Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69f287f7-f860-4e10-9fc2-d79998155e05/38480fec-ca78-38fd-accd-60e691a2b910.roa
File:                     38480fec-ca78-38fd-accd-60e691a2b910.roa (raw, json)
Hash identifier:          z7vjchMlY3oSQZq6aNzF4nIwJDxctz2lWYN58uuxhk4=
Subject key identifier:   6A:2A:C6:11:A3:2A:BC:C6:E5:3D:13:6B:6C:7B:30:44:75:99:17:A9
Certificate issuer:       /CN=69f287f7-f860-4e10-9fc2-d79998155e05
Certificate serial:       010D0C9F4328584DBFD05695F9BA5B0D77EA15E0
Authority key identifier: F1:44:9C:74:18:36:66:9B:81:79:0B:3D:DA:D2:BA:79:A3:23:EF:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69f287f7-f860-4e10-9fc2-d79998155e05.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69f287f7-f860-4e10-9fc2-d79998155e05/38480fec-ca78-38fd-accd-60e691a2b910.roa
Signing time:             Thu 07 May 2026 01:00:23 +0000
ROA not before:           Thu 07 May 2026 01:00:23 +0000
ROA not after:            Wed 05 Aug 2026 01:00:23 +0000
asID:                     395046
IP address blocks:        69.64.28.0/24 maxlen: 24
                          69.64.29.0/24 maxlen: 24
                          69.64.30.0/24 maxlen: 24
                          69.64.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69f287f7-f860-4e10-9fc2-d79998155e05/69f287f7-f860-4e10-9fc2-d79998155e05.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69f287f7-f860-4e10-9fc2-d79998155e05/69f287f7-f860-4e10-9fc2-d79998155e05.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69f287f7-f860-4e10-9fc2-d79998155e05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bf:d0:56:95:f9:ba:5b:0d:77:ea:15:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f287f7-f860-4e10-9fc2-d79998155e05
        Validity
            Not Before: May  7 01:00:23 2026 GMT
            Not After : Aug  5 01:00:23 2026 GMT
        Subject: CN=396cd241-1114-4331-8681-ca9e0ee79968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a3:90:72:56:c9:27:07:fd:04:d7:0e:7d:90:
                    1c:83:56:04:a6:14:99:bb:05:c7:98:d1:ce:d6:af:
                    de:da:37:18:d9:53:8e:89:df:30:ac:b9:b1:7c:cc:
                    6c:0a:ed:b3:3a:8c:1a:c3:f7:5d:89:2f:58:fe:b7:
                    18:c1:da:01:e2:41:d3:b4:41:a6:06:19:89:74:59:
                    40:93:ae:44:a1:cd:63:e2:bb:36:cc:5a:a9:cd:f2:
                    d0:2b:7c:b3:61:53:7c:01:cf:9f:f6:5c:e9:7c:5d:
                    8f:0e:22:3a:11:81:49:ce:26:1f:21:8e:b3:b9:14:
                    8b:ef:ae:71:ae:54:64:fe:f7:18:e6:d5:f1:db:62:
                    3f:28:ec:e8:5b:81:ed:23:95:16:c9:5a:c3:4b:41:
                    c0:65:b7:fd:86:9a:a3:33:23:a7:d9:bf:d8:9b:45:
                    67:d0:0e:be:c5:5e:b0:4a:8a:e3:a6:9b:96:19:c9:
                    18:b0:d1:2c:a6:7d:22:9f:15:fa:1d:1c:19:2c:dd:
                    19:d9:24:18:80:50:2c:a8:4c:14:b7:00:9a:4b:70:
                    bc:e9:ac:94:61:c6:ba:70:e7:5a:9c:9d:42:91:b4:
                    59:67:77:05:ec:ff:47:8b:94:69:62:4c:da:21:85:
                    e5:60:7f:95:96:04:42:ff:38:a8:8f:86:8c:c9:3e:
                    02:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:2A:C6:11:A3:2A:BC:C6:E5:3D:13:6B:6C:7B:30:44:75:99:17:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69f287f7-f860-4e10-9fc2-d79998155e05/38480fec-ca78-38fd-accd-60e691a2b910.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69f287f7-f860-4e10-9fc2-d79998155e05/69f287f7-f860-4e10-9fc2-d79998155e05.crl

            X509v3 Authority Key Identifier:
                keyid:F1:44:9C:74:18:36:66:9B:81:79:0B:3D:DA:D2:BA:79:A3:23:EF:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69f287f7-f860-4e10-9fc2-d79998155e05.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.64.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:f3:da:53:47:1d:2b:c8:66:ae:91:c9:64:09:6f:f3:7d:18:
         37:16:07:06:7d:ae:3d:70:97:59:f2:b6:00:4c:bb:d3:65:16:
         6b:3d:30:90:fc:87:67:ba:40:0f:bb:1f:3d:67:5b:91:8e:0a:
         df:39:46:b3:5f:79:01:6f:2a:48:f0:0d:70:5d:c5:52:a1:4f:
         ff:68:c8:41:15:7c:e9:7d:fc:a4:fa:02:1f:4b:41:4b:0b:a5:
         f1:ce:da:b4:f8:ac:04:76:ea:d2:98:3f:a6:24:58:7d:45:1a:
         ee:97:5a:c8:16:46:ff:40:39:e0:d2:6f:20:b0:07:9d:bc:ee:
         ac:b4:a8:33:ea:60:45:79:66:01:86:96:1d:60:61:d2:60:25:
         19:79:46:a7:82:70:46:3f:71:ee:06:3c:79:f9:a2:ad:9b:c1:
         ca:46:a4:13:e0:07:13:26:2f:5e:92:46:06:0a:7f:d1:2d:dd:
         45:97:ed:7d:cb:86:a7:d2:cf:cd:8c:e3:66:9c:75:2e:98:b1:
         50:4d:d3:8f:40:4b:4e:87:51:84:67:d7:d7:7a:0f:c9:a4:2c:
         13:76:cc:90:35:a9:84:0b:44:f9:b5:98:16:7a:90:80:62:b6:
         57:88:d4:b8:28:98:7a:3b:9e:6e:05:ce:71:ce:19:92:66:51:
         88:8a:75:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:53:27 2026 by rpki-client