Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/1954188b-ec6e-3b13-a05c-c924c28e7b5b.roa
File:                     1954188b-ec6e-3b13-a05c-c924c28e7b5b.roa (raw, json)
Hash identifier:          9XyCyyxyyrEAIAur1XfiTZ6AClfBcvbpHPjMfSxFwHc=
Subject key identifier:   B1:B3:61:51:AC:A1:30:1D:F3:80:64:A8:3A:3F:B2:C1:67:86:49:96
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584D24DF9EEE9D0047F2198C2A00
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/1954188b-ec6e-3b13-a05c-c924c28e7b5b.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     14813
IP address blocks:        69.73.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:9e:ee:9d:00:47:f2:19:8c:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=33aeeb81-2276-4afe-90bb-d6de58fa45fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:71:07:f4:b5:07:5a:8c:7a:6b:cd:b7:6c:18:
                    a3:55:cb:c8:d2:82:7a:8d:28:d6:ad:b4:f2:4d:94:
                    a9:46:03:dc:0e:b3:d7:be:bb:85:d9:60:cb:41:ad:
                    64:94:e6:bd:54:8f:f5:10:39:7a:7e:f7:dd:f9:e5:
                    f9:00:26:da:62:dc:e4:3f:87:d1:f2:25:89:e9:19:
                    3d:3d:b0:f4:26:4b:7f:63:0f:02:c4:af:7b:8c:10:
                    2d:a7:d5:f1:aa:2f:de:be:a6:9b:85:bc:4b:ce:ec:
                    9b:a7:4c:ac:cd:86:b6:f6:36:34:0c:94:05:44:25:
                    bc:6e:f8:7b:90:bb:43:ed:6e:d3:f0:33:33:3a:e4:
                    6e:0c:ab:6c:7f:34:a9:72:c4:88:d3:78:e8:66:e0:
                    95:44:c6:fc:21:ec:81:89:19:72:ca:92:84:c4:72:
                    75:d0:63:25:b1:25:93:0a:2f:73:d7:ed:60:cb:0a:
                    45:73:d6:32:fe:f3:c5:0b:f8:e4:ac:a5:17:40:43:
                    f5:c5:44:14:b5:8a:9c:33:5a:5b:2e:df:3b:9c:37:
                    3e:0c:ba:43:f3:22:9a:b8:d9:79:42:1f:5f:aa:9f:
                    84:40:65:5a:8a:6f:5e:74:8b:23:07:15:82:74:56:
                    ca:e7:d0:de:3d:fe:67:2c:2a:17:1d:af:f0:cb:de:
                    0c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:B3:61:51:AC:A1:30:1D:F3:80:64:A8:3A:3F:B2:C1:67:86:49:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/1954188b-ec6e-3b13-a05c-c924c28e7b5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.73.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:47:4b:be:2c:46:be:18:7f:fb:6f:69:5b:86:88:6b:18:a7:
         dc:00:5c:ca:38:38:4d:61:1b:29:03:c1:7c:6d:67:9c:ad:65:
         ee:26:0e:c2:b7:f4:04:41:99:c1:d5:3a:46:cf:3d:ec:db:77:
         ad:17:30:1d:db:9c:d8:73:1a:2b:a9:22:55:54:f1:0a:63:a0:
         77:1d:98:6c:06:3d:b5:31:9b:92:67:05:32:85:36:5c:f3:b1:
         6d:88:61:95:4c:96:a4:bb:a1:74:30:90:b6:3a:72:b9:17:0c:
         de:50:e8:c2:c8:f9:43:56:0e:52:ad:29:d6:1d:cf:ac:ae:f9:
         98:9b:93:02:f4:90:0e:38:cb:a2:4f:bc:e4:e9:e2:74:07:d6:
         df:ce:45:dc:50:44:fb:2a:48:7e:65:07:25:3d:02:fc:4f:be:
         cb:3b:3c:3e:5d:f0:02:cc:8b:30:f6:b7:93:a3:89:e1:cf:85:
         bb:30:e2:71:d6:bb:fc:33:83:f8:57:4b:09:be:43:b0:b1:87:
         e0:1c:cf:13:d5:db:0b:a3:9d:d8:29:1e:de:29:5b:58:35:66:
         58:ef:41:3a:ac:a7:9a:94:e4:54:f9:f9:08:74:69:1a:9a:44:
         86:1b:10:b0:2d:da:d9:2d:a1:11:d0:c7:1b:39:ab:26:f9:61:
         56:d5:45:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:32:07 2026 by rpki-client