Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/df01b1ca-f497-3c3f-a151-f7f07476ea52.roa
File:                     df01b1ca-f497-3c3f-a151-f7f07476ea52.roa (raw, json)
Hash identifier:          hOZF6+neywdiXBy5oW9XNd11ROIgyTsBAlM3z7dZWg0=
Subject key identifier:   67:79:DA:C6:84:18:3E:23:66:B0:3F:53:C7:CF:79:AF:68:17:59:C2
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F4328584D2A74E6E59244AD9947D30C80
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/df01b1ca-f497-3c3f-a151-f7f07476ea52.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     55293
IP address blocks:        69.48.136.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:e6:e5:92:44:ad:99:47:d3:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=193800dd-dc34-4086-a459-0c9e6c9286a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:42:d4:86:a2:a6:0a:6c:62:d9:9f:e2:45:66:
                    93:58:04:d5:4e:fe:17:8e:91:82:8c:1d:1a:36:b8:
                    3e:bd:42:c6:1f:e7:0a:e2:ea:11:8a:09:d0:9a:b2:
                    d8:1b:df:5e:4f:60:59:58:ab:0f:d3:2c:04:0f:15:
                    61:94:5d:24:0f:af:7f:b4:e2:bf:e0:41:28:45:76:
                    77:98:6a:3f:32:c5:ad:81:47:02:15:25:81:84:5a:
                    85:2e:48:32:ef:81:27:44:c1:6a:2a:56:a1:a9:fe:
                    c8:9c:08:95:c8:ed:2c:01:59:e7:97:25:21:16:67:
                    71:92:4f:cb:42:a8:6c:06:ac:8f:76:01:38:a9:70:
                    8f:b5:df:65:4b:a4:ba:f5:5c:cb:95:a9:86:d7:3e:
                    b6:8a:5b:96:20:a8:a7:d3:91:1e:5d:2b:33:8b:98:
                    9b:94:b1:6c:69:08:0a:1b:2f:33:3b:01:db:e7:a6:
                    c9:2d:af:67:1c:27:60:62:08:09:6c:0c:2f:e8:78:
                    ec:f7:35:32:84:7d:2b:53:c1:79:5b:4d:70:fe:11:
                    f9:29:a9:18:96:ce:6b:f0:a8:36:03:e1:0f:d4:19:
                    bd:dd:9e:66:f1:5c:52:4b:71:cf:c9:8c:3b:e7:a0:
                    78:c6:e8:2d:76:e0:82:ef:2d:94:de:01:fe:89:40:
                    6d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:79:DA:C6:84:18:3E:23:66:B0:3F:53:C7:CF:79:AF:68:17:59:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/df01b1ca-f497-3c3f-a151-f7f07476ea52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.48.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:6a:e4:df:2c:78:c4:fc:44:65:c8:56:c3:cf:b2:96:0d:29:
         4d:d7:4e:d3:dd:d6:0d:1f:6e:b6:6c:4f:d2:56:d3:28:ca:1c:
         6a:4c:b7:38:37:18:00:39:02:54:80:db:1d:c0:df:67:d8:08:
         6c:81:ba:60:e5:e1:79:71:94:32:81:6e:3e:25:e9:04:9c:ee:
         75:d5:74:c0:37:88:26:cb:2e:44:57:91:46:30:27:cf:69:8e:
         d2:67:d7:6e:42:06:32:6b:81:48:a8:8c:05:b3:fa:60:cd:8d:
         48:e2:6f:9b:dd:72:57:b3:04:ee:ff:71:1a:cc:98:44:f1:1e:
         d1:00:32:59:34:30:bf:2f:5a:85:ac:a2:f4:08:52:14:54:c8:
         6c:0d:03:be:65:4d:e0:95:d6:19:e8:e4:0e:34:ae:6c:2a:10:
         6f:a6:1c:28:53:61:04:38:0e:aa:bb:1b:8d:75:52:02:ed:d6:
         68:35:f0:a5:ac:00:da:af:4a:40:05:d5:4d:55:9f:df:10:fe:
         2f:37:8c:0c:ab:2b:b6:7e:4d:54:c6:fe:ba:47:a2:c1:4b:34:
         7e:25:94:a6:15:d6:9c:c2:85:e7:88:aa:84:1e:6e:1c:63:e2:
         18:97:2b:8a:b3:20:35:66:08:26:5f:ce:9a:9c:cc:44:b1:5c:
         ce:06:af:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:07:24 2026 by rpki-client