Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/d9088f97-08bc-3e77-b907-58112fed375c.roa
File:                     d9088f97-08bc-3e77-b907-58112fed375c.roa (raw, json)
Hash identifier:          Rgy3bOoAHBUu8gQeA2iE0HBv12PecBgEgjH3pwAAAaQ=
Subject key identifier:   00:55:9C:E5:BB:16:28:17:4D:7D:C5:78:21:88:C4:FB:18:54:33:BF
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584D24DF7B5D7B2CF55F1121AC00
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/d9088f97-08bc-3e77-b907-58112fed375c.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     14813
IP address blocks:        69.80.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:7b:5d:7b:2c:f5:5f:11:21:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=70d81dec-d98d-4e38-ad9f-4a2a6dc83550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:53:5a:c3:16:6c:22:2a:36:92:f8:7a:a2:ba:
                    70:a5:41:f8:58:ca:db:42:97:93:87:32:c9:97:e2:
                    86:86:98:5b:ae:9a:af:3d:3e:71:e4:90:42:5d:5f:
                    99:58:c2:23:c5:74:db:b2:ab:f2:5d:26:9e:7f:dd:
                    b9:dc:c5:f5:b5:c2:f5:95:3a:bd:15:86:3d:82:be:
                    32:3b:df:f6:cf:08:8b:24:a7:c8:b7:bf:0f:af:8b:
                    6c:cc:03:c2:b7:67:13:f5:78:82:f5:de:1c:ad:a5:
                    5e:a9:75:ef:b9:b2:76:32:b4:4f:d9:60:2e:6f:29:
                    2a:c9:b9:62:14:77:8b:0f:a3:9d:8d:89:bf:92:ef:
                    5f:cf:9a:d3:0d:79:f0:4b:35:03:e3:aa:2f:ea:a5:
                    68:1b:cc:f8:08:28:d0:51:66:ba:ee:4e:ab:f9:1e:
                    e8:a9:12:6e:57:1d:2c:34:5c:f7:59:bb:22:4e:6d:
                    03:24:70:7c:d5:8c:90:4b:a9:b6:8f:d5:ce:e9:ac:
                    7a:50:0d:2b:cd:a3:00:45:14:19:db:b4:2b:d7:0f:
                    62:ba:53:8b:b9:42:40:ba:44:7e:f9:5c:27:24:c5:
                    24:3a:17:c9:04:94:ca:a8:a0:bd:db:e7:5d:e8:a0:
                    0a:2f:12:9b:0b:4e:44:23:91:ad:68:cc:bf:e1:56:
                    d1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:55:9C:E5:BB:16:28:17:4D:7D:C5:78:21:88:C4:FB:18:54:33:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/d9088f97-08bc-3e77-b907-58112fed375c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.80.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:f0:fa:9e:aa:4d:f8:d5:38:34:ba:00:6c:4f:3d:2b:6f:94:
         e5:c4:24:07:69:75:a4:6f:dc:0d:a3:09:7f:79:ff:d7:36:e3:
         15:30:9f:80:de:59:15:af:50:f8:27:72:91:03:32:f6:ef:44:
         a8:2c:fa:e7:ea:e4:7a:91:b6:e0:8d:a8:af:7d:ea:8b:c9:14:
         b0:09:78:03:ef:54:4f:9e:81:76:ff:70:59:27:6d:d7:d9:11:
         da:fe:47:a3:b8:46:5c:b6:de:8b:09:27:f2:71:92:d2:e2:48:
         f1:8f:24:0c:e7:df:bb:3f:71:e9:d9:ff:db:bd:90:fa:b9:60:
         30:54:ef:34:af:9f:2d:fd:cc:3c:13:33:b0:0f:b0:fe:28:13:
         a1:50:08:da:2f:08:59:00:9e:df:3a:ed:74:a4:67:99:c4:9f:
         b7:cf:b9:eb:ed:24:de:93:79:09:f3:69:e3:7d:77:c2:59:d7:
         3e:7e:8e:7b:83:cc:81:1c:70:e0:ac:e6:38:98:4e:c4:1c:83:
         80:06:90:62:b5:ab:1a:bf:bb:2e:40:9d:5e:31:79:7b:c5:91:
         ba:56:2b:ef:1e:e6:7e:64:1c:cb:ec:da:43:f1:dd:01:22:60:
         24:ed:6b:0e:dd:83:4b:6e:e2:c4:9a:d0:32:c2:72:bc:44:74:
         7f:09:02:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:50:47 2026 by rpki-client