Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/fafde282-2afb-3d24-957c-fdc811245d3e.roa
File:                     fafde282-2afb-3d24-957c-fdc811245d3e.roa (raw, json)
Hash identifier:          G5U6qT5FYdvTZ7qVu1IiCTPPPxOef1MvQFCUpVTpzx4=
Subject key identifier:   B4:F0:87:0E:1D:71:AB:8D:86:43:C7:12:3C:36:9F:45:E9:C2:7C:6A
Certificate issuer:       /CN=69686900-f201-4b2c-a1c7-afb725abe47f
Certificate serial:       010D0C9F4328584EEA87498F7402FBF0E3440580
Authority key identifier: 46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/fafde282-2afb-3d24-957c-fdc811245d3e.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     26664
IP address blocks:        207.173.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:49:8f:74:02:fb:f0:e3:44:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69686900-f201-4b2c-a1c7-afb725abe47f
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=673c35bc-78df-470a-846d-dd8675ad7bb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:29:d5:8a:c4:dc:9c:66:73:bb:ff:05:54:d0:
                    66:e1:f3:92:71:77:6e:68:a0:47:dc:04:16:a3:b1:
                    5c:9a:dc:4b:62:22:79:38:c6:ab:fb:91:71:1c:55:
                    f6:db:ad:b3:5c:7c:16:2f:33:79:e8:30:cc:98:71:
                    81:5d:6b:78:5f:b1:c8:e0:4c:a8:3e:aa:e0:e7:cc:
                    38:dc:67:c2:95:ed:8a:2a:97:5c:f5:71:53:fc:08:
                    6a:03:d5:71:c6:65:78:89:5d:12:91:80:d2:42:52:
                    bf:bb:c9:fc:fd:ee:d8:1d:42:b3:b6:03:bb:99:0c:
                    20:2f:f5:f5:ea:7f:c1:74:44:fa:ed:92:a7:5b:cb:
                    e6:c8:7e:32:af:22:af:48:6c:44:3d:ce:7a:8d:43:
                    30:ed:3e:79:6f:31:85:ff:52:17:5f:78:e6:ca:e2:
                    a9:46:2c:ef:30:24:71:4b:2e:62:5f:c1:60:04:a9:
                    0d:42:ef:6a:fe:5a:3b:7e:a4:64:4e:b4:9e:b7:b5:
                    de:84:1e:8d:4c:87:b0:66:bd:34:c8:17:29:4c:30:
                    a4:03:fe:65:c6:99:a6:0e:ee:54:d2:fd:0a:cf:3f:
                    99:2d:7b:b7:fa:51:d3:b5:92:26:65:03:93:7a:59:
                    e8:c8:c8:28:92:40:fe:5b:7f:3f:e3:f8:b7:97:b4:
                    f0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F0:87:0E:1D:71:AB:8D:86:43:C7:12:3C:36:9F:45:E9:C2:7C:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/fafde282-2afb-3d24-957c-fdc811245d3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl

            X509v3 Authority Key Identifier:
                keyid:46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.173.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:dc:1a:bc:99:81:65:35:65:32:ea:b2:1c:31:35:ad:ef:19:
         02:9d:30:80:46:e6:53:1d:c7:4f:a5:eb:5e:92:3b:7d:34:2b:
         ff:05:2c:c1:66:89:4f:8c:c7:3f:e1:2d:a3:61:c1:1e:10:fb:
         be:d6:5b:38:ef:74:44:94:f0:c0:e6:a6:24:7c:67:f7:27:5b:
         45:d7:53:5a:90:8d:81:63:54:f4:e4:32:44:57:e1:27:f0:e7:
         57:1a:85:84:90:19:e4:b7:55:04:60:5a:00:2e:e9:7d:fa:2b:
         ee:06:71:75:55:df:89:9f:16:9f:29:78:15:c6:dd:0a:dc:99:
         29:a8:f5:75:ec:62:0b:5a:37:1d:b7:06:5d:0e:b6:db:08:fa:
         2f:f0:78:e0:ca:32:4c:27:81:53:b8:0b:06:25:a5:09:3a:9c:
         78:2d:bd:c9:eb:05:dc:f4:5b:fd:12:1d:65:a4:e4:5e:5f:4d:
         a8:48:78:65:aa:3c:20:94:2d:a6:22:3c:cc:95:c9:2f:5a:90:
         55:12:f8:00:02:11:c4:62:21:b8:da:c8:65:e3:d2:0b:56:16:
         e8:6b:9c:0a:16:dd:5a:bb:d2:8f:4c:f1:f6:7d:b6:79:9a:bc:
         c5:37:76:c9:5b:ac:66:39:17:41:46:46:be:bc:ad:7b:6d:b9:
         cc:5f:25:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 22:29:13 2026 by rpki-client