Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/023c0147-31da-314e-b950-3ddf9ade51ea.roa
File:                     023c0147-31da-314e-b950-3ddf9ade51ea.roa (raw, json)
Hash identifier:          sBDHoxUNXoAD2x6pextjYw+Db2+UAAaIWNXYHx+dmk0=
Subject key identifier:   8D:82:27:C1:95:7E:80:CF:3E:41:6D:2A:E3:EE:4A:12:D1:62:BA:7C
Certificate issuer:       /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial:       010D0C9F4328584F6F22C4BF251323859DC02C80
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/023c0147-31da-314e-b950-3ddf9ade51ea.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     398493
IP address blocks:        69.176.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:22:c4:bf:25:13:23:85:9d:c0:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=0a005bb4-1521-444c-a8cd-7fe6406e318f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b1:d6:75:de:12:85:6d:5d:2c:de:c6:7b:45:
                    fc:76:2b:ac:ff:9f:9b:43:ed:83:fd:34:83:b3:f9:
                    e3:f0:96:a3:aa:e1:e9:bc:eb:35:ad:55:cb:51:2d:
                    cd:30:bf:79:a6:17:f9:63:1d:e5:e0:1f:e9:f6:d3:
                    99:d2:e7:d3:1d:fc:54:96:57:80:d6:27:9a:ce:98:
                    48:1c:14:bf:65:f9:01:80:7e:37:b5:a4:67:ab:d0:
                    ad:5a:71:fd:3e:a9:c3:83:b3:92:03:26:d4:e7:80:
                    72:9c:65:ad:d0:80:52:bc:21:35:3d:70:6f:fd:92:
                    e8:50:51:bf:cb:50:39:89:61:f5:ce:a5:24:ac:48:
                    ce:6d:ec:ba:d0:ca:a1:2c:80:5f:8e:a4:a2:2e:6f:
                    e7:d6:f7:98:5c:b5:4f:ed:ed:ad:f9:ed:70:9d:11:
                    2e:c4:f5:1b:7f:5c:4d:e5:7d:46:c3:0b:a8:13:05:
                    ec:9e:8b:f5:6d:69:da:12:40:11:62:0b:1c:f3:6d:
                    fb:b7:83:6b:2f:3e:32:c8:3e:9f:f2:2c:3d:6c:ef:
                    09:1e:13:5f:96:9c:c1:b2:a5:85:c6:ab:e9:41:af:
                    ac:5c:a2:a6:24:04:7f:0e:8a:13:48:9d:d7:a3:a9:
                    67:a6:bc:d8:d0:4c:0f:b5:38:2e:47:08:db:32:e1:
                    53:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:82:27:C1:95:7E:80:CF:3E:41:6D:2A:E3:EE:4A:12:D1:62:BA:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/023c0147-31da-314e-b950-3ddf9ade51ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl

            X509v3 Authority Key Identifier:
                keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.176.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:d2:02:5a:ee:f7:38:72:2e:85:06:01:ef:c4:da:b0:e4:ac:
         03:b0:f6:d0:89:74:31:3e:56:25:32:2d:25:5c:8a:61:c8:4a:
         7b:1c:e9:de:fc:31:91:4a:3a:9b:c4:d9:93:76:87:30:bd:7a:
         f5:83:af:91:1a:ee:d6:88:38:3d:f3:1d:17:22:e0:34:e2:1b:
         86:14:08:53:13:46:20:5a:4a:61:b6:aa:96:50:4a:2f:b5:74:
         47:ea:1b:c9:a6:f4:d6:2e:59:7c:cc:20:fd:94:6e:76:eb:0a:
         07:0c:bd:52:e3:a0:80:0d:cf:63:8d:08:44:81:60:6b:36:f0:
         42:78:d8:57:9c:d7:65:3f:dc:8f:94:f7:57:2c:e3:f6:28:65:
         b8:78:01:22:c4:7f:74:fa:cb:c8:ac:f7:35:bf:ab:e9:a2:ff:
         95:c5:93:ff:7a:bf:fe:eb:fc:10:fb:91:bd:7d:d5:dc:38:2c:
         94:34:06:ed:dd:3e:ae:ab:72:af:9b:f8:4f:ef:3e:f1:7e:de:
         33:32:5b:ed:d5:5f:88:2d:2e:1c:c7:aa:4a:4b:c1:31:40:93:
         9f:47:5c:a9:0c:6c:33:2c:99:ea:82:14:06:62:c7:75:8f:98:
         63:58:13:30:7e:04:d8:8e:c1:36:ea:77:33:75:67:63:f7:38:
         2d:96:a0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 08:40:39 2026 by rpki-client