Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/20fbb1c0-414b-3430-ae86-de61e4f95c4a.roa
File:                     20fbb1c0-414b-3430-ae86-de61e4f95c4a.roa (raw, json)
Hash identifier:          gi81VcSyPephsZRd+x5cPCz6ANJnYBi2FFQF5AG7Y4o=
Subject key identifier:   34:96:B8:F5:45:B0:28:BA:39:B7:91:0B:F2:DA:61:B1:E5:E1:7C:BE
Certificate issuer:       /CN=80688222-2583-4dac-a7df-1d78925c7b53
Certificate serial:       010D0C9F4328584E640F744665D858847056FB80
Authority key identifier: F9:A8:61:DD:F7:FB:C2:7A:E5:4F:EE:08:C6:6F:52:8D:6C:CA:5A:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/20fbb1c0-414b-3430-ae86-de61e4f95c4a.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     1640
IP address blocks:        69.57.96.0/20 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:74:46:65:d8:58:84:70:56:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80688222-2583-4dac-a7df-1d78925c7b53
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=05290a93-84df-4568-a3dd-e420a472dc94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:72:28:4c:e5:a1:fb:b5:58:16:19:97:3d:72:
                    5f:72:90:47:ba:61:7a:fe:ad:b9:a9:50:ea:e6:b3:
                    f1:df:91:d2:33:37:6c:38:5d:12:ff:40:86:a1:b5:
                    ad:93:91:04:15:9b:81:1a:d5:8c:bb:9c:5b:cf:69:
                    04:ce:ab:ed:f1:38:cb:a9:67:a2:6d:ec:d3:49:7d:
                    82:b3:00:0b:91:bd:1a:6e:69:e3:8f:b9:00:f6:48:
                    5a:38:d1:bb:33:b1:20:08:b3:35:c4:49:77:d7:87:
                    14:b0:d8:84:2b:04:1f:1c:14:92:42:24:92:1b:00:
                    ce:9d:5d:65:21:41:b1:9e:9c:19:8d:13:27:ec:fc:
                    b0:55:b2:bc:5d:5d:0d:7a:f3:79:23:a6:54:b9:ea:
                    9b:4d:cd:c4:21:72:c7:76:fd:82:66:98:37:81:dc:
                    35:c7:fb:14:fa:eb:84:41:e9:b3:74:47:f5:7c:18:
                    14:17:6a:c0:d2:e2:c8:48:d6:7d:86:06:6c:7e:3a:
                    f4:e6:19:28:fe:84:74:cc:7c:ce:35:04:f4:a9:04:
                    be:66:97:63:e5:32:a8:70:76:25:9b:fa:9e:c5:49:
                    01:fd:fb:e9:11:ae:c8:a6:97:f6:de:60:fd:5a:b7:
                    38:e2:d5:a4:23:e9:28:04:2e:13:80:62:12:5c:16:
                    f7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:96:B8:F5:45:B0:28:BA:39:B7:91:0B:F2:DA:61:B1:E5:E1:7C:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/20fbb1c0-414b-3430-ae86-de61e4f95c4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.crl

            X509v3 Authority Key Identifier:
                keyid:F9:A8:61:DD:F7:FB:C2:7A:E5:4F:EE:08:C6:6F:52:8D:6C:CA:5A:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.57.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:6d:29:7a:9c:a7:ba:ee:ed:53:22:27:c7:9f:a5:98:01:01:
         b7:20:ce:34:a6:04:12:6a:28:42:62:57:15:8b:23:e6:71:ce:
         d7:93:42:45:b4:18:26:6a:79:5b:19:a8:68:62:45:1c:41:c5:
         4a:10:63:d1:8f:3f:34:42:ca:fa:0b:a1:75:48:43:6f:0b:00:
         1f:1d:95:e6:3a:48:18:20:56:a3:f7:c4:83:c9:dd:c7:70:df:
         4f:83:e4:3c:ff:50:fd:ad:8d:52:56:8c:91:03:9e:2b:a8:00:
         0c:1a:a4:09:54:f2:0e:ec:69:ae:40:0b:98:cf:ff:cf:14:4d:
         e3:2a:73:00:29:cb:4b:71:75:51:a0:54:76:bc:db:ad:6f:88:
         82:23:fc:f5:24:76:9a:5e:5c:56:56:4e:44:a8:f6:8a:0e:71:
         ea:1e:9f:7a:17:5d:a1:08:91:82:da:76:01:ff:08:b7:20:87:
         d6:b5:e0:07:79:24:3e:2d:16:c7:5b:cb:8b:fb:db:c2:f3:e8:
         53:3c:2d:c8:85:05:58:f4:a3:55:bf:2a:d1:2b:3b:1c:e2:99:
         79:d0:04:97:f5:02:5c:c5:62:12:60:1c:44:d7:9e:0c:dd:3b:
         a6:18:e9:8d:a6:52:3b:e1:1d:1a:09:4b:4f:d5:64:2b:48:39:
         c2:4c:65:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:02:59 2026 by rpki-client