Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/bb7f9700-c6a6-368b-bb72-d227ee1e29cc.roa
File:                     bb7f9700-c6a6-368b-bb72-d227ee1e29cc.roa (raw, json)
Hash identifier:          hBrbUzaDONkkGVI3ueIlpCOolJL5lTjOJNVl1r+iEww=
Subject key identifier:   C4:36:99:4E:09:DA:DF:D3:EA:D7:4D:CE:43:89:47:97:7F:B2:12:E6
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584D24E124C7FA7D186D9244FE00
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/bb7f9700-c6a6-368b-bb72-d227ee1e29cc.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     14813
IP address blocks:        69.73.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e1:24:c7:fa:7d:18:6d:92:44:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=a21b1e6f-41e0-4317-8931-61e7b2636921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:35:bc:24:0f:25:e8:86:7a:1d:3d:dd:ad:37:
                    58:d7:87:bb:89:d1:bf:91:d0:74:93:a2:ff:b1:11:
                    e2:58:7d:cb:36:06:40:00:29:b6:50:bb:df:61:30:
                    aa:c7:97:0a:ee:41:8e:3b:77:56:49:0c:92:5c:96:
                    0f:0b:d4:6d:cd:94:07:37:1a:aa:62:42:38:9d:0f:
                    b8:3a:b9:bc:68:fa:51:e9:51:c4:2b:8d:f6:37:8c:
                    58:c9:03:e1:9a:c8:c8:d1:67:bd:ae:16:fd:fe:8e:
                    cc:19:27:95:63:15:38:76:a7:2b:e4:be:0e:2b:84:
                    38:9e:db:59:e8:13:b2:f6:2c:cc:e9:6d:6f:a1:d3:
                    db:9d:eb:e6:6b:61:4a:63:93:df:f4:19:ff:ad:8d:
                    68:27:c2:0d:47:f6:0b:b9:c4:f5:a9:e7:09:cc:0b:
                    f9:3b:b1:80:6e:7b:f6:4f:3e:6a:71:9e:21:a4:06:
                    75:2e:b6:f9:40:59:fa:55:3c:2b:0e:34:87:2f:50:
                    6d:1a:17:dd:b7:f2:bc:26:b2:df:03:9c:8f:13:bb:
                    3e:f6:c8:3b:c2:55:7d:ef:8c:04:92:92:8f:a8:64:
                    0d:60:c4:ce:67:85:b6:a9:75:67:12:f4:fa:ef:ba:
                    69:53:60:97:1b:06:63:cb:18:6b:52:4f:ad:39:9e:
                    17:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:36:99:4E:09:DA:DF:D3:EA:D7:4D:CE:43:89:47:97:7F:B2:12:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/bb7f9700-c6a6-368b-bb72-d227ee1e29cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.73.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:19:5b:7a:ef:86:1b:eb:e8:6c:28:38:c1:81:3a:22:65:5a:
         4b:1a:11:ed:6b:b6:84:3c:95:e5:0e:94:ca:bb:07:40:75:b6:
         36:84:ad:cd:6c:59:da:1e:9b:07:4b:0c:40:01:8d:66:00:1e:
         12:3a:aa:4a:fd:45:11:ac:56:86:70:f7:da:b3:8d:32:24:fc:
         bc:ce:dc:c9:92:51:2a:fd:99:db:a1:bf:7a:fb:65:26:77:34:
         8e:73:4c:87:a4:3f:94:e4:25:82:9a:20:ae:bd:fa:17:31:f0:
         b3:44:2f:99:fa:5a:6f:7d:7c:78:07:59:fe:e5:e4:4d:11:99:
         36:ee:02:89:89:b4:54:e9:ab:87:ec:b5:06:02:95:3a:56:f0:
         35:a3:c7:07:6f:7c:49:ba:b9:f3:1c:8a:43:9d:5d:27:e9:ae:
         e9:0c:84:35:07:eb:04:64:b0:02:97:84:1d:8e:81:73:db:24:
         04:dd:7c:d2:56:7f:8c:07:b8:a0:05:2b:c8:c0:fc:b5:5a:fd:
         9c:4c:fa:96:50:bd:f8:07:93:ba:54:65:51:fa:ac:8a:65:62:
         a2:a6:f4:83:05:c1:d4:ad:4f:17:86:d7:fc:d9:f8:9e:a7:ec:
         78:83:9a:12:78:da:f7:4a:08:c1:5b:cf:9a:43:25:75:10:c0:
         bb:e9:4e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:41:32 2026 by rpki-client