Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/5aff8718-1545-3abe-8c8c-1ef8ea46e37a.roa
File:                     5aff8718-1545-3abe-8c8c-1ef8ea46e37a.roa (raw, json)
Hash identifier:          5W4XWbQAEqrp9fIlSD9Qc0E+iEWFBhccqB4OAwsEsrM=
Subject key identifier:   F0:36:0F:EE:63:AC:A1:82:EB:65:5B:FF:24:FC:FD:B4:1B:9F:B4:B6
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584D24E127F2622E61211C9BC640
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/5aff8718-1545-3abe-8c8c-1ef8ea46e37a.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     14813
IP address blocks:        69.73.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e1:27:f2:62:2e:61:21:1c:9b:c6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=bc48cf5d-9ccd-42cd-aa29-c4d71ff2a4e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4c:7d:48:ee:69:5b:14:e5:fb:72:ae:24:d3:
                    8a:e7:36:6d:57:f6:fb:96:3b:87:91:59:f0:38:c0:
                    78:7d:19:33:97:68:57:f3:bf:13:0a:a8:20:6f:ca:
                    ad:50:e0:45:12:66:df:62:b0:e4:df:aa:6b:a7:71:
                    d9:33:c7:43:ae:19:8d:75:5b:8b:25:55:58:bb:91:
                    ad:37:07:4f:ab:0a:35:94:ed:5f:92:f5:d9:ac:5f:
                    98:81:76:b5:49:27:56:e4:ed:d6:6f:a6:d9:08:9d:
                    7b:e1:0c:6b:34:35:59:87:27:9e:0d:d7:22:de:be:
                    2c:de:3a:82:89:1d:e7:1b:86:91:39:00:b2:c1:ef:
                    18:33:09:fd:b0:34:81:c4:18:71:e4:db:12:2a:f6:
                    70:05:73:8f:a5:50:08:c1:89:be:7c:95:70:62:64:
                    a2:d9:cf:e5:bb:7e:86:a3:bc:eb:9f:71:a2:fb:d0:
                    54:84:41:0d:91:b9:1f:1d:a2:26:ff:21:d1:3d:ee:
                    0c:e7:a5:f6:d6:8f:52:b0:96:d2:0c:34:50:bc:8f:
                    ca:f3:38:c9:ec:2a:08:94:9c:31:f4:4a:24:cb:e3:
                    ca:22:da:3c:fc:a5:d0:b2:a6:b1:81:cc:43:14:5d:
                    56:3e:0e:9f:13:0b:f5:c0:b4:a4:bb:b0:6a:43:d1:
                    8d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:36:0F:EE:63:AC:A1:82:EB:65:5B:FF:24:FC:FD:B4:1B:9F:B4:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/5aff8718-1545-3abe-8c8c-1ef8ea46e37a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.73.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:10:1d:33:33:46:2f:c8:2b:0a:e7:c6:6a:9c:16:64:23:b4:
         33:e7:a1:aa:9e:d2:16:1e:cc:90:55:3e:2b:72:28:25:09:fa:
         6e:db:c9:e3:f0:16:96:7f:e5:08:39:03:f7:72:1d:8d:3d:15:
         1e:a0:e0:55:7a:19:c1:b3:0d:b5:00:64:3d:40:f1:c9:97:ac:
         aa:d6:5a:ce:4f:21:f1:66:ee:ca:73:3a:f0:65:47:0b:1a:7f:
         7a:20:4f:0b:79:d2:d7:dd:89:0b:e3:a2:d6:1b:fd:83:06:44:
         ab:79:08:4a:6b:69:7f:b3:bd:65:50:70:41:67:0a:6e:e1:92:
         95:42:6e:26:6a:95:9c:f2:51:61:29:a8:a2:a2:1e:e8:38:98:
         e2:cd:88:0c:41:b4:3c:8c:10:f7:01:29:17:99:44:81:97:75:
         03:68:1f:fe:cf:78:e8:ca:4d:09:e0:ab:f5:83:f5:5d:57:b7:
         bc:72:57:7d:78:2e:2c:a2:b6:ef:36:66:f4:29:fa:4f:6d:db:
         e4:5c:65:e5:09:7f:ab:8b:f9:42:d2:8a:86:1f:57:8c:c8:c1:
         86:7c:6b:c9:a1:de:83:a2:5d:6a:89:29:aa:01:2b:94:f0:b0:
         b1:74:0a:1e:2d:e1:39:9b:a9:40:4a:c4:03:2a:8c:3d:be:80:
         0d:76:c1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:39:53 2026 by rpki-client