Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9910ff82-1e15-413c-b2ed-3e1266f587a8/6d35d28e-7512-3634-9cfd-123dabcc42f2.roa
File:                     6d35d28e-7512-3634-9cfd-123dabcc42f2.roa (raw, json)
Hash identifier:          9vjCv5dmNTpkcBP0AU77nk0nzdIH6N6F8MWCrii/oLA=
Subject key identifier:   ED:BA:1A:77:6B:91:48:96:30:6C:AC:44:7E:DA:E6:8C:A5:72:2C:E5
Certificate issuer:       /CN=9910ff82-1e15-413c-b2ed-3e1266f587a8
Certificate serial:       010D0C9F4328584F71ED72FAFC3D9662619D9200
Authority key identifier: 31:8B:70:02:BD:69:C0:C4:69:AA:B2:F9:11:DA:47:7E:68:AE:45:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9910ff82-1e15-413c-b2ed-3e1266f587a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9910ff82-1e15-413c-b2ed-3e1266f587a8/6d35d28e-7512-3634-9cfd-123dabcc42f2.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     395668
IP address blocks:        170.76.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9910ff82-1e15-413c-b2ed-3e1266f587a8/9910ff82-1e15-413c-b2ed-3e1266f587a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9910ff82-1e15-413c-b2ed-3e1266f587a8/9910ff82-1e15-413c-b2ed-3e1266f587a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9910ff82-1e15-413c-b2ed-3e1266f587a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:72:fa:fc:3d:96:62:61:9d:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9910ff82-1e15-413c-b2ed-3e1266f587a8
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=df6a4d03-dfd9-4011-b787-42e33c3c0f7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:24:30:27:1b:22:fa:32:c5:c5:03:fb:e8:d2:
                    41:65:1c:f7:ab:2d:9d:b6:12:f5:56:db:13:7c:79:
                    f9:e2:98:3d:cf:16:88:8b:b2:cc:11:c4:4a:26:c1:
                    60:41:4c:f4:36:f6:7f:35:7b:cf:95:93:2e:14:06:
                    0e:1b:33:f6:87:65:89:77:6c:0e:89:de:2f:e2:ff:
                    06:e3:03:d7:db:b8:45:af:eb:f7:6c:56:ca:6a:7b:
                    66:0f:cb:92:63:73:3c:1f:0b:c1:3d:93:9a:80:2b:
                    b3:3e:c0:03:fd:a3:be:71:dd:dd:9e:03:91:d9:01:
                    df:2b:8a:c0:a3:96:07:8d:5d:7d:4c:3c:91:5c:d0:
                    7c:df:11:e9:e9:57:59:f1:1a:0a:f6:96:ba:ed:f9:
                    cd:d6:7c:89:8f:80:f7:08:f9:6b:ee:d3:c3:0a:57:
                    0e:c5:57:53:d7:8d:68:a3:63:90:ed:59:1d:c1:d6:
                    0b:75:6b:e8:3e:6d:0e:f7:06:b2:2d:72:da:94:0e:
                    90:72:1a:6e:d2:13:c8:2d:d9:9c:dc:04:d7:94:56:
                    46:52:bd:5b:fa:78:b2:8d:73:2c:4c:3f:24:0c:ad:
                    f8:f1:d7:b8:d6:d7:94:bd:cb:ee:b3:cb:76:c5:9c:
                    70:15:e4:51:06:9c:d2:1b:22:7a:65:6a:41:a6:c7:
                    40:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:BA:1A:77:6B:91:48:96:30:6C:AC:44:7E:DA:E6:8C:A5:72:2C:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9910ff82-1e15-413c-b2ed-3e1266f587a8/6d35d28e-7512-3634-9cfd-123dabcc42f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9910ff82-1e15-413c-b2ed-3e1266f587a8/9910ff82-1e15-413c-b2ed-3e1266f587a8.crl

            X509v3 Authority Key Identifier:
                keyid:31:8B:70:02:BD:69:C0:C4:69:AA:B2:F9:11:DA:47:7E:68:AE:45:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9910ff82-1e15-413c-b2ed-3e1266f587a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.76.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:5e:42:20:1f:62:c9:2d:d0:cd:22:0c:87:92:20:c9:54:0a:
         8c:6e:ed:e8:07:f5:6a:8e:01:98:19:72:0d:9c:1c:87:0f:98:
         ff:cb:17:c1:b4:57:17:a1:60:6d:8a:14:ea:ce:39:9a:d4:b8:
         1c:a0:2e:f2:58:4f:87:68:13:c6:a7:16:f2:60:c8:da:b2:9a:
         b5:97:72:2b:34:18:56:95:2d:dc:b1:3b:2d:19:68:52:c2:d3:
         2d:4c:cc:70:52:2d:df:89:ef:95:0d:87:51:0c:bb:c6:a0:4b:
         b2:22:a6:62:4f:2f:f1:1e:a8:c4:4d:d3:52:c0:4f:5d:b9:e9:
         08:db:cc:d7:16:b9:3e:f0:ab:0a:b5:f7:37:35:5f:cb:55:40:
         35:af:f1:1a:7b:ef:27:01:8e:57:78:9e:59:7b:00:f5:ed:69:
         be:58:7a:11:64:e3:43:3e:5b:12:f8:e6:74:98:10:7e:8e:24:
         a2:1c:fd:8b:07:3c:fd:a3:c2:c0:26:6a:0b:0a:14:b5:ab:c4:
         fa:04:33:9d:35:b1:80:33:e6:d5:dc:40:e0:97:d0:3f:f4:88:
         53:87:c5:8a:42:6c:63:c7:c3:7f:09:45:e9:ea:41:04:07:43:
         ea:77:88:31:1f:29:20:c7:b5:05:8f:0b:cf:d9:42:5f:95:69:
         f8:52:70:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:00:53 2026 by rpki-client