5:73:
                    fd:06:a0:66:99:b5:04:19:76:9f:c2:2d:bc:b7:66:
                    a2:ca:9d:69:f7:aa:c9:f5:7c:9b:f8:9c:3e:f1:ef:
                    79:03:b8:3e:35:94:9b:dd:dc:df:9a:a4:18:ac:f5:
                    89:fc:f0:a1:f0:e8:b8:c6:08:3a:33:67:a0:73:10:
                    f5:f8:9c:99:6a:ee:24:b1:5d:2a:47:f7:79:9e:f6:
                    90:fb:e4:04:35:fd:6f:62:0f:02:9d:ac:1d:5c:f2:
                    a1:ac:00:77:36:10:15:13:e2:41:c2:b4:90:8e:4c:
                    96:cf:79:19:5f:99:56:b4:8c:e4:6c:53:7b:0f:7a:
                    c4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:76:DB:55:7D:CF:79:F6:77:4C:58:D4:FB:3D:66:8B:7F:D3:70:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/daa6b5a6-6fdf-3ea2-b161-6eb5154bf3ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl

            X509v3 Authority Key Identifier:
                keyid:46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.97.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:77:33:82:8d:fa:e4:90:d3:0c:15:16:2f:be:bb:67:ce:0f:
         a1:de:70:83:14:97:9a:df:ea:09:52:4a:2a:71:8c:8d:29:da:
         7b:3d:77:49:ba:8a:a0:0c:45:f1:a6:9e:4e:d6:7b:7b:7d:cb:
         cc:77:05:17:9a:b2:2f:d8:d6:66:62:fb:1f:a2:9c:90:2a:25:
         72:2e:0e:56:13:3b:35:d8:4e:d6:5a:a4:66:d8:a1:7c:c9:7b:
         eb:9a:6d:e1:e9:d3:53:2a:6e:2c:69:27:34:e4:fe:73:0d:f2:
         02:5a:5b:2f:c9:16:af:e1:16:e7:41:36:91:a4:91:67:11:84:
         3d:b7:78:a8:a3:14:b8:38:a2:04:81:23:d8:77:3a:2c:d1:be:
         58:79:cf:12:be:29:b8:e9:9d:c8:b9:89:a6:be:41:65:73:db:
         79:5b:02:36:59:28:93:05:fd:dc:4d:98:61:98:3c:d5:1a:a9:
         ce:6b:7a:d4:28:6b:e8:f7:20:e9:38:9b:e0:11:c7:21:31:ff:
         d7:b2:55:4a:fd:20:4a:34:a8:d2:38:95:a8:ee:eb:d9:20:e0:
         7c:69:00:44:b3:7c:5e:82:49:8d:28:92:bb:76:6c:ab:cf:cf:
         74:2f:6f:2e:73:16:ba:b0:bd:40:b5:f5:58:64:2e:55:3b:37:
         56:fd:a6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:20:27 2026 by rpki-client