Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/e1b9eca2-690e-331c-a2b4-f298fc66f195.roa
File:                     e1b9eca2-690e-331c-a2b4-f298fc66f195.roa (raw, json)
Hash identifier:          d5Dn5CB0QqyNlrzLIddyPckVWO1KHn8EZTJtJ22xrJ0=
Subject key identifier:   AB:DE:CF:E4:AD:02:71:3C:C9:34:62:56:9C:3A:DD:DD:BD:E5:8B:9F
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F55674E4BD8C7F7E23CD51A00
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/e1b9eca2-690e-331c-a2b4-f298fc66f195.roa
Signing time:             Tue 29 Sep 2026 07:47:18 +0000
ROA not before:           Tue 29 Sep 2026 07:47:18 +0000
ROA not after:            Mon 28 Dec 2026 08:47:18 +0000
asID:                     62904
IP address blocks:        173.232.68.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:55:67:4e:4b:d8:c7:f7:e2:3c:d5:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 29 07:47:18 2026 GMT
            Not After : Dec 28 08:47:18 2026 GMT
        Subject: CN=94d37505-b701-43b6-a59c-fa865a3a6802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:eb:ce:8d:c1:9f:41:ab:a3:5c:94:86:b7:88:
                    f4:9e:53:ea:2b:a0:38:31:d4:0e:35:c8:84:33:01:
                    bc:49:d6:b8:ca:f2:78:03:1b:b5:b6:e0:41:fb:eb:
                    f3:ab:2f:1d:20:f8:2b:ac:14:8d:5b:0b:33:0c:00:
                    32:e5:79:34:d2:8b:0c:73:b1:fc:75:8e:f4:d4:b0:
                    f2:fb:e9:a8:33:22:db:f5:6e:1c:c5:a4:3a:bf:0c:
                    5f:7d:70:00:ef:c9:02:67:92:57:48:e6:d6:8d:36:
                    30:b9:3c:36:f1:32:9c:ef:e5:ff:7f:05:52:02:45:
                    97:b9:d7:c0:44:9d:29:60:a2:f6:64:39:54:a3:f3:
                    ef:02:c1:0c:22:9d:46:c9:d2:28:e5:62:79:e3:4c:
                    39:11:04:b5:89:fa:ea:d2:c1:3f:fc:aa:ed:3c:32:
                    7b:fe:30:5f:5c:c0:78:45:8b:88:05:59:d5:1b:47:
                    0b:6e:8f:7b:57:80:b7:1a:bd:8b:59:cd:fb:eb:78:
                    3d:33:59:5e:ed:d5:e3:29:ad:e5:49:38:c0:1c:e7:
                    1f:f4:de:54:08:38:20:0f:4a:ee:02:d5:10:9e:58:
                    1e:6f:85:14:5a:6e:e7:30:70:6f:3b:dd:3b:ef:65:
                    a9:19:95:4a:a4:9a:ea:2d:73:92:f8:53:5d:41:19:
                    e4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:DE:CF:E4:AD:02:71:3C:C9:34:62:56:9C:3A:DD:DD:BD:E5:8B:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/e1b9eca2-690e-331c-a2b4-f298fc66f195.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.232.68.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:1f:cd:4b:26:c7:c9:28:51:ee:6a:91:4a:78:75:57:f3:e1:
         5f:67:7b:2b:12:1a:f4:cd:d2:28:3e:e9:f6:b1:0f:b5:81:7c:
         eb:10:b9:e1:b3:9b:c9:b5:2f:3f:82:48:a1:c6:56:68:a2:41:
         49:c8:69:00:39:45:d9:2f:4b:99:7a:ae:18:cf:0e:e3:a5:19:
         af:f5:69:e1:ef:18:96:7d:f6:cb:4f:69:74:fe:ef:fb:d7:b4:
         47:66:76:a1:2a:15:ce:a4:3e:20:85:b9:58:cd:85:0a:36:e6:
         b8:05:dd:c3:fc:1b:36:e5:b8:11:9b:5e:4a:39:c1:ad:a6:51:
         1b:ee:ed:59:6c:95:cc:36:c6:a5:fe:5e:44:9d:df:3a:5a:38:
         08:6f:fd:48:89:aa:d9:26:99:58:b8:01:90:41:0f:38:11:9a:
         1d:f7:2a:92:51:e1:f7:dd:f8:60:a3:0e:92:82:7a:59:b4:86:
         5a:f9:35:f5:6a:e0:dc:fe:98:32:e3:9a:f2:22:16:68:65:1b:
         bf:91:b6:6f:33:96:27:d6:2a:5a:2c:3f:ef:49:99:9e:7f:21:
         b9:fb:03:ff:e5:30:00:26:b7:57:93:07:fa:79:43:36:f5:02:
         26:b9:0c:02:d5:81:48:9f:b1:3b:d0:37:d1:40:13:3c:0d:15:
         97:8a:2b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:17:53 2026 by rpki-client