Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/f2265f7a-a442-30f3-b6cf-8b9f34365528.roa
File:                     f2265f7a-a442-30f3-b6cf-8b9f34365528.roa (raw, json)
Hash identifier:          9+2jE/4pyylNiZuoMVF82dEpJny1eH7d5OWohELstuU=
Subject key identifier:   A2:4E:6B:A3:C3:B4:76:3F:34:CE:FF:A6:00:4B:34:56:44:42:A9:95
Certificate issuer:       /CN=b2fad91b-4146-4274-9411-fc471c444156
Certificate serial:       010D0C9F4328584F686B7875A18DB06B61F71580
Authority key identifier: ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/f2265f7a-a442-30f3-b6cf-8b9f34365528.roa
Signing time:             Tue 06 Oct 2026 03:16:03 +0000
ROA not before:           Tue 06 Oct 2026 03:16:03 +0000
ROA not after:            Mon 04 Jan 2027 04:16:03 +0000
asID:                     11696
IP address blocks:        69.24.128.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:68:6b:78:75:a1:8d:b0:6b:61:f7:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2fad91b-4146-4274-9411-fc471c444156
        Validity
            Not Before: Oct  6 03:16:03 2026 GMT
            Not After : Jan  4 04:16:03 2027 GMT
        Subject: CN=c24916c0-5eea-4466-994c-9758c4f6acdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b3:ef:a3:2c:54:92:57:1d:5c:ee:1b:91:ab:
                    04:1d:c1:b4:af:91:13:32:a0:79:33:ab:4e:81:ce:
                    fd:64:f4:d8:e6:92:8e:82:4d:9d:54:fb:b7:fd:34:
                    cd:27:33:ae:d5:b8:f8:5f:af:fb:b6:73:50:da:20:
                    b0:14:46:4c:d0:38:17:c4:0a:c3:cd:3f:32:03:de:
                    16:b0:25:bb:64:70:2a:e2:2f:f8:9c:2c:af:7c:e4:
                    e8:3d:03:80:02:58:fe:a0:f5:57:cc:04:ca:de:21:
                    44:d7:46:ed:ce:9e:aa:e4:43:70:72:4c:a2:e8:ab:
                    17:5d:f0:0d:54:e4:8b:03:f2:dd:4e:7a:df:ab:d6:
                    66:a5:9e:d9:74:36:19:f6:e5:ee:6f:61:a6:c3:26:
                    03:99:96:05:90:ad:14:58:f0:04:18:5c:0a:d0:12:
                    7c:27:c6:db:a5:59:6b:34:19:2d:7d:98:97:ed:03:
                    de:eb:af:34:29:d4:ca:10:46:52:7b:53:44:a3:d0:
                    06:66:05:1d:f8:c9:f9:98:94:e8:8f:26:13:fc:25:
                    0d:fa:80:21:f7:af:36:62:a3:a7:dd:e6:bf:18:a9:
                    28:3c:9e:74:cc:3d:c7:90:a5:36:12:9f:2f:ee:10:
                    be:af:62:ca:04:74:bb:94:f8:eb:e2:9b:85:1a:5d:
                    03:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:4E:6B:A3:C3:B4:76:3F:34:CE:FF:A6:00:4B:34:56:44:42:A9:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/f2265f7a-a442-30f3-b6cf-8b9f34365528.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl

            X509v3 Authority Key Identifier:
                keyid:ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.24.128.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:9e:fa:6d:a1:70:51:19:e4:53:ed:33:b7:b9:1f:a2:24:e3:
         6e:b8:b2:47:c9:7d:c7:11:40:f6:4d:f5:47:6b:5d:86:97:56:
         cd:1c:48:81:cd:5f:d7:05:24:53:56:75:34:4e:11:77:3d:a7:
         fe:7a:c0:78:0a:0a:66:04:88:2b:4a:fe:27:da:0f:57:71:8d:
         ac:31:2d:ce:be:12:37:4a:98:7a:9a:ce:7f:b7:6a:0d:1e:e7:
         27:40:2a:1b:54:b4:c6:f2:dc:f0:59:47:d9:dd:96:2b:c8:ad:
         e3:be:23:3c:5a:d9:80:6f:74:b9:06:fe:af:7e:d3:3c:76:af:
         3b:12:c8:f7:be:3b:37:8b:5e:8c:d1:15:bc:28:15:db:f6:7d:
         29:1d:ed:a7:06:bd:7f:08:a9:a8:31:5a:22:97:f7:cb:a5:1c:
         30:f2:a0:d9:f9:04:7f:bd:d1:10:ba:a0:dc:d5:e4:2d:56:3c:
         6c:a1:6b:c3:30:f4:a8:6c:db:91:b4:6c:23:76:a9:00:8a:f0:
         96:db:4d:01:04:84:c0:81:3f:8c:2c:84:7e:11:8d:26:a8:9d:
         3e:16:0e:5c:c6:00:ad:80:8f:86:8f:d1:12:15:a0:de:e0:18:
         3b:86:82:8d:9c:10:4e:00:c7:73:cf:ab:ec:bf:8d:1a:5a:bc:
         8f:fb:f6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:07:35 2026 by rpki-client