Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/1f7d0ad7-8527-3c40-b2ee-85cbdcfd3285.roa
File:                     1f7d0ad7-8527-3c40-b2ee-85cbdcfd3285.roa (raw, json)
Hash identifier:          mJtkhh3XcC3t8CdEBGh2bR8zjPuyqVlLuzJHwTRt/zI=
Subject key identifier:   02:24:67:3D:E8:BB:15:47:FC:E9:53:16:41:DE:BD:6C:64:62:89:9C
Certificate issuer:       /CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
Certificate serial:       010D0C9F4328584F1E2CF9336CF3A6D5A60B8100
Authority key identifier: A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/1f7d0ad7-8527-3c40-b2ee-85cbdcfd3285.roa
Signing time:             Wed 09 Sep 2026 13:00:11 +0000
ROA not before:           Wed 09 Sep 2026 13:00:11 +0000
ROA not after:            Tue 08 Dec 2026 14:00:11 +0000
asID:                     212374
IP address blocks:        69.168.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1e:2c:f9:33:6c:f3:a6:d5:a6:0b:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
        Validity
            Not Before: Sep  9 13:00:11 2026 GMT
            Not After : Dec  8 14:00:11 2026 GMT
        Subject: CN=e0d267cc-ec14-4527-b0b5-2c8c2bedc520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:88:ce:68:5a:79:1b:94:95:57:00:b2:36:23:
                    89:27:35:b5:6a:cb:eb:ab:69:e9:32:d3:43:e0:1b:
                    5f:eb:49:31:24:3e:e9:9a:a3:3a:bf:8d:52:db:b8:
                    e1:4a:3c:4e:a4:d7:65:70:c9:11:04:e5:b8:d9:ab:
                    9c:f5:18:f5:15:ea:28:a0:8a:4c:f3:41:bf:b6:51:
                    fc:33:f4:76:33:48:ec:2a:86:1f:d1:08:b7:90:ec:
                    0f:fc:32:5c:c1:a4:41:dc:b1:9c:0a:79:9d:0d:14:
                    9e:ac:9c:6d:6e:6d:23:a1:c7:ae:6b:cf:c7:2e:4c:
                    25:08:63:0a:f1:e8:68:13:8f:26:80:60:2a:1b:77:
                    fd:a1:2f:54:88:97:f0:a2:de:6e:d8:4d:72:4b:16:
                    4d:85:32:07:6e:9e:c4:78:44:fb:02:10:bd:6d:d7:
                    73:32:41:81:e9:a2:5a:e3:54:64:f9:a2:06:26:ca:
                    68:df:74:88:2a:03:6c:48:4e:8a:4f:50:51:a2:b0:
                    ae:65:1c:ac:c4:79:36:12:d3:35:21:71:97:dd:d2:
                    f0:a0:b6:8d:5d:e0:f5:cb:54:9b:42:da:51:a9:ff:
                    12:16:24:30:71:d1:94:39:80:41:e2:f1:a3:e1:3e:
                    2f:29:2f:ea:fc:3d:5b:73:57:98:e7:38:2e:45:7c:
                    a5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:24:67:3D:E8:BB:15:47:FC:E9:53:16:41:DE:BD:6C:64:62:89:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/1f7d0ad7-8527-3c40-b2ee-85cbdcfd3285.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl

            X509v3 Authority Key Identifier:
                keyid:A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.168.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:dd:4d:7e:a8:9b:7f:f5:23:5f:3d:e0:91:be:9c:23:51:f3:
         fc:4a:f4:b8:fe:74:5b:ab:ab:90:6a:69:7e:10:31:bd:f1:0c:
         d9:08:9a:0f:6c:54:cc:d8:36:ad:35:d5:17:52:ee:c1:7f:4f:
         75:12:08:23:36:7e:4e:a3:17:9b:3c:29:11:60:ae:88:06:65:
         88:e1:bd:50:ac:83:af:d6:36:ea:9c:13:9a:89:6c:a0:19:a6:
         db:0d:2f:42:12:4b:59:42:2b:a1:75:fe:fe:ae:62:f6:3a:b4:
         5d:db:8c:0a:79:4f:87:64:3f:79:71:2e:7b:5d:45:0c:50:a5:
         2f:99:03:14:a1:37:4c:d6:81:98:01:57:23:44:72:20:59:cf:
         f3:60:c6:69:bc:86:92:89:a6:6f:85:c3:0c:64:fa:94:95:aa:
         8b:26:74:7e:7f:7f:e2:57:9e:c8:2d:ad:78:dc:88:ae:27:ff:
         7c:df:de:6a:c4:70:23:e0:14:17:cd:58:e7:42:22:87:17:40:
         0c:3c:35:20:41:fd:32:3f:71:1e:17:06:31:24:a0:8e:6d:b0:
         7a:1d:6b:96:ad:3f:45:d6:98:a9:22:3c:f8:11:00:68:06:9c:
         45:ec:78:9e:8b:63:1d:66:68:05:1f:57:6d:b1:40:47:7f:10:
         aa:dd:a9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:34:59 2026 by rpki-client