Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/5aeb23bd-b8cd-3025-9793-f0cb1eb472dd.roa
File:                     5aeb23bd-b8cd-3025-9793-f0cb1eb472dd.roa (raw, json)
Hash identifier:          oJDRUGkMk+wEyJLiLHQ8+oFOGKcv8ohE3S4FeO+lTZw=
Subject key identifier:   61:AD:ED:0D:56:6E:76:72:3F:EC:5F:20:AC:D7:A6:35:55:5F:5B:74
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584D24E10C6B1AAFB91DDD5BEE00
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/5aeb23bd-b8cd-3025-9793-f0cb1eb472dd.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     14813
IP address blocks:        69.73.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e1:0c:6b:1a:af:b9:1d:dd:5b:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=b7df587e-efac-4e1d-ba6e-4590f12c5e90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0e:79:ce:13:05:57:ee:a7:dc:8d:e0:1b:e0:
                    d2:6f:ae:60:44:14:20:1f:63:92:a5:b0:d4:76:2d:
                    6e:ce:15:54:8f:30:20:02:0e:6d:f4:9a:d6:de:57:
                    e1:44:95:a7:cb:a8:1e:5e:1b:46:7b:fa:1f:73:a6:
                    ef:98:f3:40:44:34:8e:f6:f3:df:94:37:31:5e:90:
                    03:4a:eb:e8:95:a7:86:f4:f3:ac:ec:8d:1f:8b:84:
                    cb:83:7e:c0:36:f9:d7:20:8d:71:9c:1f:d1:85:63:
                    b1:3d:98:93:93:06:0e:9b:73:ab:65:f4:fb:31:50:
                    14:39:f0:44:b5:10:e3:4d:b3:d0:5e:d9:e9:51:d1:
                    4d:14:bc:62:b7:3b:c8:9a:09:d5:16:9e:e4:96:b7:
                    a3:1d:74:c5:41:ca:dc:2e:16:33:bc:26:d7:8c:5f:
                    33:7f:73:ae:ec:f8:cf:98:0c:1b:a5:1b:86:90:0a:
                    6c:3f:ea:2e:25:72:b5:d1:94:3c:ff:6b:49:83:33:
                    16:db:72:6b:58:27:34:e4:95:d3:54:71:d7:6b:d1:
                    65:bf:91:3b:a7:20:a2:b5:dc:48:37:b1:a1:e6:db:
                    26:c5:30:b7:10:c7:e7:ce:d5:57:93:69:e3:ca:98:
                    78:82:11:73:3f:76:d0:e6:84:e8:74:07:f7:c9:2b:
                    2b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:AD:ED:0D:56:6E:76:72:3F:EC:5F:20:AC:D7:A6:35:55:5F:5B:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/5aeb23bd-b8cd-3025-9793-f0cb1eb472dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.73.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:09:d0:c8:52:fc:be:9a:60:01:36:e1:9f:61:7d:30:8b:ca:
         3c:07:de:6d:a8:16:66:12:1c:99:fe:5d:52:c2:cf:e5:5d:e3:
         3a:c3:20:82:41:72:23:70:34:6f:ef:c6:06:02:94:24:aa:23:
         32:6c:b4:00:42:aa:8b:8a:e4:f1:f0:1e:c6:15:6f:94:08:46:
         3c:10:c9:28:a1:ea:cf:20:25:a5:bc:cc:57:dc:25:86:33:0c:
         0e:ad:7c:f7:6d:a1:06:69:1a:98:9f:09:cd:40:6d:3b:09:80:
         bd:3b:0d:33:42:01:55:48:cd:4a:29:2b:dc:56:62:bc:b4:1b:
         db:5a:c9:47:41:77:6b:e3:b4:5a:a4:bd:c9:7b:fc:06:af:b4:
         3a:ac:e5:ba:02:4c:bb:23:89:2c:3f:02:36:e7:12:b2:72:7a:
         44:0d:25:1e:37:0e:30:b6:4f:06:71:ea:62:14:5d:80:b9:e9:
         c5:3f:80:b8:ef:9d:66:04:ef:49:7f:c2:07:03:19:f2:54:6f:
         f9:2b:b7:19:9b:2d:04:8f:fe:cb:9f:ac:1c:74:16:48:c9:4e:
         a5:7f:4a:1b:0d:69:1a:33:32:72:81:aa:35:54:45:dd:fc:39:
         30:e3:96:17:b2:2a:f5:51:85:c0:e2:d4:4a:7d:01:29:db:a3:
         ba:9a:a2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:51:47 2026 by rpki-client