Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3/bf4a33e9-4250-32b5-92c8-5105e867adeb.roa
File:                     bf4a33e9-4250-32b5-92c8-5105e867adeb.roa (raw, json)
Hash identifier:          H5Aj4M22WA/w0PDatrt/QjaAAZBV6awCkYIJulwZbxE=
Subject key identifier:   3B:5F:AE:59:92:6A:7B:EB:4D:DB:2F:65:AC:77:1F:71:6B:FA:57:79
Certificate issuer:       /CN=6b72a822-0e8f-45f9-a612-463da7164bf3
Certificate serial:       010D0C9F4328584DBFD077ADF4B3E260731B6700
Authority key identifier: 58:37:4A:8C:C9:BD:00:03:69:BE:CB:5C:76:25:FF:E5:C5:06:5D:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3/bf4a33e9-4250-32b5-92c8-5105e867adeb.roa
Signing time:             Thu 07 May 2026 01:00:23 +0000
ROA not before:           Thu 07 May 2026 01:00:23 +0000
ROA not after:            Wed 05 Aug 2026 01:00:23 +0000
asID:                     6079
IP address blocks:        69.54.228.0/22 maxlen: 22
                          69.54.232.0/21 maxlen: 21
                          69.54.240.0/22 maxlen: 22
                          69.54.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3/6b72a822-0e8f-45f9-a612-463da7164bf3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3/6b72a822-0e8f-45f9-a612-463da7164bf3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bf:d0:77:ad:f4:b3:e2:60:73:1b:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b72a822-0e8f-45f9-a612-463da7164bf3
        Validity
            Not Before: May  7 01:00:23 2026 GMT
            Not After : Aug  5 01:00:23 2026 GMT
        Subject: CN=8f51579e-23e6-49ce-9593-de709eaa867c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:47:69:63:71:58:1a:a7:d2:f8:a2:fa:29:03:
                    dc:61:47:e5:32:15:ae:06:ca:67:4d:92:69:1f:06:
                    dc:db:b0:40:6a:c4:af:7e:a5:67:76:90:7d:81:44:
                    c5:27:44:1e:03:11:73:a5:95:2b:4f:cc:b0:e9:3c:
                    eb:fb:c5:22:e3:09:05:9e:85:25:c0:5d:14:f0:3d:
                    28:a3:80:76:06:be:42:2f:d9:2e:ed:e2:7c:49:8e:
                    08:f5:ae:ad:2f:4f:9c:86:e5:c3:f9:46:3d:6b:fb:
                    7a:88:dc:20:88:80:e9:b5:ce:6a:2e:2b:1a:bb:e1:
                    88:b2:0b:c9:99:65:49:56:c6:43:61:88:0f:2a:ad:
                    c8:44:16:1d:46:0d:69:80:d1:77:62:15:76:2b:9d:
                    33:cb:eb:6d:ea:d5:c4:06:b0:73:e2:d3:bb:d4:d7:
                    2a:db:db:99:62:5b:bf:c6:cd:04:c3:72:59:d1:89:
                    3a:54:99:cb:3f:2f:cc:3b:7c:a3:8b:1f:a0:2c:b3:
                    84:22:fb:ba:cd:db:d0:4a:bf:4c:cb:d2:3d:f3:bd:
                    c3:ee:79:48:e6:d9:79:cb:15:7b:9d:ea:b7:c7:7f:
                    29:19:38:25:55:6a:16:01:a9:3e:47:82:6c:38:0e:
                    c8:7e:13:44:2e:f2:43:68:82:cf:32:09:8f:c8:27:
                    09:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:5F:AE:59:92:6A:7B:EB:4D:DB:2F:65:AC:77:1F:71:6B:FA:57:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3/bf4a33e9-4250-32b5-92c8-5105e867adeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3/6b72a822-0e8f-45f9-a612-463da7164bf3.crl

            X509v3 Authority Key Identifier:
                keyid:58:37:4A:8C:C9:BD:00:03:69:BE:CB:5C:76:25:FF:E5:C5:06:5D:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.54.228.0-69.54.243.255
                  69.54.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:25:d0:4b:97:33:a3:f1:b2:aa:fa:11:99:9e:dd:30:ed:00:
         6c:60:4e:a0:a0:cd:41:d2:cd:f7:01:dd:f8:9d:15:12:0f:ce:
         2b:30:bd:98:9e:c2:9b:e9:ba:99:34:93:6d:c9:1d:fc:f0:b9:
         64:3f:0b:f1:a7:4a:db:ac:f9:df:6e:5b:b5:50:63:38:05:25:
         71:42:7d:49:b2:13:7b:61:f5:fc:1b:74:ac:7a:f3:18:b7:ad:
         b0:fa:a0:88:85:d2:8f:41:8e:49:0f:2c:0d:36:76:1f:44:30:
         74:6f:4c:14:cd:8d:0b:c0:34:8e:08:86:0d:f2:af:6c:fb:d8:
         50:d2:33:df:5b:e5:47:c6:bb:d2:ba:16:23:ab:e9:d6:3b:b8:
         e2:4b:19:cc:2f:cf:ee:81:d7:2e:64:8c:5a:f0:01:bd:90:fe:
         96:5b:24:f7:ba:ad:2b:a5:70:69:fa:33:f4:9a:0c:cd:80:02:
         e5:f9:9d:aa:ff:f8:7d:d5:7e:17:f9:74:79:94:78:f6:6d:a2:
         01:e4:0f:d9:e9:24:79:68:31:70:6c:27:08:7d:f2:23:3a:c5:
         d1:be:02:d5:85:e4:3a:67:dd:b2:da:5d:26:0d:5c:e1:75:76:
         a3:db:cf:61:bb:5f:3e:ec:c5:f6:34:42:df:3c:58:c2:cd:a6:
         49:78:5a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:32:53 2026 by rpki-client