Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a06ab81f-a6c8-462a-b3e0-52f829f8f687/61cd5006-eb96-38f0-ae08-70b29623b9ec.roa
File:                     61cd5006-eb96-38f0-ae08-70b29623b9ec.roa (raw, json)
Hash identifier:          MaWzpKHc8CynNpgR1GidsU4ZYf9OpSTnnOiz5ISraY0=
Subject key identifier:   4C:23:89:F9:FD:28:F7:56:F9:BE:D0:45:3C:29:16:18:99:7C:95:5A
Certificate issuer:       /CN=a06ab81f-a6c8-462a-b3e0-52f829f8f687
Certificate serial:       010D0C9F4328584F4F0810E98381F5162D0911C0
Authority key identifier: BB:E4:F8:D9:20:DD:C2:23:75:FB:B4:A0:FD:34:2F:65:04:BC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a06ab81f-a6c8-462a-b3e0-52f829f8f687.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a06ab81f-a6c8-462a-b3e0-52f829f8f687/61cd5006-eb96-38f0-ae08-70b29623b9ec.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     398992
IP address blocks:        169.197.182.0/24 maxlen: 24
                          2602:fced::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a06ab81f-a6c8-462a-b3e0-52f829f8f687/a06ab81f-a6c8-462a-b3e0-52f829f8f687.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a06ab81f-a6c8-462a-b3e0-52f829f8f687/a06ab81f-a6c8-462a-b3e0-52f829f8f687.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a06ab81f-a6c8-462a-b3e0-52f829f8f687.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:08:10:e9:83:81:f5:16:2d:09:11:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a06ab81f-a6c8-462a-b3e0-52f829f8f687
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=254c0365-3540-4e0b-a82e-8be8698451e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:7e:9e:c2:2c:44:66:ef:a6:7f:61:49:44:b9:
                    ef:39:45:26:92:a7:72:9b:bb:b1:8f:2f:d2:bc:37:
                    60:77:86:ad:b4:3d:18:e8:02:2d:7d:b8:0d:8d:e7:
                    d0:96:a9:19:1d:41:57:f9:e9:94:ee:69:b4:37:9e:
                    29:99:51:ab:6b:76:66:1b:53:a3:24:cc:35:c1:0e:
                    05:fb:36:b0:d7:d4:59:fc:5b:8f:99:8d:04:d9:c9:
                    05:5a:d7:4c:c5:0e:fe:6c:80:c1:a4:f9:3e:28:1e:
                    21:6c:f1:d0:59:d2:d8:8f:73:fa:f1:65:db:18:f8:
                    de:ba:b4:9f:3b:a0:a1:a6:f9:e1:f7:c1:ba:53:ef:
                    24:93:d5:e6:2b:c5:0c:fd:d2:c1:f6:2e:1f:88:d5:
                    90:e5:8a:06:28:79:40:c4:23:38:87:a5:73:2b:31:
                    90:6a:38:4b:3c:44:7f:03:d6:c6:d3:de:1a:9b:0c:
                    7c:81:b0:1f:cc:dd:57:df:f2:e7:11:99:ba:b1:53:
                    8d:74:dd:4a:20:c5:b2:88:8f:c1:fb:55:d2:85:07:
                    bb:23:20:f4:d8:1e:58:6b:34:45:4b:66:b2:fe:7d:
                    05:4f:51:b8:33:63:1f:09:46:69:a6:c4:b4:79:9e:
                    31:80:0d:3d:00:2c:0f:1d:25:95:cf:dc:f1:c0:15:
                    fd:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:23:89:F9:FD:28:F7:56:F9:BE:D0:45:3C:29:16:18:99:7C:95:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a06ab81f-a6c8-462a-b3e0-52f829f8f687/61cd5006-eb96-38f0-ae08-70b29623b9ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a06ab81f-a6c8-462a-b3e0-52f829f8f687/a06ab81f-a6c8-462a-b3e0-52f829f8f687.crl

            X509v3 Authority Key Identifier:
                keyid:BB:E4:F8:D9:20:DD:C2:23:75:FB:B4:A0:FD:34:2F:65:04:BC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a06ab81f-a6c8-462a-b3e0-52f829f8f687.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.197.182.0/24
                IPv6:
                  2602:fced::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:a5:ba:16:e7:bb:c2:a1:18:30:b0:43:b3:16:72:a5:23:12:
         9a:0a:81:be:33:4d:ce:d8:eb:ec:1d:e2:ea:7e:5a:9b:09:33:
         a1:a0:43:d0:0c:33:8c:be:2a:86:9f:17:8f:aa:84:da:2b:13:
         1b:cb:c2:ab:36:cf:a0:92:ff:c0:f7:60:72:2f:92:81:0a:2f:
         64:ec:ef:8a:dc:00:87:5d:58:6b:d9:8b:be:82:d8:67:f8:c0:
         9f:10:ee:ec:dc:e8:67:86:1b:2a:81:97:b2:8b:e0:fb:d7:59:
         3e:47:b2:3a:70:1d:08:9e:a8:d8:82:aa:50:14:2b:89:72:b1:
         61:e8:39:48:41:4a:88:8a:fe:86:0d:1f:4d:d9:0c:17:d8:fb:
         a0:4d:4f:cf:2b:57:e4:9b:6a:30:bd:36:2b:34:9d:71:fd:2b:
         d0:35:47:ab:c1:0b:93:75:79:55:11:7d:dc:3e:ca:84:7a:58:
         94:74:10:30:93:51:04:f6:a9:8f:51:a5:b6:c8:33:b8:18:7d:
         3e:dd:9b:6b:63:b5:b9:1c:a9:4d:bc:d5:48:98:26:30:b7:c8:
         d9:7d:11:52:f5:a0:cb:4c:53:4a:f5:bf:ae:7b:59:7d:8e:24:
         28:07:25:67:57:2e:3a:58:e1:66:d3:aa:1b:ac:17:7b:e2:e7:
         82:94:ec:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:08:05 2026 by rpki-client