Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/8cd6a1c3-b6dd-36d5-848e-fb259c24cb37.roa
File:                     8cd6a1c3-b6dd-36d5-848e-fb259c24cb37.roa (raw, json)
Hash identifier:          6BSTBWxA62Cd3bS3oQ+oFE7FgNOMjIxAzT1eKTUaIyg=
Subject key identifier:   8D:C6:CD:24:7C:31:1C:F7:F7:42:F1:D6:CC:46:92:D1:7E:7A:42:D5
Certificate issuer:       /CN=969446db-6a2e-47bc-a33b-2dd883bfb899
Certificate serial:       010D0C9F4328584F4973CEEEC2D062E82A51A100
Authority key identifier: 8C:4C:51:45:1B:97:18:EC:29:F6:65:EB:83:73:27:E3:84:C2:00:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/8cd6a1c3-b6dd-36d5-848e-fb259c24cb37.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     26679
IP address blocks:        192.64.152.0/22 maxlen: 22
                          192.64.152.0/24 maxlen: 24
                          192.64.153.0/24 maxlen: 24
                          192.64.154.0/24 maxlen: 24
                          192.64.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/969446db-6a2e-47bc-a33b-2dd883bfb899.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/969446db-6a2e-47bc-a33b-2dd883bfb899.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:ce:ee:c2:d0:62:e8:2a:51:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=969446db-6a2e-47bc-a33b-2dd883bfb899
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=3b4905c0-32c0-4233-a3f8-de63adc42eaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:29:dc:5d:9a:4f:0e:a8:31:8d:b9:67:73:84:
                    47:a6:b2:c8:1a:c9:a4:e2:3e:51:b7:25:52:f9:76:
                    43:0c:6d:31:fe:d4:91:12:43:30:24:87:f6:24:b6:
                    00:7a:cd:9a:58:3e:45:41:dc:3c:c7:16:b2:b1:79:
                    ef:f1:58:5e:ef:b7:57:d6:25:cc:3c:57:d8:46:1b:
                    d4:31:8b:22:4a:10:5d:71:ae:a4:e4:1a:cc:c9:61:
                    17:66:ed:25:e9:1a:55:c0:83:89:e9:64:d2:55:c0:
                    b0:33:45:ac:97:c7:fb:2d:f4:c5:79:85:3e:8a:a6:
                    8e:6f:61:b7:91:39:d3:6c:8b:6c:b9:00:0f:f2:31:
                    53:53:29:b0:2e:b9:f9:5c:d9:47:26:b4:1a:19:4b:
                    af:40:8e:66:82:1b:c1:ba:84:41:76:6e:89:0a:5c:
                    ab:f9:1d:35:c9:a4:13:3c:10:16:60:10:32:dd:41:
                    3f:26:e1:6a:87:f5:2e:31:ae:fc:b7:da:d1:15:b8:
                    11:9d:6d:e7:df:46:94:91:03:3c:ee:a9:5a:70:0b:
                    76:b5:d7:35:dc:98:e3:7c:d7:94:92:d8:dd:69:12:
                    9b:07:3e:d8:68:eb:e2:0b:31:0e:52:40:1c:d3:b0:
                    0c:b5:ff:6e:7a:50:f3:a8:86:f3:0e:3d:ed:05:5a:
                    52:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C6:CD:24:7C:31:1C:F7:F7:42:F1:D6:CC:46:92:D1:7E:7A:42:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/8cd6a1c3-b6dd-36d5-848e-fb259c24cb37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/969446db-6a2e-47bc-a33b-2dd883bfb899.crl

            X509v3 Authority Key Identifier:
                keyid:8C:4C:51:45:1B:97:18:EC:29:F6:65:EB:83:73:27:E3:84:C2:00:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.64.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:55:2d:0c:98:16:14:92:b0:c9:87:bb:33:72:cb:94:08:79:
         05:df:75:6d:c6:bf:34:7e:a2:50:9a:05:f5:a5:41:ce:14:7a:
         92:49:e0:a5:a1:55:da:83:9a:77:e4:46:9a:a8:fd:76:35:c6:
         ad:bc:10:1e:b0:5c:7d:c4:54:40:21:1e:ec:12:6f:d5:16:df:
         8f:bb:14:b9:e2:c3:5a:19:e6:f8:3a:4f:d3:14:88:70:1a:ab:
         a7:55:d1:25:c7:40:e6:95:86:6d:a4:48:33:24:02:d9:b9:35:
         a6:98:34:e9:fe:e1:56:96:fa:a9:58:b2:d0:da:0d:80:0c:16:
         84:71:95:dd:c7:05:42:00:f6:c8:5a:7b:97:7a:51:0b:59:07:
         01:06:88:7a:aa:5c:d5:3a:c8:78:c5:cd:2c:9b:39:7a:66:a7:
         09:be:0d:cb:f8:44:fe:b3:dd:a0:0c:ae:bf:38:76:a0:78:25:
         e3:a1:1a:47:e3:ea:3d:01:27:05:a3:3b:c4:6e:5a:58:8b:25:
         30:9d:af:4b:05:80:7f:51:fe:d3:20:5d:5c:42:e1:6a:0b:d8:
         f1:a5:a6:a4:cc:74:56:21:4e:df:3b:3f:84:c6:cd:c0:db:94:
         75:b7:0e:9e:61:68:26:ad:af:cb:18:ca:07:a9:d5:c7:fe:85:
         f3:2c:15:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:23:35 2026 by rpki-client