Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/f4fcab14-a670-33cc-a213-0c1a42cb5998.roa
File:                     f4fcab14-a670-33cc-a213-0c1a42cb5998.roa (raw, json)
Hash identifier:          aVR5WQP7gSPE2i6wOAgayhZI8jgheyT2sL+p46k8BD0=
Subject key identifier:   41:6F:41:B4:F4:FA:0D:51:65:4A:F3:AE:66:E3:30:C8:B9:C7:EC:C7
Certificate issuer:       /CN=69686900-f201-4b2c-a1c7-afb725abe47f
Certificate serial:       010D0C9F4328584EED51F64FC1ED6736335B5F40
Authority key identifier: 46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/f4fcab14-a670-33cc-a213-0c1a42cb5998.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     7385
IP address blocks:        70.96.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:51:f6:4f:c1:ed:67:36:33:5b:5f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69686900-f201-4b2c-a1c7-afb725abe47f
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=678f0e97-fbb6-44c6-8b89-34ad871ee3f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:42:2a:b4:f6:3d:4f:b2:e4:1f:db:46:68:d3:
                    ec:d2:12:28:b1:f9:fd:d2:f0:17:49:a5:a4:75:62:
                    a0:54:db:f1:08:06:87:1d:dd:30:db:70:da:28:c7:
                    81:75:c0:ad:08:fa:18:7e:7a:7e:d1:ba:b6:f6:f7:
                    d7:32:69:78:76:67:1f:27:cb:76:7a:16:e4:0a:94:
                    7d:f6:be:d7:b0:22:2e:64:95:a3:6f:cb:7f:48:93:
                    17:76:9f:b7:48:4e:5d:b3:a7:fe:1f:22:b2:42:6f:
                    31:49:86:60:3d:fe:0c:c6:d0:30:fd:15:43:e0:e5:
                    6e:7a:92:54:ad:cd:a3:d5:9e:49:86:6d:a9:36:3b:
                    78:dd:d3:f4:97:5b:03:9a:d9:7a:e6:a1:39:75:8d:
                    bb:c6:81:18:67:fd:a5:24:68:b7:4d:a4:66:28:51:
                    65:72:38:4e:d2:59:bd:e6:89:db:97:1c:24:b3:3e:
                    e6:5b:79:ae:bf:1b:a2:a7:16:9e:6e:0a:f7:66:14:
                    a4:3e:be:00:6b:a8:20:ed:1b:b0:8f:a1:d9:94:26:
                    6f:68:46:e1:df:ef:d7:f9:a9:76:9f:e4:32:30:90:
                    0e:e4:ca:67:04:e0:42:df:a0:c9:58:61:17:dd:ae:
                    c1:8b:2d:71:31:ec:d7:67:da:b6:7e:db:a6:e2:1f:
                    66:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:6F:41:B4:F4:FA:0D:51:65:4A:F3:AE:66:E3:30:C8:B9:C7:EC:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/f4fcab14-a670-33cc-a213-0c1a42cb5998.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl

            X509v3 Authority Key Identifier:
                keyid:46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.96.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:b6:0c:96:4c:e3:e7:84:86:2d:d1:49:e0:ba:37:db:35:70:
         13:9f:fa:74:4b:9c:97:9c:bd:25:fe:a2:b9:be:d9:70:a4:eb:
         b6:25:20:2b:7d:c6:5e:88:e8:ee:9f:4a:c1:0c:69:ff:8d:4f:
         dc:25:30:25:42:83:c1:5b:cd:c3:29:16:c5:e3:3a:5f:0b:de:
         14:05:8f:f6:a5:14:31:1e:99:49:5a:47:9a:97:f8:26:84:a7:
         b8:6d:47:1e:45:a1:2b:d2:92:cb:f3:0e:d5:2c:64:d3:84:27:
         f4:47:5a:fb:e3:49:bf:c5:d8:21:a8:7d:51:6e:18:4a:09:2a:
         f5:80:99:96:01:e7:99:a6:49:28:2d:48:c9:97:79:ea:8c:0a:
         f2:57:69:b6:d3:11:dc:a8:b1:93:30:2e:6b:84:db:19:ca:11:
         d3:8c:25:a8:ce:80:3a:6b:99:ed:a5:3e:42:1e:47:5a:6c:93:
         35:e4:4a:19:df:2e:8e:7b:c8:2a:ba:02:b2:b6:27:b0:6b:92:
         9b:b1:a9:7f:b8:17:c2:34:ee:a7:f3:4a:06:ae:c6:45:42:da:
         f2:61:93:c5:a5:9c:67:7a:bb:e4:c3:e2:18:9e:32:d0:44:c9:
         f3:1d:a2:ac:31:81:90:fc:26:94:29:7c:7a:ea:6f:2d:30:a7:
         54:1e:e9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:18:03 2026 by rpki-client