Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/6b62e253-dcd1-330e-8f72-929110ff0965.roa
File:                     6b62e253-dcd1-330e-8f72-929110ff0965.roa (raw, json)
Hash identifier:          yX78qSvEOtHXh7TA3pOmdsd9ZdIaYWhYAPYazID8Hj4=
Subject key identifier:   3E:1D:1E:73:9D:78:F6:3C:F1:C4:88:54:B0:A6:56:F3:BE:4D:A8:86
Certificate issuer:       /CN=00423c2c-0dc2-4b33-b865-92ccbfdb07dd
Certificate serial:       010D0C9F4328584E3E5F5447ABDEE88FA1CE3680
Authority key identifier: F3:C0:69:D2:47:79:65:94:E1:58:B5:2D:72:D5:DA:AA:39:6C:97:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/6b62e253-dcd1-330e-8f72-929110ff0965.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     16527
IP address blocks:        69.166.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:54:47:ab:de:e8:8f:a1:ce:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00423c2c-0dc2-4b33-b865-92ccbfdb07dd
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=deb443d6-99ff-4999-a585-0d8a18076927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:4f:fd:26:27:97:9a:1e:fd:36:25:b9:9e:36:
                    0a:85:74:14:0d:ef:10:63:46:d8:56:ff:db:97:e6:
                    c7:cf:ff:87:79:d4:f9:73:c4:1f:81:e0:22:e3:45:
                    8c:cf:3d:c2:08:01:b3:e3:59:f1:07:e9:75:eb:07:
                    5d:df:96:20:b0:6e:de:22:9b:9a:fb:b2:21:c2:3d:
                    f6:3f:96:42:ce:4a:56:2d:b2:98:8a:0f:13:3a:73:
                    80:ee:d4:61:d8:e0:bc:33:60:1c:09:e0:7a:be:1b:
                    85:de:f2:2c:ab:87:71:ad:53:e7:4c:dd:ba:70:0f:
                    f6:13:ac:38:e4:a5:b8:22:27:fe:b8:43:98:c2:3d:
                    4f:fb:8a:d9:d6:e5:41:29:5a:28:ab:47:4d:d6:88:
                    41:12:d7:c1:d2:fe:16:ff:65:05:9e:b1:a7:c2:a5:
                    d0:bd:71:3d:d9:c7:52:49:45:c5:ea:3c:96:af:8f:
                    cb:92:31:e8:3a:d2:49:eb:bd:75:24:1a:51:71:83:
                    73:bc:73:33:fa:cb:7b:e2:3c:e1:fc:41:cd:b8:3e:
                    9c:f4:32:02:3f:01:40:af:3e:36:0e:af:32:6a:33:
                    2c:4d:c0:ec:9e:12:67:c4:5d:68:38:f1:cb:25:94:
                    d7:2c:aa:e9:33:69:60:c7:c2:a2:7d:9b:eb:2f:ec:
                    fa:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:1D:1E:73:9D:78:F6:3C:F1:C4:88:54:B0:A6:56:F3:BE:4D:A8:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/6b62e253-dcd1-330e-8f72-929110ff0965.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.crl

            X509v3 Authority Key Identifier:
                keyid:F3:C0:69:D2:47:79:65:94:E1:58:B5:2D:72:D5:DA:AA:39:6C:97:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:13:b5:6c:d0:23:55:a3:41:5c:d8:42:7c:64:f2:49:93:ed:
         45:a6:4b:11:78:f6:7a:cb:17:cb:e9:2d:26:6b:5e:62:69:93:
         3b:65:6f:c9:ba:fa:b2:05:5b:48:e3:84:47:a1:91:44:bf:fe:
         11:ec:60:06:fa:06:12:69:dd:5b:77:34:80:56:8c:b2:d9:e2:
         b3:a1:fd:30:59:79:a4:f0:23:78:e9:7e:12:9e:81:43:ed:17:
         36:87:c3:4f:0e:10:39:f0:01:95:1b:64:a1:91:d9:8d:c4:eb:
         bf:8c:b5:69:fb:57:3d:8b:4b:92:75:ef:4e:6a:db:23:78:68:
         39:91:da:35:d7:c0:4a:66:89:c0:0a:8c:84:84:ba:c3:7b:ec:
         ed:53:bd:26:e9:e0:41:ad:f6:6d:30:f9:f1:3e:98:1a:01:71:
         2a:1f:81:14:0b:ef:48:da:97:0f:69:f2:50:67:4f:26:13:32:
         f7:5a:70:d1:d0:24:91:ed:d4:23:fb:4e:b7:d2:13:19:6d:d9:
         0d:d8:61:f7:0f:41:b6:3b:40:65:55:b1:5d:fa:08:53:39:49:
         ba:6b:36:89:80:e9:0a:1f:54:16:b2:5e:e2:d0:54:7e:93:fa:
         7f:90:29:8b:57:a4:e0:21:ea:9f:eb:2e:bb:b5:19:92:f0:67:
         9d:ca:ff:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:36:27 2026 by rpki-client