Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/d6bd6f8a-b888-3e49-b5d2-ce0210722aa5.roa
File:                     d6bd6f8a-b888-3e49-b5d2-ce0210722aa5.roa (raw, json)
Hash identifier:          MPaw2Jmr7syPDMQT6UM9v+anzLNQzSgK3ZN/EvcvclU=
Subject key identifier:   40:55:7C:CF:BF:AA:8B:C6:45:B2:18:AD:55:39:42:7E:F6:67:E4:9C
Certificate issuer:       /CN=86fea470-b380-45c0-9f6b-033b7d884388
Certificate serial:       010D0C9F4328584EA78765C98C840C048E4C2E80
Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/d6bd6f8a-b888-3e49-b5d2-ce0210722aa5.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     32097
IP address blocks:        69.42.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:65:c9:8c:84:0c:04:8e:4c:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ddb219c5-43d5-40bb-b780-e8a8f166d9e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f0:86:cb:ac:c6:82:1b:69:58:7d:2e:49:18:
                    e2:5d:55:9a:ac:08:d4:1d:07:4f:6c:86:4c:1b:ce:
                    92:7d:ce:5d:de:d9:30:dd:ab:3b:f3:a9:ca:d6:3e:
                    96:21:91:2c:50:2c:43:da:17:4d:d9:a9:63:9d:7f:
                    41:6c:98:33:38:23:7e:2b:e5:11:69:92:e7:26:6d:
                    90:49:2c:c7:4d:b0:2b:57:9d:1c:4e:5a:18:21:84:
                    90:17:a6:e0:80:21:90:49:a3:a5:b3:1e:f3:eb:65:
                    56:a8:59:98:ff:69:a6:c4:a4:99:d7:aa:1b:08:4c:
                    c4:f8:16:36:53:67:2f:28:33:43:43:f9:3f:93:03:
                    01:33:56:72:1c:ff:64:2a:53:8e:bd:de:38:4e:b5:
                    8d:9f:22:9b:49:08:a7:7e:ff:c8:9a:0e:db:0c:33:
                    6f:3d:60:09:08:30:33:80:f2:2c:41:7c:33:e1:cd:
                    df:07:d0:2a:96:7a:75:72:1f:9e:ab:74:f4:eb:4a:
                    ab:78:f6:97:b3:79:ff:d9:35:cd:1c:25:3a:94:39:
                    0f:a9:55:c3:74:50:84:96:8a:af:ff:3c:2e:b5:f2:
                    e8:a8:df:ea:71:b4:18:10:35:39:93:8d:50:3a:92:
                    74:02:71:f9:e8:2f:fd:19:83:b2:d6:af:c2:5b:33:
                    00:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:55:7C:CF:BF:AA:8B:C6:45:B2:18:AD:55:39:42:7E:F6:67:E4:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/d6bd6f8a-b888-3e49-b5d2-ce0210722aa5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl

            X509v3 Authority Key Identifier:
                keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.42.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:76:45:ae:a2:c3:f9:a6:a5:21:f3:a2:c7:75:0f:c3:ca:11:
         06:30:c0:a2:8d:46:06:76:c9:fd:58:e9:f3:0b:10:65:12:88:
         ad:ce:65:a8:15:0a:81:94:8e:64:c5:98:19:e7:62:00:ad:0f:
         1f:2a:b7:3d:cd:23:66:95:e9:eb:e9:a0:b0:8e:25:05:21:7f:
         90:ca:33:5d:6d:e8:11:50:98:a1:8e:8f:21:81:8a:eb:da:38:
         c2:55:ba:26:6b:bb:f3:30:c2:b2:d2:b9:04:2d:53:1f:e4:d2:
         3e:0f:3f:c0:05:06:28:18:5c:b1:4a:ea:a5:d1:cd:05:66:84:
         74:ae:0e:de:2b:b2:4b:99:50:a4:07:5e:b8:2f:4c:3d:f5:4a:
         10:97:d3:17:af:8a:88:d4:dc:7e:d5:57:7a:52:28:ea:ac:de:
         d7:d7:31:87:31:91:50:44:43:64:22:03:0c:4e:31:84:cb:0b:
         b5:63:fc:51:be:69:11:f1:9d:8c:64:61:81:b1:22:e1:29:7a:
         fa:2a:57:d0:e0:f2:65:2a:e8:7a:bf:27:17:a3:91:e0:c3:88:
         a5:53:dd:b6:a4:52:3a:4e:d0:10:91:88:7b:24:18:11:be:c5:
         7f:0f:b3:ae:8f:ca:ca:b2:ed:74:ee:d9:79:af:d7:42:e5:c1:
         f9:ad:32:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:39:02 2026 by rpki-client