Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/4df0bc1b-7ceb-3ebc-9313-6b45b90a3042.roa
File:                     4df0bc1b-7ceb-3ebc-9313-6b45b90a3042.roa (raw, json)
Hash identifier:          IqCG0xMIhFNwf7yhOFMe759yP42PSQnxzrjohGPloxk=
Subject key identifier:   7F:11:8F:FE:E2:B6:4A:B8:58:D1:F2:7E:27:18:F6:78:45:EA:6C:8C
Certificate issuer:       /CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
Certificate serial:       010D0C9F4328584EF7F78BFC11F8AA50EE33D1C0
Authority key identifier: A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/4df0bc1b-7ceb-3ebc-9313-6b45b90a3042.roa
Signing time:             Wed 26 Aug 2026 20:31:57 +0000
ROA not before:           Wed 26 Aug 2026 20:31:57 +0000
ROA not after:            Tue 24 Nov 2026 21:31:57 +0000
asID:                     212374
IP address blocks:        69.168.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:f7:8b:fc:11:f8:aa:50:ee:33:d1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
        Validity
            Not Before: Aug 26 20:31:57 2026 GMT
            Not After : Nov 24 21:31:57 2026 GMT
        Subject: CN=a5dbd3e5-177f-4f05-aa2c-d14eb2e57adf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:78:b6:53:a6:2e:d1:03:65:1a:12:0b:e7:0a:
                    ca:b7:ef:e2:2e:e2:10:7a:2e:12:a0:20:f5:10:8b:
                    a3:2b:dd:fe:0e:c9:8f:c4:ad:68:97:60:e9:21:eb:
                    17:cd:ee:0e:33:ad:c3:46:20:07:51:64:49:37:20:
                    29:8b:b5:ed:29:01:ab:6e:ca:9c:4c:25:21:7b:99:
                    e5:5c:61:70:3d:cd:16:5d:30:a0:5a:f1:0b:15:67:
                    01:a4:58:c0:76:7e:b5:e8:97:ed:04:14:a1:96:5f:
                    2b:5e:ef:1b:f2:fa:40:8f:8e:00:11:6c:57:b0:60:
                    84:ba:a9:37:ec:28:0e:7f:21:59:7a:ab:c2:51:00:
                    df:00:e7:99:d1:6e:3d:d8:e4:3d:97:aa:27:29:d0:
                    54:d6:95:a2:50:1f:71:b9:a2:4c:52:dd:e2:b8:8e:
                    16:23:5b:94:2b:71:af:bb:e0:ce:b6:2b:9e:23:2b:
                    71:ad:8d:c3:ca:65:7b:16:f9:b4:6e:21:19:81:7b:
                    f2:b8:3e:db:d6:c9:f2:dc:1e:25:aa:c6:27:ba:c0:
                    d3:c7:83:61:4b:27:80:25:6d:b5:5d:38:b1:58:79:
                    06:63:41:53:16:95:8d:83:10:3a:ff:aa:32:77:e7:
                    07:39:e8:ca:30:b8:d9:38:f7:d6:9b:9f:72:b1:74:
                    72:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:11:8F:FE:E2:B6:4A:B8:58:D1:F2:7E:27:18:F6:78:45:EA:6C:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/4df0bc1b-7ceb-3ebc-9313-6b45b90a3042.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl

            X509v3 Authority Key Identifier:
                keyid:A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.168.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:b7:ed:23:aa:c5:bf:24:16:63:3a:c0:b9:94:94:f8:df:12:
         60:fe:99:9b:cb:e8:0b:05:26:18:07:03:e6:a7:93:79:b0:c9:
         0d:b1:26:49:22:90:6e:bd:48:2a:ab:66:4e:30:88:69:4d:95:
         47:71:c3:b6:62:50:5a:24:3c:bf:7a:03:fe:af:55:ae:9a:91:
         c6:50:84:3a:e4:02:09:22:38:e2:31:1c:6c:63:b7:e6:b8:20:
         d3:bf:44:32:46:95:c4:fa:26:19:4d:38:0a:e0:bb:9d:0a:3f:
         f8:42:57:eb:71:50:73:7a:dc:ae:33:46:9d:35:e0:11:8b:e8:
         2c:ff:7f:fb:04:d3:4e:dd:d4:76:27:82:c2:af:72:c3:1b:69:
         35:8e:9c:37:da:b2:4b:e1:c1:12:84:76:3a:6b:ad:bd:49:dd:
         92:04:be:b7:1d:78:46:60:f4:24:fb:63:a9:28:db:7f:44:3f:
         24:5e:45:36:f8:7d:7a:a3:3d:c9:1f:3b:ac:d4:50:a5:3e:93:
         c7:fa:1d:65:59:fa:bd:13:10:c9:ae:d0:68:32:78:92:da:47:
         04:46:0b:71:4d:20:73:28:98:d1:c9:73:91:b3:b1:17:35:27:
         dc:e8:67:6f:4b:95:86:b7:00:7d:2b:12:05:36:64:f0:05:7e:
         94:82:6e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:26:11 2026 by rpki-client