Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2cc4b1a6-e697-3165-ad9b-4c1488c86e5e.roa
File:                     2cc4b1a6-e697-3165-ad9b-4c1488c86e5e.roa (raw, json)
Hash identifier:          o2j4whTvi7AKLyVOMiSPq4IVGGphYnoOGAMekMKs40g=
Subject key identifier:   BC:12:F2:44:42:29:DB:50:30:9B:47:B7:A3:1A:5C:45:56:98:55:38
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D4940BF94421DBB24C137C730
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2cc4b1a6-e697-3165-ad9b-4c1488c86e5e.roa
Signing time:             Wed 25 Mar 2026 13:46:03 +0000
ROA not before:           Wed 25 Mar 2026 13:46:03 +0000
ROA not after:            Tue 23 Jun 2026 13:46:03 +0000
asID:                     834
IP address blocks:        69.33.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:40:bf:94:42:1d:bb:24:c1:37:c7:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Mar 25 13:46:03 2026 GMT
            Not After : Jun 23 13:46:03 2026 GMT
        Subject: CN=9cd6ea33-6454-4c23-b702-33b483858ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:db:16:47:d7:28:37:02:45:27:0c:96:2b:2e:
                    a4:9e:4e:76:a4:fd:1c:bc:2c:2a:89:55:0c:3e:a0:
                    fb:ba:5d:6d:41:ca:6e:23:b7:24:ce:bf:98:ab:77:
                    7f:94:d3:44:b5:80:2f:a2:ad:4a:e5:97:06:f7:4a:
                    a8:42:9b:4d:f5:e3:7f:d9:b0:c1:01:7d:f6:22:ac:
                    99:40:d0:4b:df:f2:f8:d7:05:f5:3e:21:a6:40:52:
                    1c:e1:1a:1c:8e:6f:37:65:fe:61:10:48:95:0a:88:
                    a3:be:13:16:12:fd:5f:83:b8:0e:42:61:93:60:cc:
                    8e:36:0e:56:2e:22:50:48:b4:e1:1e:cf:0e:85:b3:
                    06:a8:9f:5b:0c:32:62:2e:05:e9:57:4f:55:9c:b5:
                    31:39:8d:dc:bd:31:b0:a3:6a:d4:53:7e:df:f3:17:
                    73:3b:50:2c:fd:f1:6e:a1:10:97:a0:13:d5:09:c7:
                    8c:a3:47:99:49:97:dd:c3:6a:5d:a8:30:f7:87:8b:
                    18:2e:86:93:4c:79:3e:26:0e:8f:c6:38:0f:c3:1a:
                    1f:5b:62:f4:f2:6a:e1:86:07:82:73:f4:ff:bb:a4:
                    d4:1f:3d:75:45:de:d0:d6:17:07:7e:65:22:44:56:
                    5e:05:3e:9c:4e:eb:17:31:21:99:ac:d1:10:f8:2f:
                    c5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:12:F2:44:42:29:DB:50:30:9B:47:B7:A3:1A:5C:45:56:98:55:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2cc4b1a6-e697-3165-ad9b-4c1488c86e5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.33.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:d3:fe:c3:37:3f:c7:1f:ea:6e:e1:3d:10:a0:2a:80:38:eb:
         2e:c5:0a:6e:fe:00:b7:7a:fc:f8:94:7f:51:42:dc:22:92:e5:
         96:51:3a:3d:93:9d:ec:54:88:46:7f:8d:a5:b3:93:ab:75:a1:
         17:a7:83:fb:be:3a:56:db:d7:27:f2:b6:0f:c3:95:81:6a:85:
         5a:8b:ea:fd:b6:69:38:81:a3:a5:59:86:e5:69:9d:c1:35:7b:
         72:b9:b0:fb:ea:32:10:69:39:eb:43:3e:dc:20:c3:f3:6a:d9:
         46:1d:ed:b2:d3:67:de:bd:b1:ae:fb:ff:a3:30:a6:c2:06:86:
         f0:b1:8e:ca:7b:f5:3b:70:be:bd:bc:1d:bd:81:2f:0c:70:c4:
         c9:ae:03:a3:c3:44:da:42:04:1f:21:50:13:90:c4:05:9b:fc:
         f7:61:6c:54:0f:e3:83:e4:a2:76:fa:93:bf:fb:b4:c3:51:99:
         6d:a9:7a:ae:c2:71:b7:96:3d:ca:eb:2e:df:6f:55:c8:12:74:
         cf:cb:18:14:ae:ff:57:5c:48:83:6c:25:6a:68:d3:92:de:c0:
         8b:47:5d:93:a4:c9:2e:d4:52:ae:52:5a:08:60:35:58:a1:04:
         4a:bb:9d:68:14:6e:78:59:b4:bb:a1:30:95:ed:c1:ce:88:28:
         13:13:83:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:46:59 2026 by rpki-client