Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/f22cf306-9bb2-3f0d-b047-4295a7a4f380.roa
File:                     f22cf306-9bb2-3f0d-b047-4295a7a4f380.roa (raw, json)
Hash identifier:          ZTeMPzTMloxuUW4BLcHnDJ7PCq6PFOiwftTpJCLMylM=
Subject key identifier:   5A:9F:B1:86:5E:F8:4C:17:66:23:A1:FF:7F:BC:C6:C2:8E:08:B6:74
Certificate issuer:       /CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
Certificate serial:       010D0C9F4328584F2ABD1F14B7DE99DD981728C0
Authority key identifier: F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/f22cf306-9bb2-3f0d-b047-4295a7a4f380.roa
Signing time:             Mon 14 Sep 2026 01:00:12 +0000
ROA not before:           Mon 14 Sep 2026 01:00:12 +0000
ROA not after:            Sun 13 Dec 2026 02:00:12 +0000
asID:                     3695
IP address blocks:        70.36.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2a:bd:1f:14:b7:de:99:dd:98:17:28:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
        Validity
            Not Before: Sep 14 01:00:12 2026 GMT
            Not After : Dec 13 02:00:12 2026 GMT
        Subject: CN=1bb03a2f-32e0-43d4-95ef-395db5d63449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f1:84:a6:db:49:b7:a5:fe:cc:45:66:22:bf:
                    ad:bf:c2:0a:ab:85:3c:51:96:d0:fd:4f:f0:ed:1e:
                    41:14:70:c7:c9:ed:ea:d0:f7:48:1a:1d:34:e7:1c:
                    18:96:2b:52:dd:85:59:fe:54:9b:c1:33:ae:d2:cd:
                    58:c1:4e:7c:26:00:0c:d1:3f:32:24:04:ca:2d:25:
                    9d:bf:df:62:1b:12:a8:32:f1:74:95:a5:01:f4:54:
                    e1:0c:64:39:a9:2e:86:ef:a6:d4:8a:eb:a2:b5:2d:
                    9f:e2:53:2e:a7:b9:25:5f:af:f9:07:6c:d5:a9:80:
                    f7:0a:ef:03:ea:17:d5:93:54:52:2f:4d:f9:95:60:
                    96:a6:9f:dd:7b:8e:06:ac:8a:33:03:2f:c0:75:b1:
                    1b:f3:21:df:a4:27:19:d5:bd:ba:ba:59:be:e9:69:
                    2e:e9:3a:65:18:ce:69:3a:96:6d:4a:39:cf:96:02:
                    b4:2b:10:3a:26:f2:20:9e:df:ce:7a:ef:c8:b2:a4:
                    d2:24:6a:8c:a4:7c:de:07:97:31:f6:35:5d:45:61:
                    9d:87:cf:94:a1:8c:13:4b:c6:b1:99:08:94:45:f7:
                    88:83:96:26:d3:7d:e7:6a:88:73:95:a6:93:a8:c7:
                    59:d4:ef:f7:a0:52:7b:c7:f6:a1:78:a2:80:53:e7:
                    8b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:9F:B1:86:5E:F8:4C:17:66:23:A1:FF:7F:BC:C6:C2:8E:08:B6:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/f22cf306-9bb2-3f0d-b047-4295a7a4f380.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl

            X509v3 Authority Key Identifier:
                keyid:F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.36.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:de:fc:bf:b3:36:0b:df:9e:fd:7c:b8:08:2a:96:7c:df:ff:
         68:fb:37:3a:e0:e3:2a:ec:2c:d8:b7:f2:09:9e:7d:b0:05:84:
         e2:d6:b4:f4:7f:d3:b3:3c:2e:36:e2:c1:50:d9:2a:63:2b:18:
         87:e3:cf:5e:c9:c7:96:bc:3b:31:85:29:68:cc:e3:28:65:87:
         2b:40:7f:ed:5a:5e:12:1b:ab:47:b3:f4:e3:6a:d4:4c:dd:e0:
         61:96:fe:96:ee:5a:08:b9:42:03:1e:24:48:a5:ef:32:da:1d:
         41:44:c9:be:f8:e2:86:08:96:5e:08:3f:60:c2:ad:67:87:a9:
         9c:7d:6b:e9:15:ba:f7:21:8d:f2:2c:22:e5:69:6a:0f:6c:7d:
         52:35:67:95:99:15:f0:20:e4:8e:60:e4:3c:03:a0:5e:ad:f0:
         26:f8:54:8d:d5:1c:05:ff:1d:81:a5:38:4f:0a:88:4c:13:b9:
         32:d8:4d:1f:37:ea:7d:3e:b3:53:44:22:70:55:9d:21:42:a6:
         4c:f7:21:c3:69:06:d7:40:e1:43:4f:4b:bc:67:91:a9:a2:55:
         02:0b:9b:75:9b:ab:09:15:3d:b9:7a:b8:2d:8a:ff:e7:29:ef:
         4b:b6:3c:35:65:0b:a9:04:05:4c:b3:c2:9f:54:4d:fe:d6:95:
         9d:10:2b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:43:07 2026 by rpki-client