Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/7f657ef3-b6c0-309f-ad5a-e936efa5fe63.roa
File:                     7f657ef3-b6c0-309f-ad5a-e936efa5fe63.roa (raw, json)
Hash identifier:          1r+vdv4IbY782GE+nQGLlWOSDKRRjJVTrhGCep7U5fg=
Subject key identifier:   8A:0F:8C:28:A6:54:29:18:1E:00:1D:C1:84:8C:BB:32:03:19:9B:F3
Certificate issuer:       /CN=86fea470-b380-45c0-9f6b-033b7d884388
Certificate serial:       010D0C9F4328584D386A629D13D9F0AE77ABC020
Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/7f657ef3-b6c0-309f-ad5a-e936efa5fe63.roa
Signing time:             Thu 19 Mar 2026 13:00:41 +0000
ROA not before:           Thu 19 Mar 2026 13:00:41 +0000
ROA not after:            Wed 17 Jun 2026 13:00:41 +0000
asID:                     208208
IP address blocks:        69.42.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:6a:62:9d:13:d9:f0:ae:77:ab:c0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388
        Validity
            Not Before: Mar 19 13:00:41 2026 GMT
            Not After : Jun 17 13:00:41 2026 GMT
        Subject: CN=dae62dcd-a853-4234-b85b-9c69cf34e368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:75:e7:8b:73:b8:00:b8:60:04:90:71:f9:2c:
                    ed:97:42:9e:27:2d:16:c9:42:59:ad:e1:7e:08:51:
                    cc:96:f2:09:6e:33:6e:11:4d:68:ce:27:af:db:1a:
                    e5:c4:e7:99:9b:6d:20:f8:4b:5d:15:47:3f:72:a7:
                    74:ad:e3:90:12:f9:7b:64:f6:7c:bd:bc:21:ee:88:
                    c1:2a:3c:85:c9:74:9e:ec:be:bd:c0:c1:50:cd:18:
                    11:93:e5:e7:46:be:7d:1d:f7:19:8c:29:a5:d8:a5:
                    a7:fc:f1:c5:93:25:94:86:c9:bb:92:55:bf:43:56:
                    8e:13:26:3d:2b:a0:2f:f5:7f:47:d1:b8:98:1f:be:
                    99:80:5b:df:50:08:c2:c5:e8:9c:55:c1:5e:1f:96:
                    5d:ad:cc:b6:58:7a:1d:b1:97:6c:c8:a1:08:a7:ab:
                    6a:7a:ed:0f:91:9d:4d:8b:80:23:cb:b2:85:ef:2e:
                    29:7b:39:3b:6c:cd:68:0f:62:c3:ee:23:e9:68:ec:
                    bb:46:df:4d:64:1f:f9:d2:93:89:ca:2d:dd:9d:41:
                    65:7b:07:35:79:bd:f9:f6:eb:ab:87:48:e7:5f:fd:
                    e2:87:4f:99:ec:33:c3:6f:0d:12:2a:c5:d0:c6:01:
                    63:e8:ff:20:ca:96:4f:28:be:d0:a3:b9:a9:50:9c:
                    28:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:0F:8C:28:A6:54:29:18:1E:00:1D:C1:84:8C:BB:32:03:19:9B:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/7f657ef3-b6c0-309f-ad5a-e936efa5fe63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl

            X509v3 Authority Key Identifier:
                keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.42.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:b8:e6:47:76:d7:0b:cc:e2:4f:4b:06:b9:23:7b:fa:d3:0b:
         e0:d1:c1:ee:7a:d7:2a:9a:9b:c6:01:67:51:71:68:7a:25:c9:
         ca:fa:a7:de:c9:2f:bb:e0:d6:29:b9:a5:2e:61:ad:17:00:23:
         43:0d:e0:4d:36:04:31:a2:6c:5e:e9:16:7d:ef:a6:f3:d9:34:
         0e:2b:ba:1e:bc:3e:4e:34:81:94:9d:d4:7b:fc:40:a5:5b:19:
         22:c0:5f:cc:2b:48:3d:80:fb:89:f4:c0:43:2d:6c:87:0c:35:
         60:07:d9:1c:df:36:0a:51:6b:8a:81:c8:be:e6:b4:b4:0e:8c:
         6f:a6:52:8e:b4:1a:40:af:58:e7:1e:a9:45:96:86:5b:50:4f:
         22:d3:48:81:cd:b6:c6:0d:1c:07:83:de:e7:45:9c:9e:7b:49:
         b7:72:5b:0b:ab:b0:0b:29:2e:ae:ec:4d:cf:7c:25:6b:38:b9:
         3f:14:8f:f7:47:8c:ee:bb:6d:8e:5b:63:e6:d7:de:a2:06:c7:
         d8:9d:de:98:e3:35:d8:b7:71:b6:54:30:46:1a:ed:05:a8:11:
         c1:d0:7b:c2:70:72:78:40:b1:be:27:a1:f9:0c:b1:6a:e3:62:
         f2:30:1e:09:65:73:a1:bb:5b:0d:02:cd:44:3c:6f:f7:bf:d3:
         1e:eb:36:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:43:41 2026 by rpki-client