Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/2c880042-77b4-3f57-807d-ca209161efa0.roa
File:                     2c880042-77b4-3f57-807d-ca209161efa0.roa (raw, json)
Hash identifier:          nxSGo4pIoYvBgo6a9Cujy5SYs5A7kInMdGl81JDopgY=
Subject key identifier:   4D:D6:E7:8F:1C:3C:D1:67:DF:18:D1:00:1F:50:5B:66:33:AD:A8:00
Certificate issuer:       /CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
Certificate serial:       010D0C9F4328584F1E2CF97DB2E7245ECC784700
Authority key identifier: A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/2c880042-77b4-3f57-807d-ca209161efa0.roa
Signing time:             Wed 09 Sep 2026 13:00:11 +0000
ROA not before:           Wed 09 Sep 2026 13:00:11 +0000
ROA not after:            Tue 08 Dec 2026 14:00:11 +0000
asID:                     9009
IP address blocks:        69.168.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1e:2c:f9:7d:b2:e7:24:5e:cc:78:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
        Validity
            Not Before: Sep  9 13:00:11 2026 GMT
            Not After : Dec  8 14:00:11 2026 GMT
        Subject: CN=2328583b-9eea-4db1-a25b-6430e2512c69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c4:b0:ad:46:0a:b2:8d:13:3b:96:5d:d2:5d:
                    00:2e:0d:f1:50:d7:ec:76:92:31:fc:27:16:96:28:
                    d3:98:d1:68:ac:5c:23:95:ac:b2:80:5b:14:61:92:
                    de:84:57:41:4e:85:28:d1:5b:7d:61:3d:af:ce:11:
                    fa:e3:2b:02:4c:f6:f9:d6:fd:7d:9b:0b:ed:2e:b4:
                    49:22:75:53:c2:c2:36:0d:a4:0e:8a:d3:e2:81:fc:
                    c5:a0:3f:2c:8c:af:93:37:6b:53:2b:d2:25:29:99:
                    94:c6:8a:e1:ea:f5:d7:89:f1:f7:58:54:85:68:07:
                    ae:bf:ac:fb:66:13:a3:f0:4f:fa:ab:03:08:a3:63:
                    b2:26:ce:3c:ad:89:86:69:92:b0:29:12:62:84:2c:
                    2d:42:2a:e0:8c:7a:17:cc:c4:c8:c9:2f:a3:e6:1a:
                    5e:76:02:57:ed:1e:c5:05:e2:22:e5:c2:bc:0c:2a:
                    51:39:2a:20:ab:bd:fc:02:5b:cb:8e:5f:32:a7:7e:
                    31:d6:d6:ca:8e:3b:6a:e9:47:9b:04:11:2a:ca:a3:
                    d2:b1:ba:b5:7b:cc:3c:2a:29:df:ed:46:b4:da:53:
                    f6:72:28:33:dc:d6:97:3a:d5:e2:26:3d:e1:ae:d9:
                    df:b4:cd:c8:fb:59:a8:a8:2b:ae:14:42:01:8a:48:
                    e9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D6:E7:8F:1C:3C:D1:67:DF:18:D1:00:1F:50:5B:66:33:AD:A8:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/2c880042-77b4-3f57-807d-ca209161efa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl

            X509v3 Authority Key Identifier:
                keyid:A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.168.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:27:dc:8e:29:33:24:04:03:3c:cd:34:aa:6c:2b:67:12:0a:
         0f:93:1d:fc:f4:9e:3a:ec:be:63:a2:73:52:93:a0:8d:a2:c3:
         87:f2:0c:4c:8c:58:56:f6:d0:6f:ab:fc:35:77:92:d9:b2:dd:
         b2:c8:49:e9:58:a3:8f:bb:d9:10:a7:51:dc:c6:9e:c2:67:df:
         19:7a:61:c9:20:14:cb:b3:ed:07:50:d0:e7:46:05:e8:97:c8:
         8b:d8:5a:81:e3:b9:c1:b1:4d:3f:3a:68:74:db:88:5f:ce:67:
         91:0d:da:21:19:70:4a:49:fa:e7:b4:8e:30:ae:f1:ff:a7:fe:
         b4:07:56:75:37:b0:f2:bf:c1:1b:74:18:81:8b:b3:16:1d:7f:
         de:92:a3:60:11:3c:bc:d5:4e:dc:c8:64:20:44:37:5e:c8:eb:
         12:59:c8:93:05:b6:7a:21:d6:7a:5b:e9:1f:f7:ed:1e:fc:89:
         43:b7:73:73:ef:0e:da:f9:30:4e:d0:22:19:a7:ee:5b:a3:54:
         26:38:0b:ce:12:c5:eb:d6:59:3e:f6:f6:6f:f8:a0:1d:3a:2f:
         dd:7d:c7:59:5c:49:2a:71:3c:43:3c:ea:fa:b4:6b:26:b2:be:
         5e:17:4c:a2:89:fc:c1:76:34:2a:80:32:b2:1a:38:4d:46:40:
         8f:ed:c9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:11:34 2026 by rpki-client