Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/8bb079ff-aaa1-3ccd-bbaa-6c0d52ae96ad.roa
File:                     8bb079ff-aaa1-3ccd-bbaa-6c0d52ae96ad.roa (raw, json)
Hash identifier:          8Iv6c2XgvowLTk73g7CDYc2F/gm0b955CnOQEGCmQMU=
Subject key identifier:   39:ED:98:72:E3:01:80:25:AA:C6:7C:7F:C6:24:87:78:0B:07:5C:58
Certificate issuer:       /CN=911afcc4-db22-4282-acca-e1e676a5ae20
Certificate serial:       010D0C9F4328584F454282AB42CA225F2B58C100
Authority key identifier: 69:1A:B6:E8:3E:67:94:46:39:E2:EF:D1:4C:D5:E4:75:69:36:90:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/8bb079ff-aaa1-3ccd-bbaa-6c0d52ae96ad.roa
Signing time:             Wed 23 Sep 2026 13:00:11 +0000
ROA not before:           Wed 23 Sep 2026 13:00:11 +0000
ROA not after:            Tue 22 Dec 2026 14:00:11 +0000
asID:                     14618
IP address blocks:        69.7.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:45:42:82:ab:42:ca:22:5f:2b:58:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=911afcc4-db22-4282-acca-e1e676a5ae20
        Validity
            Not Before: Sep 23 13:00:11 2026 GMT
            Not After : Dec 22 14:00:11 2026 GMT
        Subject: CN=262212df-f8c3-4d3d-b057-505b0694c6a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fe:1c:5b:6f:70:36:23:12:32:56:e3:66:ba:
                    2b:a5:b9:00:fa:aa:1a:19:97:fb:a9:40:48:4a:9a:
                    6c:f5:a1:76:4e:5c:9d:db:66:da:1b:12:d3:7d:8a:
                    8f:8e:32:de:f7:27:0f:b6:48:12:7c:df:03:40:f1:
                    89:21:dc:98:81:6d:9a:31:f2:40:a7:3e:4d:19:7e:
                    fe:61:34:4b:c2:f9:5c:f4:4f:de:c2:cc:bf:b4:33:
                    2d:59:d9:5e:f2:72:29:f3:c6:d6:4a:d5:b2:cd:a4:
                    a4:9b:c7:83:62:80:1d:f6:cf:37:2e:b6:5f:45:01:
                    f0:38:4e:83:7c:01:a7:bf:f8:ba:ff:74:d1:c5:69:
                    05:fb:f8:a5:83:18:db:22:b3:97:61:a8:f5:d1:04:
                    36:39:88:81:e9:05:3f:f1:b9:f7:7e:f4:aa:e1:e0:
                    61:3c:1e:9e:02:6d:d0:2b:fb:c3:0b:6b:f1:ea:db:
                    e7:5a:9b:d0:b1:42:b7:4e:d5:68:b1:00:2b:17:36:
                    48:4a:1c:1b:52:8f:45:9e:7a:4d:6f:92:be:ad:bf:
                    69:53:d2:40:32:e8:dc:76:49:6b:08:a4:93:3b:8f:
                    44:a1:1d:a3:92:f7:59:9c:75:45:1a:83:89:6b:f3:
                    4b:12:7c:10:94:c9:ab:e4:0c:bc:e0:e6:5f:00:45:
                    00:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:ED:98:72:E3:01:80:25:AA:C6:7C:7F:C6:24:87:78:0B:07:5C:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/8bb079ff-aaa1-3ccd-bbaa-6c0d52ae96ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.crl

            X509v3 Authority Key Identifier:
                keyid:69:1A:B6:E8:3E:67:94:46:39:E2:EF:D1:4C:D5:E4:75:69:36:90:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.7.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:f1:bb:93:b6:7c:25:67:20:6e:b5:e5:88:7d:10:ee:c6:9c:
         21:67:bf:2f:91:6b:b8:01:22:3c:d4:5d:39:59:20:99:32:43:
         16:80:9d:eb:9d:aa:51:e4:f8:47:20:45:85:31:34:8b:cb:c2:
         bb:58:83:2c:a1:b3:a9:dc:50:68:de:c1:ea:04:13:99:88:10:
         f7:e5:d0:59:4b:62:22:df:41:45:f4:95:d2:24:dd:db:ff:3f:
         4e:c9:bc:45:8b:01:ec:6d:d0:f0:20:64:a9:d9:d0:c0:3f:24:
         9a:91:b7:8c:b0:27:7e:45:29:b1:27:c8:cb:a1:6c:86:4a:8a:
         53:23:c3:79:ec:d8:43:25:70:e6:6d:fc:e7:02:3f:64:f0:12:
         87:d2:9e:2d:81:64:2c:af:af:cf:3c:f2:4d:07:20:c0:b8:42:
         71:cf:b6:ff:98:ad:46:a7:8e:6a:9f:42:9d:69:80:0b:c0:51:
         58:e4:13:54:c1:02:af:30:95:b7:66:f1:47:9b:48:7e:f7:ca:
         cd:62:49:05:50:00:e7:45:23:7c:2b:5f:35:51:19:ae:ff:31:
         00:13:3e:42:44:34:6d:e3:e1:92:de:6f:4a:e3:c4:9e:74:4c:
         13:e3:18:5d:04:ff:d7:c0:d5:5d:bd:77:97:6d:24:6e:0b:8d:
         d6:77:67:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:46:42 2026 by rpki-client