Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1c8dcf66-6cb5-37e6-8319-f70b4ef4eb0d.roa
File:                     1c8dcf66-6cb5-37e6-8319-f70b4ef4eb0d.roa (raw, json)
Hash identifier:          rBJD2XHlrpu+q3E6Ns+7w9Dh98e0NWREKL+vI7HcKXY=
Subject key identifier:   AC:A5:9E:B7:77:32:30:9C:6D:8F:6F:6F:76:E6:54:19:41:DD:52:CC
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F497451AF50F10726EE7B913B
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1c8dcf66-6cb5-37e6-8319-f70b4ef4eb0d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     11427
IP address blocks:        69.33.116.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:51:af:50:f1:07:26:ee:7b:91:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a120750a-127f-4d9a-b76d-535234409c1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:2d:ff:09:7d:ab:d1:95:b0:53:89:d9:37:fe:
                    da:bc:18:ef:77:28:ef:7c:1a:68:59:74:cb:84:d4:
                    8c:65:b8:05:f1:c1:9f:3f:6b:ee:f1:2f:e8:f0:c3:
                    0f:69:a7:9a:e1:fa:13:ed:27:1b:c3:dc:5f:d0:fd:
                    1f:49:59:68:2f:0e:02:f3:51:db:ee:fb:40:d9:3f:
                    59:62:b1:e5:5b:d4:9e:63:d1:47:ee:c2:c2:ff:4b:
                    ef:54:9e:37:38:b8:c2:0f:0a:42:aa:8a:0c:c1:49:
                    b5:ac:32:4f:be:f6:5f:13:e4:56:9c:ca:71:b5:84:
                    ff:af:31:12:d8:9d:62:9a:a5:f5:dc:86:36:42:4f:
                    e9:32:4b:14:73:b3:16:04:c4:da:46:19:e1:8b:cd:
                    50:9a:1c:64:20:ca:ed:83:7c:fa:1c:87:25:b9:fd:
                    bb:f8:ea:08:ba:71:a7:d9:10:77:eb:83:b5:71:7e:
                    23:45:a1:ef:b5:33:a2:f6:4a:b4:1b:5b:61:3e:85:
                    79:2e:80:73:b6:23:81:4a:f3:ca:fd:c9:92:fc:12:
                    2e:f1:78:29:e2:b2:0d:62:2b:15:b2:6c:95:1d:75:
                    3a:54:45:c5:b3:84:cb:cb:9f:d6:82:2e:20:6d:08:
                    3a:37:4c:d3:7b:1a:ab:73:58:af:b0:6d:59:8b:cb:
                    ae:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:A5:9E:B7:77:32:30:9C:6D:8F:6F:6F:76:E6:54:19:41:DD:52:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1c8dcf66-6cb5-37e6-8319-f70b4ef4eb0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.33.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:c3:13:35:4c:2c:50:5b:60:3d:49:43:2c:c3:3e:70:be:91:
         18:a5:6c:01:a1:8c:5f:b8:4a:db:b1:ae:1e:c3:11:0e:5f:17:
         7a:99:53:8a:b8:9e:9d:51:9d:30:76:44:f2:3e:f3:8b:63:ce:
         e6:c5:2b:cd:85:5f:7f:11:28:e6:27:8b:da:4b:b6:04:dc:de:
         7c:e4:c3:ea:79:ef:59:58:8c:12:76:a3:2d:85:c3:57:19:c7:
         ed:40:80:54:6e:cb:49:07:b4:7d:5d:a8:aa:e1:22:ef:96:35:
         32:dc:98:d1:0b:0c:de:97:93:b1:db:09:8c:2b:f8:77:f5:57:
         c0:66:7d:d6:41:21:58:46:48:cd:f2:41:67:2c:19:d6:aa:9d:
         06:6d:db:23:9e:e0:3c:0f:e9:2a:9c:aa:b7:24:0e:01:2b:45:
         e5:90:19:7f:1c:11:08:08:af:90:64:e6:8a:2a:80:10:f9:59:
         0a:31:a0:82:ad:64:8d:91:07:b7:22:ee:1b:c4:8a:6c:1d:99:
         6f:ed:35:f9:f5:c2:52:6a:0d:86:07:ed:34:7b:8b:a0:01:9d:
         0e:fd:45:41:c2:d8:60:cc:ff:85:a7:26:1c:00:a3:aa:65:bf:
         54:c8:66:81:13:b1:ab:46:21:39:0c:dd:e1:5b:4c:8f:2a:f8:
         31:9e:fa:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:27:04 2026 by rpki-client