Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/aa40f1fb-8b8b-36aa-85c4-5417effdabcb.roa
File:                     aa40f1fb-8b8b-36aa-85c4-5417effdabcb.roa (raw, json)
Hash identifier:          pZnAEZZuo5OhAVysZI4aKMPcNPBEtJyvBfJABtVfyuY=
Subject key identifier:   69:5D:35:6B:73:FE:D5:4F:D1:D2:93:FB:CB:B4:3F:C5:91:E2:59:A8
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F4328584F4975F5A21CB0F2F402BE9080
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/aa40f1fb-8b8b-36aa-85c4-5417effdabcb.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     11260
IP address blocks:        71.7.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:f5:a2:1c:b0:f2:f4:02:be:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ec4e4019-bd31-412e-94bc-e5511b2f0527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:da:a1:9c:0c:a1:1f:61:49:37:ec:af:b9:58:
                    17:71:dc:96:0b:76:e6:4d:74:e0:39:71:5b:22:07:
                    48:c4:82:a8:5f:25:37:b2:a3:08:e8:d6:65:53:74:
                    b5:38:de:c8:eb:2c:f8:76:b4:01:ca:4d:14:65:98:
                    ef:86:0f:9a:35:65:c0:42:0d:22:d8:43:66:57:2c:
                    64:29:90:7e:53:d5:56:ce:e4:29:25:49:b0:b7:49:
                    19:96:ef:61:ea:bc:6b:8b:54:f4:a7:b7:f2:7e:6b:
                    c1:70:c5:09:85:e9:28:56:0c:f0:ae:93:30:43:2c:
                    c0:d1:86:b0:fb:d4:2c:57:63:7d:4d:2a:0c:11:7b:
                    11:f2:9d:f4:a8:c8:94:dd:4a:79:3b:6b:57:93:9f:
                    db:f7:d2:82:b8:1b:c9:3d:be:da:2e:a9:5b:ed:fb:
                    5e:ec:b6:69:c1:c4:5a:94:f8:19:86:59:96:be:c7:
                    79:f1:f0:57:d9:30:42:0b:16:49:fc:08:3b:9a:65:
                    ae:0d:43:1f:c8:fa:c2:fb:9c:14:30:d5:13:9c:3b:
                    cd:89:ce:06:28:9d:92:23:f2:fd:67:e7:ec:20:a6:
                    0f:05:31:82:18:74:f1:e5:75:77:2b:24:34:80:db:
                    a8:6f:2e:64:d5:1d:12:3a:71:bd:85:55:1e:18:d5:
                    c6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:5D:35:6B:73:FE:D5:4F:D1:D2:93:FB:CB:B4:3F:C5:91:E2:59:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/aa40f1fb-8b8b-36aa-85c4-5417effdabcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.7.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:04:7f:84:c2:25:64:2a:b9:01:2b:50:fa:e9:21:d8:03:7d:
         d3:b3:25:a2:84:4d:88:67:dd:74:62:4e:3b:6c:34:da:53:a4:
         7d:6d:88:93:85:5b:32:69:5c:cd:ca:64:b3:a6:f7:79:5d:0e:
         78:04:8b:b3:3f:76:7a:5b:75:a4:23:69:8c:87:64:6e:42:62:
         8d:10:b9:dc:78:02:66:7e:a6:08:47:58:8b:d8:b1:ec:3e:5e:
         ed:12:65:e6:bc:d5:69:e9:79:b9:54:3b:35:d7:0b:af:1f:1f:
         00:d3:3e:30:16:5a:65:62:d7:5d:0b:61:56:fe:38:b4:9d:23:
         02:47:f7:6c:d2:f4:57:07:80:22:54:75:5d:dc:c2:6c:7b:19:
         c5:58:cf:1d:7d:ab:0d:7e:0c:7e:90:52:41:5b:e5:a3:09:ec:
         e0:59:cc:99:f6:65:70:e9:71:cd:3e:56:5d:e1:32:89:69:5b:
         d8:e8:0e:12:d4:cc:78:e4:fe:5a:d8:c4:97:54:b1:ef:3e:4a:
         6e:21:f5:46:61:4e:1b:60:a0:36:f8:a0:70:b1:a7:30:32:3e:
         18:80:4e:6f:f7:ca:c7:0e:b7:e0:3b:92:03:bf:43:95:a1:7a:
         87:c3:b4:de:b9:eb:64:f7:59:32:29:69:ed:b3:8c:57:85:b4:
         8b:9c:87:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:16:02 2026 by rpki-client