Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/5aff8718-1545-3abe-8c8c-1ef8ea46e37a.roa
File:                     5aff8718-1545-3abe-8c8c-1ef8ea46e37a.roa (raw, json)
Hash identifier:          2Vvr+e/+xJ657kp2FYXtufFQ0C6dxoiSLfe/53smfmU=
Subject key identifier:   F0:78:2D:AC:2B:15:D3:AC:21:0C:98:B5:AA:E8:F7:4C:EC:35:1F:55
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584F498A298933A21FE06883EA00
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/5aff8718-1545-3abe-8c8c-1ef8ea46e37a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     14813
IP address blocks:        69.73.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:29:89:33:a2:1f:e0:68:83:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=c472ecc1-c66a-4981-a32a-2dfd0b725b31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f3:36:9b:89:4b:48:b2:3c:c6:ba:f5:27:16:
                    c7:19:86:e0:4e:93:37:12:cc:36:85:62:fa:d1:20:
                    d0:aa:a3:8d:00:bb:ba:c9:3f:e0:3e:10:05:d2:f3:
                    23:ed:77:30:1d:09:a4:c5:3d:b3:92:be:99:11:ba:
                    1b:3f:c8:f9:dc:db:05:b1:42:fb:9c:e4:95:50:76:
                    f4:13:3b:92:58:c6:89:75:1c:f3:fd:2a:e8:b1:f5:
                    40:16:0c:db:b8:69:b9:df:0e:5a:2a:5b:01:61:e2:
                    e8:11:51:f6:54:e0:73:d7:a3:7d:ed:f7:f4:48:6e:
                    43:6c:b1:aa:2b:d4:83:9a:d5:dc:b8:9b:21:0d:a1:
                    80:65:97:6e:65:91:36:e5:ba:de:33:45:67:7a:cb:
                    60:b7:96:ad:ae:1c:7b:45:24:0b:9e:3a:6d:da:53:
                    05:83:29:a3:b0:bc:54:af:37:38:1c:fc:59:14:c0:
                    9f:b4:a2:bc:77:24:e0:47:aa:ff:42:1a:94:18:6f:
                    3f:de:d5:b1:c4:11:84:ca:5e:ca:0b:a2:4f:99:b1:
                    00:f4:d5:0a:d6:02:f6:e7:7f:b6:c8:c7:7f:aa:5d:
                    84:52:fd:7d:dd:79:e0:5c:fe:c8:55:c1:d9:e4:94:
                    5e:76:48:86:76:6e:4d:90:12:57:3b:73:15:88:7c:
                    1c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:78:2D:AC:2B:15:D3:AC:21:0C:98:B5:AA:E8:F7:4C:EC:35:1F:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/5aff8718-1545-3abe-8c8c-1ef8ea46e37a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.73.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:de:36:9b:a4:dc:70:00:ac:99:78:ab:d9:a3:ed:5f:7e:0f:
         1f:3e:50:b9:12:19:0e:9e:f1:56:19:a0:8b:7e:04:40:ed:f4:
         a2:03:76:02:88:0c:19:91:df:1a:ae:7d:ca:6f:bf:c8:10:6b:
         94:88:b0:2d:3c:a7:15:ad:d0:c3:d2:91:5e:f9:35:4a:94:4c:
         a1:3c:f5:63:a2:98:53:15:a9:05:b9:4b:21:16:8e:9a:e2:83:
         b0:31:b5:dc:c2:c8:df:a2:81:0e:47:dd:10:65:1c:ac:f6:8f:
         3d:8c:0d:cb:46:1e:a0:45:b7:4c:b5:be:30:48:e6:d8:68:ad:
         f5:54:93:c1:8c:72:99:4f:ee:0d:29:f0:ea:cf:15:e9:41:e7:
         25:ff:f4:94:95:b2:dd:a6:49:77:cf:87:f3:59:5f:b4:b8:e4:
         7a:99:ac:80:fb:b6:54:bd:0b:46:8c:83:ed:1d:d1:61:97:c0:
         1e:43:ad:56:2b:ed:93:c8:36:74:9e:6a:8d:02:5b:b2:00:95:
         06:01:0b:47:05:e9:c4:7a:28:0d:26:af:0c:58:26:d7:d0:06:
         1f:ba:ac:6f:a5:e5:f9:74:95:f9:a7:96:98:0d:2e:02:01:71:
         8d:63:05:3a:b0:7e:9c:dc:c5:fe:62:1a:fe:9b:f2:17:4a:2a:
         ff:dd:ff:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:46:40 2026 by rpki-client