Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/a6c31ff4-a9a1-385f-94c0-d2358d9c179f.roa
File:                     a6c31ff4-a9a1-385f-94c0-d2358d9c179f.roa (raw, json)
Hash identifier:          TZXYZq7WpJJ2G+XvfibP9Mds/ayAgeskz4xVXUBaztk=
Subject key identifier:   F2:81:4C:BF:C5:22:E8:E1:0A:6E:69:E8:7B:3D:6F:EE:C5:DD:95:08
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584D24DF83F1879CD58FA4822540
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/a6c31ff4-a9a1-385f-94c0-d2358d9c179f.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     14813
IP address blocks:        69.73.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:83:f1:87:9c:d5:8f:a4:82:25:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=3c26bf67-bfb2-46c5-8f21-0d5898a6c3c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ba:0b:b2:d1:ce:dc:18:79:23:b3:83:bb:b3:
                    f9:46:06:12:5a:f4:7d:a0:be:d5:c2:45:35:f7:c3:
                    54:29:03:21:b7:99:27:29:77:45:8e:8d:7e:6c:17:
                    d6:62:21:76:94:a9:da:a6:b3:3b:90:f7:31:ed:8d:
                    6b:d9:e4:5d:d2:b8:7c:aa:cf:38:76:08:f8:8f:b4:
                    43:dd:a0:a5:a2:7d:f7:86:21:e9:5d:ed:24:e6:b3:
                    64:28:05:74:98:91:17:04:db:30:2a:fa:b7:dc:ca:
                    60:67:3e:5b:8f:c3:df:6f:13:4c:d2:38:46:e4:97:
                    45:c5:7c:17:36:b0:1b:86:95:a4:4c:23:5d:06:a5:
                    70:c5:05:76:29:36:8a:ba:32:21:94:f3:d0:7f:8e:
                    a6:30:9d:ba:82:d0:7c:46:d6:66:ae:66:ef:99:71:
                    57:c1:d7:3b:de:a9:f6:b2:03:2a:98:04:b9:91:9f:
                    17:80:f8:3f:39:5f:87:2c:2e:4d:5f:b2:aa:9d:b8:
                    76:31:5d:22:72:ed:c1:72:e2:7a:4b:14:00:4b:0c:
                    54:e4:4e:64:3b:b9:1a:38:24:2a:6a:cb:04:2c:74:
                    e8:07:31:21:0e:b8:43:af:0e:47:e3:ea:f0:91:e6:
                    14:3e:ea:9f:82:f1:b8:b6:b9:ee:8c:17:d6:56:18:
                    08:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:81:4C:BF:C5:22:E8:E1:0A:6E:69:E8:7B:3D:6F:EE:C5:DD:95:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/a6c31ff4-a9a1-385f-94c0-d2358d9c179f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.73.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:d3:6d:41:e5:54:be:86:c2:10:d0:e9:22:92:7d:19:1b:d7:
         9a:7c:3f:0c:c9:b8:cf:36:1a:36:0d:28:7d:a5:20:b3:67:e3:
         49:7b:ac:3c:cd:2e:cb:36:21:c4:ee:76:10:08:39:e4:0b:2d:
         e0:6f:18:61:80:cd:a5:c0:c6:f3:fc:61:be:02:78:25:4a:a8:
         35:6b:85:20:d9:5f:e5:b3:e0:47:2f:1e:48:2e:97:87:30:8f:
         e4:ad:ea:51:58:58:b4:a7:87:1d:4b:12:72:25:9e:97:b2:2e:
         2d:01:33:25:79:f3:18:26:04:e7:0e:ae:28:f9:21:e8:ae:27:
         ab:5f:06:98:91:5e:d3:7a:f8:dd:7d:6d:c6:18:b4:5f:31:52:
         b2:68:2c:d7:34:94:4b:fe:51:d9:9d:b4:b2:fc:3d:29:d2:b0:
         fb:59:9e:90:e7:ca:22:d9:9f:a8:3b:20:b9:a6:da:49:15:d8:
         80:fe:95:f7:17:3d:b0:2e:d0:18:49:e9:b6:fa:81:f3:10:97:
         0d:a8:41:53:78:9b:ab:0d:9b:a6:d5:95:66:16:06:f6:5a:fe:
         87:b7:05:70:7f:de:cf:f2:a4:76:90:a3:6a:0c:6b:75:de:9d:
         20:ab:0f:71:22:69:8f:2b:9d:24:f8:b1:5b:6f:5a:86:83:f2:
         01:38:bd:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:23:27 2026 by rpki-client