Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/af4beeb0-4520-3e16-8579-b418f81e6cfc.roa
File:                     af4beeb0-4520-3e16-8579-b418f81e6cfc.roa (raw, json)
Hash identifier:          8Sq8T+8kv+ch1ehCTtbGfHy8c1GAKFKngDxiAjw3klo=
Subject key identifier:   0A:C7:49:24:09:5A:07:74:72:0D:BA:88:FD:B1:01:E6:9B:15:92:A5
Certificate issuer:       /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial:       010D0C9F4328584DD090573E5BC4C57FC0727100
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/af4beeb0-4520-3e16-8579-b418f81e6cfc.roa
Signing time:             Wed 13 May 2026 01:00:24 +0000
ROA not before:           Wed 13 May 2026 01:00:24 +0000
ROA not after:            Tue 11 Aug 2026 01:00:24 +0000
asID:                     6621
IP address blocks:        69.35.56.0/22 maxlen: 22
                          69.35.80.0/21 maxlen: 21
                          69.35.88.0/21 maxlen: 21
                          69.35.96.0/20 maxlen: 20
                          69.35.112.0/21 maxlen: 21
                          69.35.160.0/21 maxlen: 21
                          69.35.168.0/21 maxlen: 21
                          69.35.176.0/21 maxlen: 21
                          69.35.184.0/21 maxlen: 21
                          69.35.192.0/21 maxlen: 21
                          69.35.200.0/21 maxlen: 21
                          69.35.208.0/21 maxlen: 21
                          69.35.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d0:90:57:3e:5b:c4:c5:7f:c0:72:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
        Validity
            Not Before: May 13 01:00:24 2026 GMT
            Not After : Aug 11 01:00:24 2026 GMT
        Subject: CN=a8a790f9-8fd5-413b-85ee-57eae365c332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:44:d7:c1:bf:be:f5:9a:ea:be:42:0e:26:a0:
                    8c:54:e5:3e:a1:dd:11:62:58:c1:c8:a8:04:35:e9:
                    77:61:ab:9d:49:b9:f9:2c:d3:f6:a4:6c:47:d5:e5:
                    cc:18:ae:9e:f0:cc:6d:13:ae:eb:fb:d8:08:ac:6c:
                    83:f2:8b:ad:04:26:7e:e1:fe:f5:3d:15:6f:8d:97:
                    4e:d1:cf:01:a1:7f:35:7c:e9:6a:a1:e5:c3:a1:fe:
                    77:2b:ec:68:4c:75:70:e9:b4:86:00:33:45:24:45:
                    26:29:1e:27:df:cb:ff:91:48:ab:f0:a4:b9:df:fc:
                    d4:be:4d:88:6f:c0:2e:b6:71:d9:e4:12:34:ba:a1:
                    4e:55:2e:86:07:c4:58:16:ac:55:9a:58:90:0c:5e:
                    e6:0e:a5:a0:5f:95:83:bf:0c:f3:ad:6d:55:c8:e4:
                    9a:bd:df:a2:96:ab:0e:b8:a9:f5:e7:04:18:93:25:
                    62:46:42:db:40:e9:71:fd:f7:9f:e0:ac:ef:69:ec:
                    9e:48:68:fa:be:93:15:7c:c7:9c:c4:04:44:c9:b1:
                    9f:94:21:7a:8a:84:e4:52:8c:bf:86:7c:46:a0:b0:
                    b2:cf:7f:77:53:d3:60:a1:36:b0:8d:5d:8e:db:2e:
                    78:18:b7:47:9c:18:7f:d1:d9:61:a2:7a:7b:0b:26:
                    c6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:C7:49:24:09:5A:07:74:72:0D:BA:88:FD:B1:01:E6:9B:15:92:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/af4beeb0-4520-3e16-8579-b418f81e6cfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl

            X509v3 Authority Key Identifier:
                keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.35.56.0/22
                  69.35.80.0-69.35.119.255
                  69.35.160.0-69.35.223.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:91:93:c7:77:09:e6:5a:af:79:a5:9d:75:cd:10:df:8f:0d:
         4e:1d:e2:b7:e2:39:32:ff:79:e4:5a:12:f8:97:a1:83:bb:75:
         73:a4:dd:2a:32:60:29:bd:fc:ca:7b:ff:da:62:13:1c:c1:c6:
         78:11:39:98:10:16:05:c9:57:c5:86:6b:86:a4:e4:37:4b:a5:
         3d:58:07:4b:92:36:8a:d7:1b:a6:01:49:17:84:07:5d:61:0b:
         6b:3c:a2:02:b3:b3:f3:d0:10:3a:e0:23:8b:fa:d7:01:9a:93:
         3d:06:16:86:3f:c7:85:5f:74:63:ea:dc:d3:ab:21:ca:e0:f7:
         b7:37:e2:d8:dd:b0:44:19:f0:74:a8:76:2b:24:5c:98:90:02:
         5c:aa:dc:32:1c:56:e2:d9:3a:c8:03:3b:c5:b9:33:3d:4d:cf:
         1d:0f:fe:37:3a:c8:c8:b4:60:4f:bc:35:9e:6d:88:97:d2:11:
         89:95:85:7f:a9:dd:53:a7:2b:9d:bc:47:57:09:0f:c8:40:1a:
         1e:b3:68:6c:1a:a9:26:b2:80:b7:ae:e2:34:3d:5b:3f:99:60:
         42:5f:db:cf:f2:94:32:ed:83:bf:af:b8:83:78:65:a8:3c:67:
         09:49:9c:23:f6:f8:a9:83:6c:14:f5:9c:77:b8:25:02:4d:e4:
         7e:4f:c2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:04:21 2026 by rpki-client