Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/69bf26e0-96a1-35d5-8188-ed5c11a12b37.roa
File:                     69bf26e0-96a1-35d5-8188-ed5c11a12b37.roa (raw, json)
Hash identifier:          +i9PeQ48ClH9Bkc+IZsk3aXKgDo1sk9kvuqmGmCp++w=
Subject key identifier:   B5:0D:A3:9B:80:3F:06:84:62:81:E8:81:B0:DC:68:04:FA:37:EF:CF
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F1CC7A61434D617ED5972D200
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/69bf26e0-96a1-35d5-8188-ed5c11a12b37.roa
Signing time:             Wed 09 Sep 2026 01:00:11 +0000
ROA not before:           Wed 09 Sep 2026 01:00:11 +0000
ROA not after:            Tue 08 Dec 2026 02:00:11 +0000
asID:                     62904
IP address blocks:        170.130.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:c7:a6:14:34:d6:17:ed:59:72:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep  9 01:00:11 2026 GMT
            Not After : Dec  8 02:00:11 2026 GMT
        Subject: CN=9f034520-6a5c-48b8-8c0b-88b7554491d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8c:e4:7d:12:bf:b3:db:61:a3:e4:08:15:d9:
                    fd:4b:8e:30:49:5a:63:4b:02:65:9d:5c:51:c5:17:
                    98:cf:6b:3e:d3:b4:3d:22:c5:01:87:6b:5c:21:43:
                    f6:03:78:02:d3:cd:49:e2:af:de:88:26:20:86:54:
                    99:28:9f:78:7b:11:cf:4c:c1:89:48:08:0a:11:80:
                    b6:f0:6e:29:72:83:3b:c6:ed:d2:5a:0f:1c:2d:1c:
                    ad:5c:d8:fc:c7:20:13:ad:66:d2:82:0b:92:d1:2a:
                    a2:c1:9f:d6:8e:1f:52:95:aa:59:3a:e3:93:11:38:
                    73:ea:3e:9d:3a:2d:48:a9:59:97:19:66:57:0b:06:
                    d1:06:53:70:c8:6a:c1:e8:6d:e5:d1:b1:45:f6:9e:
                    5f:27:41:df:ed:ef:58:1a:7c:00:6c:6f:d2:a8:af:
                    3b:f3:e0:c1:e1:9c:07:92:0a:b6:bf:2e:26:85:11:
                    9c:a5:07:c9:de:08:50:92:ee:d8:56:d5:60:e3:c3:
                    d9:4e:dc:d0:c0:4b:f4:b7:b3:bf:7a:12:97:37:3e:
                    5c:68:78:79:cb:2e:10:a2:9e:2c:5a:f5:06:12:92:
                    28:48:de:00:da:9e:fa:89:73:c6:ae:b5:94:54:b4:
                    c8:26:a7:83:f9:af:fa:3e:f2:a2:c2:c5:a4:ed:58:
                    cc:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:0D:A3:9B:80:3F:06:84:62:81:E8:81:B0:DC:68:04:FA:37:EF:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/69bf26e0-96a1-35d5-8188-ed5c11a12b37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.130.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:a9:04:97:8f:3c:52:9f:09:81:6b:2d:ce:89:d5:40:29:5f:
         fd:86:f2:fa:a3:b7:0c:81:8a:51:d0:40:da:ed:83:41:f6:91:
         8d:39:3a:5a:71:b8:17:7d:bb:f2:9f:9c:43:56:a8:10:d9:26:
         0b:8a:54:fe:34:f4:d5:16:6d:d1:ac:51:1c:b1:9b:35:35:77:
         38:48:52:33:14:cb:1d:a3:1c:04:c4:b3:83:fd:a4:4e:34:2f:
         b9:bb:f4:e4:cc:a2:6a:c7:f9:4c:dc:61:f2:5a:b7:3f:b0:3a:
         7b:f9:02:e5:ec:0a:21:a6:8e:72:77:e4:44:8b:84:ce:09:7d:
         49:2b:dc:89:3f:5c:ab:ec:d8:4c:c7:e9:e7:56:97:9d:86:31:
         37:86:3e:78:fa:6e:d8:3d:6c:1b:b8:3e:ff:41:9a:10:08:18:
         d3:d8:45:c6:20:f6:ce:74:db:4a:06:d1:56:94:5e:0a:53:de:
         fd:96:b8:1e:76:39:3b:7c:e4:b3:7f:e1:75:d0:67:b8:2f:30:
         dd:2b:a8:d0:e8:d2:4c:be:f2:7f:b0:bc:64:35:1e:4b:99:a7:
         3c:22:1b:ec:3e:20:d7:81:7d:82:ff:e3:a3:5b:bd:9a:44:9c:
         53:a4:81:01:8c:a7:2a:c6:9a:86:6c:7c:2d:e9:ce:41:8f:8b:
         23:55:7d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:09:48 2026 by rpki-client