Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/65367c5e-1c86-38e9-9c97-3db70f4b8110.roa
File:                     65367c5e-1c86-38e9-9c97-3db70f4b8110.roa (raw, json)
Hash identifier:          XrKnRVo8U0rAcTqGZkTm2CiUhMBLx00bX23DxmZbXP8=
Subject key identifier:   DF:6D:BB:85:9E:AA:8C:C0:CE:B1:88:8A:A3:B2:AB:8F:63:F9:76:46
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F4328584D60E4FD1B00C9064FAFAB33C0
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/65367c5e-1c86-38e9-9c97-3db70f4b8110.roa
Signing time:             Fri 03 Apr 2026 01:00:24 +0000
ROA not before:           Fri 03 Apr 2026 01:00:24 +0000
ROA not after:            Thu 02 Jul 2026 01:00:24 +0000
asID:                     11260
IP address blocks:        24.89.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:e4:fd:1b:00:c9:06:4f:af:ab:33:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: Apr  3 01:00:24 2026 GMT
            Not After : Jul  2 01:00:24 2026 GMT
        Subject: CN=b6f20f1c-9e26-4f8e-8768-d81acd418038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:60:8f:b8:96:70:1c:9b:1f:12:05:22:d2:da:
                    4f:6d:72:72:5e:0f:33:22:d3:d2:28:a3:ad:ee:70:
                    38:18:92:e7:a4:67:aa:c0:b4:96:ae:e5:11:c8:f1:
                    4c:fa:9c:90:00:c9:04:92:20:aa:ed:16:1a:43:96:
                    8a:25:51:8c:72:0d:34:64:f4:48:62:be:f6:d8:71:
                    14:96:25:01:04:1e:50:28:32:b9:d4:e9:90:cc:39:
                    6b:70:f2:6e:94:f4:85:ee:40:48:d7:c0:54:42:72:
                    eb:dd:fa:61:6c:51:dc:87:c5:31:63:a9:38:3d:9e:
                    46:cb:3c:05:54:1d:f9:c2:10:cc:a4:81:38:4b:48:
                    bd:c4:74:db:7a:44:b7:49:e6:83:8c:c9:e8:bc:20:
                    3f:52:83:fa:8e:14:25:60:90:e5:85:62:80:96:d1:
                    41:ed:f1:67:8f:6f:be:97:ba:03:b5:50:f4:09:58:
                    ba:74:b7:27:4e:cd:e8:ad:ba:ab:9d:a9:c6:b2:03:
                    79:4d:f4:9c:1f:69:1c:07:9b:1f:5f:62:10:d5:7e:
                    d4:0b:2b:8c:0b:de:6b:fd:da:01:bd:86:d7:58:c6:
                    83:69:40:27:68:b4:89:e6:4d:31:16:97:b9:e1:fc:
                    68:8f:af:b8:b2:95:60:bb:81:39:cc:6b:f0:8b:18:
                    00:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:6D:BB:85:9E:AA:8C:C0:CE:B1:88:8A:A3:B2:AB:8F:63:F9:76:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/65367c5e-1c86-38e9-9c97-3db70f4b8110.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.89.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:0d:24:32:25:b0:d1:b4:f7:a3:a8:82:75:9b:aa:97:fa:b2:
         bf:9a:95:4d:19:02:34:fb:7c:74:2d:bb:a5:33:97:35:f2:7c:
         a1:8d:49:49:69:6b:2a:42:ec:b5:7c:59:6f:56:b5:f9:b3:04:
         86:7f:ec:f5:06:1d:80:88:56:81:da:2d:c1:ec:09:8e:60:97:
         62:75:29:3e:01:8c:49:66:23:5c:17:0d:d1:a0:5a:29:d8:a5:
         5d:e6:53:c4:bf:a8:aa:5a:4b:3a:d5:e4:23:d1:59:78:b2:7b:
         4b:2b:fd:10:fb:7f:3d:b1:31:dc:80:14:93:4e:aa:23:c1:81:
         dd:59:0f:9d:79:3c:bb:84:ab:4e:0d:72:d5:26:eb:f0:43:13:
         c3:48:a7:40:fd:d2:36:6d:b9:15:25:66:8a:10:ae:10:c8:3a:
         24:ee:c3:25:44:99:24:67:4e:9b:38:28:83:2a:4f:e3:1a:86:
         1b:74:fb:8a:b0:a4:08:00:97:40:3c:fe:a0:87:04:99:dd:c2:
         ab:da:8b:0a:ca:a3:dc:77:af:82:d7:ca:b4:87:16:ad:42:fd:
         52:e9:8e:75:69:06:1f:40:50:3e:04:db:2b:b2:11:53:e3:9c:
         f4:e8:8f:e5:89:b4:9c:66:48:23:fc:7e:b5:aa:50:3a:8b:aa:
         cc:cf:8a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:40:38 2026 by rpki-client