Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/4335cab6-28e2-3612-ab77-05c42213c662.roa
File:                     4335cab6-28e2-3612-ab77-05c42213c662.roa (raw, json)
Hash identifier:          jRmssN5x57D7o7GUsig8HPHiJjAGWSXIAQfEY0Rhjw8=
Subject key identifier:   1C:B0:74:93:60:E3:15:55:87:51:DA:EF:CC:C8:13:DB:59:A4:C3:2C
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F4328584D24DF5A88BE22455CF37E1280
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/4335cab6-28e2-3612-ab77-05c42213c662.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     204800
IP address blocks:        69.48.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:5a:88:be:22:45:5c:f3:7e:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=1586915e-ae18-48e4-a151-5c772dad0dbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:07:b2:5c:68:17:49:5c:e2:3c:70:de:c8:75:
                    23:dc:e1:94:bb:07:86:fb:c8:2b:dd:94:4a:5f:98:
                    d8:25:c6:3b:64:e9:c7:ea:39:04:1a:b2:f5:2e:62:
                    9c:0e:8e:29:3c:49:c3:8d:8f:91:ae:be:f5:70:f2:
                    a6:7c:68:92:48:cb:13:a3:36:0f:8f:a5:11:51:20:
                    25:0f:56:f1:c4:da:c5:fc:36:2d:9d:d4:75:7a:5e:
                    ff:40:4a:53:f7:8c:4a:51:9c:8c:23:9b:3f:fc:31:
                    5a:e6:ea:77:0d:18:b5:89:16:24:66:5e:d0:c8:e7:
                    72:ef:89:83:62:2a:00:a7:98:61:cd:6c:6d:3e:a3:
                    20:87:ad:dd:1c:92:b7:11:b6:44:9c:e1:c6:74:d2:
                    17:12:38:d8:06:6a:d1:cb:9f:3e:1b:e3:55:9a:08:
                    e6:2d:6a:79:33:9f:ae:5d:a1:60:ae:35:c7:77:b9:
                    99:3a:24:cf:46:14:44:cf:07:a0:62:be:cb:be:d7:
                    01:92:9b:c7:5a:86:f6:15:32:a5:73:21:9f:a7:e7:
                    ba:fb:5a:17:b6:2d:46:c0:a6:01:72:85:74:8a:10:
                    3f:16:00:69:c0:f2:89:66:ba:06:09:ea:b3:59:67:
                    07:97:72:4d:82:d9:1d:d6:da:68:0b:44:13:c9:5f:
                    e2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B0:74:93:60:E3:15:55:87:51:DA:EF:CC:C8:13:DB:59:A4:C3:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/4335cab6-28e2-3612-ab77-05c42213c662.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.48.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:99:94:f9:fb:90:b4:42:96:12:b0:54:3f:c9:bd:fc:37:70:
         59:9d:c0:31:a5:82:43:85:c8:b6:1e:39:49:61:a9:95:59:f5:
         3a:c2:77:8f:77:0b:4d:88:d2:88:e8:0b:bc:4b:37:11:09:de:
         ba:7c:ce:fd:e8:3b:f7:02:8a:c2:50:06:6e:4a:4f:94:c6:0f:
         ea:c8:a8:45:3e:11:13:e3:f3:72:71:a4:7f:4e:e6:03:f4:ce:
         3b:66:a0:96:c7:4e:e6:94:34:48:2f:74:64:5a:7e:77:74:ae:
         48:95:a1:53:79:f1:5a:89:41:f1:0e:05:ac:1a:ba:8a:dd:0d:
         1d:5e:b5:8b:94:7c:f1:bb:a7:75:d9:f0:00:01:6d:92:c5:55:
         ab:ff:04:89:28:13:c9:d2:c0:f8:96:b1:cb:09:e1:06:3a:a1:
         85:81:48:7b:95:67:c2:b2:b6:06:13:84:de:f9:2c:53:be:8f:
         45:48:f8:ea:fd:17:60:bc:bb:99:9f:2b:04:31:29:5c:1f:38:
         06:ba:b5:ff:69:61:bb:c4:38:48:8f:8a:b5:e4:cf:99:05:36:
         73:49:a7:da:26:f4:f2:c6:39:3c:8c:71:3f:fd:6d:8a:1f:c0:
         19:23:a7:30:00:4d:06:04:5a:c5:d3:47:0c:6d:11:7e:9b:46:
         bf:11:e9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:21:11 2026 by rpki-client