Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/31a6c561-8ca8-3107-8734-271ca8468d3b.roa
File:                     31a6c561-8ca8-3107-8734-271ca8468d3b.roa (raw, json)
Hash identifier:          wV4hrbQNnyspcxh5PT1kqsQrUvrByXDJVopg/tXNiSM=
Subject key identifier:   62:C3:D9:41:CD:D1:96:89:E3:76:52:E2:84:83:54:25:B5:C0:AC:54
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584DADAADF397C8F4F3C71E29600
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/31a6c561-8ca8-3107-8734-271ca8468d3b.roa
Signing time:             Thu 30 Apr 2026 13:00:31 +0000
ROA not before:           Thu 30 Apr 2026 13:00:31 +0000
ROA not after:            Wed 29 Jul 2026 13:00:31 +0000
asID:                     0
IP address blocks:        69.36.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ad:aa:df:39:7c:8f:4f:3c:71:e2:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Apr 30 13:00:31 2026 GMT
            Not After : Jul 29 13:00:31 2026 GMT
        Subject: CN=bba61503-4aeb-4548-a791-555a2deeec21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ae:8d:0f:e3:e7:50:b8:af:f6:60:89:49:9a:
                    27:57:54:50:11:2e:4c:80:0d:d8:0e:95:20:a7:ef:
                    82:57:39:4e:59:ce:52:5f:5f:1b:94:6b:da:44:66:
                    52:e8:f6:13:9d:24:bb:e0:2f:88:93:e7:0a:66:0c:
                    33:44:c6:0d:71:0d:f4:1a:a2:9b:68:94:c1:0e:78:
                    49:73:02:90:f0:81:66:e9:8e:8c:6c:40:f2:0f:08:
                    28:5b:c9:8a:54:8d:12:c0:7e:6e:ad:50:9f:ea:ca:
                    b9:96:aa:2c:38:2f:60:49:dc:98:a3:20:d4:82:8e:
                    f0:c1:2e:e0:0e:b6:90:74:57:95:95:32:32:14:4f:
                    1a:47:a2:40:57:f1:f6:90:0f:80:a8:15:c4:9e:46:
                    de:3c:29:d7:13:53:87:8d:00:b0:14:47:c3:04:0f:
                    67:4f:38:2d:a6:6e:e0:4b:cb:d6:32:fd:fb:95:64:
                    45:29:85:2c:cf:52:a9:e2:2a:b5:b5:9e:b4:c8:41:
                    ca:3c:26:18:d6:58:91:46:65:a4:25:e8:46:af:12:
                    09:68:c8:9a:83:e4:54:3e:f4:01:2b:3a:94:bb:86:
                    d1:b7:26:de:a9:bf:c9:b1:57:aa:08:4d:5f:98:9f:
                    e3:1b:13:49:64:c7:35:f8:94:f3:d5:d8:14:6d:67:
                    83:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C3:D9:41:CD:D1:96:89:E3:76:52:E2:84:83:54:25:B5:C0:AC:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/31a6c561-8ca8-3107-8734-271ca8468d3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.36.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:ab:ac:9f:13:79:0f:91:72:be:e8:ee:bb:fc:e5:dc:5d:9e:
         e9:87:df:b0:24:3e:84:97:2c:8a:89:12:d3:c0:a0:61:7a:2f:
         58:a6:77:72:f1:43:d6:d1:a2:82:ea:8d:a9:92:94:56:ca:cf:
         11:5d:64:4a:d5:12:1b:62:3d:f2:20:1e:68:23:d7:d9:5e:7c:
         c5:db:e6:dd:55:ed:3e:37:92:d8:a2:d7:0d:29:53:d4:b0:b9:
         09:f3:86:11:68:14:01:52:74:f5:8f:2e:87:4a:15:c6:59:bb:
         97:1e:ae:df:96:83:a9:5d:ca:0e:3e:6b:36:a9:0b:a9:e1:bc:
         20:46:06:2b:f6:03:e2:e9:5a:74:08:0b:fc:a1:db:a3:53:a9:
         30:5c:fa:97:86:c6:64:7a:61:40:5a:bd:5f:f5:f5:ca:4a:39:
         a9:f0:0c:cd:39:3b:22:a5:86:aa:ed:db:1c:52:9a:ad:aa:c4:
         72:dc:44:96:d2:77:57:4d:43:43:98:ad:3c:49:c7:15:e4:78:
         e2:8c:cb:67:64:b9:eb:d6:31:c5:c9:96:42:71:c6:de:9e:39:
         77:33:8f:10:00:07:0d:e6:7f:73:d7:47:03:d2:93:84:bc:83:
         80:dc:e4:f0:a9:62:4d:60:6f:cb:17:06:10:dc:9e:13:56:35:
         82:45:ee:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:39:11 2026 by rpki-client