Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/8658f928-bb2e-351c-baa0-b043397f7b78.roa
File:                     8658f928-bb2e-351c-baa0-b043397f7b78.roa (raw, json)
Hash identifier:          Rt6HrrlNibTFalekptNWcto0ni5glmXe9kMwV/BBWhE=
Subject key identifier:   38:C2:B8:66:91:03:F5:B0:11:A8:CB:C2:3C:46:57:DC:A1:E7:D2:CF
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F4328584DADAAD46A17468A84012B5B80
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/8658f928-bb2e-351c-baa0-b043397f7b78.roa
Signing time:             Thu 30 Apr 2026 13:00:31 +0000
ROA not before:           Thu 30 Apr 2026 13:00:31 +0000
ROA not after:            Wed 29 Jul 2026 13:00:31 +0000
asID:                     13414
IP address blocks:        209.237.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ad:aa:d4:6a:17:46:8a:84:01:2b:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Apr 30 13:00:31 2026 GMT
            Not After : Jul 29 13:00:31 2026 GMT
        Subject: CN=a2f4def4-2428-4cc0-8675-197212869eb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ba:f0:5b:5e:26:71:02:1f:27:d2:cf:fe:55:
                    0c:92:62:35:02:74:52:e3:e0:27:5c:07:fa:60:65:
                    ef:86:53:86:04:3b:c2:0c:39:49:c9:1f:e5:4d:ba:
                    5e:8a:3d:82:1e:01:fe:a6:38:98:37:b2:cb:b0:f6:
                    63:3d:5b:cb:36:da:8a:b1:75:4b:c7:6c:d7:d8:37:
                    1b:f7:96:be:c2:18:67:6a:1f:33:5d:35:15:0f:d2:
                    d9:77:84:c9:02:35:4e:7d:5b:57:bd:46:fd:db:5a:
                    12:3a:7c:d1:8a:42:81:07:16:42:9f:3a:9e:45:b6:
                    14:d9:b2:23:af:08:80:b5:02:59:e0:28:fe:3f:17:
                    ef:80:a5:a6:36:4d:90:52:b2:7c:35:79:3e:a3:9f:
                    a9:2e:bd:cb:9c:a8:c6:fc:5e:b0:61:22:77:44:6c:
                    68:bc:60:6f:14:f5:7b:ac:6d:29:ca:79:87:5d:ef:
                    0d:a7:73:a4:97:0e:96:f5:2f:8d:68:df:98:f8:1b:
                    b1:78:e0:2c:6e:cc:45:ce:96:5d:7d:17:60:38:c1:
                    50:37:29:0f:3a:b2:04:2c:de:a6:a1:2b:cc:e9:df:
                    bc:3b:41:b0:ba:c3:78:c6:43:9b:da:90:e5:21:77:
                    1a:29:39:ef:a5:61:1b:39:4b:b2:1a:b6:f9:ae:4c:
                    a3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:C2:B8:66:91:03:F5:B0:11:A8:CB:C2:3C:46:57:DC:A1:E7:D2:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/8658f928-bb2e-351c-baa0-b043397f7b78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:06:37:c4:90:19:e2:2a:0b:10:c0:bf:57:0c:34:02:af:89:
         7e:26:22:38:10:a9:de:02:cb:79:fe:17:f7:2f:95:ef:8f:9f:
         ee:d5:9d:30:c2:c9:af:c4:3a:3e:db:41:fa:a2:90:f9:4e:7c:
         a9:9c:d4:95:06:96:b6:05:63:c4:fe:f5:1b:17:2b:06:b4:c7:
         e2:0b:71:fb:c1:57:34:7e:8a:14:11:f7:8e:fc:12:4d:ec:10:
         93:7b:08:5b:bd:be:30:94:74:90:3a:3a:2b:96:3f:11:59:fe:
         24:c8:37:d1:6a:92:f2:42:63:6f:03:5d:4d:70:0c:06:a8:89:
         b0:02:b3:d0:7a:a6:7a:37:99:b1:ef:c4:df:bb:d6:c7:ac:33:
         6b:b4:c7:21:47:9f:40:fb:55:03:97:31:c4:cd:a6:83:80:e3:
         4b:3b:f3:6b:03:cd:08:d8:c0:ac:3a:57:f6:61:fc:a6:be:67:
         20:05:9f:eb:c4:dd:ff:71:56:fe:1b:cd:1c:25:20:91:08:78:
         b5:d0:97:1c:e6:ed:65:65:0a:b6:5b:eb:d3:12:c3:49:30:23:
         dc:e6:0a:02:66:64:a9:4d:6b:bb:d2:06:2a:a3:ff:18:57:3d:
         31:b0:9e:a4:35:1a:2e:0f:ec:6e:c0:16:c7:31:89:37:63:64:
         8d:76:1c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:25:40 2026 by rpki-client