Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/128f2aa4-f0f9-3c94-a004-3a8659e11d8a.roa
File:                     128f2aa4-f0f9-3c94-a004-3a8659e11d8a.roa (raw, json)
Hash identifier:          Tt2g4GqZhD6zxFU57/jn+MOWp7QVq04Yd8cJomMWnfQ=
Subject key identifier:   32:3C:C0:5B:59:A5:FF:BA:D9:C3:97:3E:51:64:A4:05:FE:3B:A6:31
Certificate issuer:       /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Certificate serial:       010D0C9F4328584DB4A5835DB813E4D734604200
Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/128f2aa4-f0f9-3c94-a004-3a8659e11d8a.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     27385
IP address blocks:        69.67.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:83:5d:b8:13:e4:d7:34:60:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=7e9903d4-1b27-469d-916a-8653e183a37f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f5:ce:70:53:8b:86:f8:20:20:83:15:88:b3:
                    a9:e1:23:6c:76:2f:26:64:9d:8a:d2:55:85:54:5b:
                    32:3f:71:4e:9a:50:2a:67:89:25:7e:58:d8:21:45:
                    e4:30:a8:6d:5e:91:5d:f7:3b:7b:0d:23:11:62:23:
                    78:ab:d3:dd:0f:bb:28:ee:f3:01:33:e4:d7:ba:ef:
                    b4:9e:cd:9b:04:11:ee:9c:33:94:c6:6a:51:01:a9:
                    4d:6f:a1:a8:55:f2:b7:b0:bd:d0:a2:eb:68:77:00:
                    a1:8f:f6:b4:8d:a6:e0:c4:73:02:c7:09:03:0d:cb:
                    ee:33:57:0b:07:70:53:19:dd:48:88:97:2a:f3:7c:
                    d8:fc:43:b1:c8:98:d2:0a:75:e2:1e:1a:d9:1d:d2:
                    34:f2:7b:49:72:ca:6b:d5:a9:39:75:a9:bd:97:5a:
                    71:11:c8:a4:0f:d6:a6:f3:98:18:e2:fa:02:1d:69:
                    72:a6:de:a7:9f:2e:68:e4:dc:1d:fb:d2:fb:b8:6c:
                    d7:e3:fb:0a:11:af:d8:3a:24:11:5a:97:a8:62:54:
                    da:52:54:ce:eb:e4:01:36:06:2c:17:c0:b5:df:e3:
                    73:f8:dc:2c:5a:ee:d2:fe:77:e2:01:51:3a:8c:f1:
                    1c:fb:92:0f:04:64:b8:d4:76:5e:52:60:0b:45:f2:
                    ff:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:3C:C0:5B:59:A5:FF:BA:D9:C3:97:3E:51:64:A4:05:FE:3B:A6:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/128f2aa4-f0f9-3c94-a004-3a8659e11d8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl

            X509v3 Authority Key Identifier:
                keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.67.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:c1:51:7b:d4:8b:61:d0:3d:a6:1a:d7:92:60:95:f0:c0:c3:
         65:ff:1e:71:cb:44:a2:29:b7:25:bd:df:74:48:f4:ff:bd:40:
         1d:fe:9a:22:7e:f2:60:ce:53:c4:f7:24:8b:c5:5d:96:15:d9:
         b4:77:fa:90:73:0f:a7:9d:fc:db:79:a0:db:da:7f:5b:0c:38:
         94:98:bf:04:ce:62:5b:e8:ce:a5:bb:5f:0a:0f:13:3a:12:19:
         c2:bc:20:35:d9:f4:47:c7:75:54:d0:00:80:32:98:4d:ec:bb:
         d4:6c:95:07:fe:f6:c7:92:25:fc:99:e8:93:19:36:e3:63:50:
         9c:17:a2:1e:1d:95:f1:1f:b6:a6:52:17:fb:08:13:6c:4c:2a:
         a0:12:ba:e9:3f:7a:84:c9:9c:d6:3a:c6:4f:89:d3:fd:6e:73:
         72:4e:9b:af:01:24:5f:65:a5:17:c1:e0:0a:ff:a9:2c:f9:a0:
         3c:4d:35:26:f4:ed:a4:7e:f0:5a:69:e2:15:0b:e5:05:84:4f:
         85:08:31:a4:dc:c2:ce:56:c9:15:51:bf:fa:f7:3f:94:75:77:
         c4:56:2d:4f:49:d3:66:76:83:de:d9:ea:21:d5:03:e8:36:9f:
         3e:71:11:08:02:75:72:49:90:96:8d:4c:5b:65:d9:53:3b:53:
         ca:c8:20:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:11:04 2026 by rpki-client