Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/684a9134-a16d-336c-8191-a5944e08412f.roa
File:                     684a9134-a16d-336c-8191-a5944e08412f.roa (raw, json)
Hash identifier:          k5i7G/dSG+bt/IkG+g8+xBue4dYvlmkyCQcO7fbELS0=
Subject key identifier:   A1:A4:53:4C:39:28:F0:8D:4E:33:9A:B2:0E:BA:41:DC:2B:8B:03:13
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584DBE6B32407F331EBE102F9480
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/684a9134-a16d-336c-8191-a5944e08412f.roa
Signing time:             Wed 06 May 2026 13:00:30 +0000
ROA not before:           Wed 06 May 2026 13:00:30 +0000
ROA not after:            Tue 04 Aug 2026 13:00:30 +0000
asID:                     21859
IP address blocks:        69.17.5.0/24 maxlen: 24
                          69.17.11.0/24 maxlen: 24
                          69.17.12.0/24 maxlen: 24
                          69.17.13.0/24 maxlen: 24
                          69.17.14.0/24 maxlen: 24
                          69.17.15.0/24 maxlen: 24
                          69.17.69.0/24 maxlen: 24
                          69.17.70.0/24 maxlen: 24
                          69.17.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:be:6b:32:40:7f:33:1e:be:10:2f:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: May  6 13:00:30 2026 GMT
            Not After : Aug  4 13:00:30 2026 GMT
        Subject: CN=fb626aa5-29f6-4ffd-9450-f0c8ca6e87f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:08:fc:a3:90:16:85:19:66:3d:66:c8:8a:c1:
                    de:e7:c9:4c:ae:88:67:04:90:75:d9:38:8b:05:89:
                    5a:52:ff:44:65:8e:63:b0:94:ac:4e:d9:cc:f3:6d:
                    f6:ab:f4:8f:14:3c:7d:c9:41:9a:d7:a5:3d:de:80:
                    39:56:8f:e8:16:df:d6:e3:e5:7e:7e:fa:66:75:c5:
                    ee:60:d1:ef:84:e5:8a:9e:20:52:4b:3f:cf:47:43:
                    fe:7c:8b:03:81:c1:46:19:95:02:9a:04:fd:cb:a7:
                    b7:1c:c8:5d:13:a6:89:d3:a7:8b:72:38:97:f5:59:
                    09:eb:aa:d5:03:70:c4:9f:e1:32:12:8f:77:46:98:
                    71:bd:e1:46:fd:0d:13:d9:c6:58:8b:8b:6c:28:d7:
                    b6:07:15:bc:f0:bd:2e:fc:d9:50:db:1a:b2:56:ac:
                    85:12:32:44:3b:c3:ae:16:a7:c0:96:ff:8f:a0:14:
                    55:f8:bc:2f:2c:b6:36:2a:c3:6c:83:2c:9f:9d:04:
                    eb:35:a7:09:f6:6e:c2:59:9f:7f:97:e5:7e:45:51:
                    5c:37:ff:3d:c5:e4:cf:14:b0:0e:cb:78:81:b1:fb:
                    bf:08:06:15:c9:0d:4c:f1:d1:cf:67:64:5c:d5:3e:
                    4c:b8:a3:f0:a9:61:61:e8:32:ed:6f:3f:6e:0f:ef:
                    bb:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A4:53:4C:39:28:F0:8D:4E:33:9A:B2:0E:BA:41:DC:2B:8B:03:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/684a9134-a16d-336c-8191-a5944e08412f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.17.5.0/24
                  69.17.11.0-69.17.15.255
                  69.17.69.0-69.17.71.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:86:f9:ed:91:59:2b:8b:fc:2f:76:4d:ec:7a:31:2e:ba:7f:
         57:02:66:23:59:04:b4:a6:05:72:13:05:76:e5:b0:e1:43:f5:
         e9:30:69:5b:b8:d9:27:17:14:70:77:5e:07:32:b4:74:39:72:
         00:2c:af:25:e9:02:9b:10:33:42:63:e7:b0:fe:82:e5:bd:cb:
         72:a0:4b:b6:60:f7:91:44:db:a0:30:d3:8a:75:09:03:e1:d8:
         24:26:a3:97:9c:7e:4b:77:c8:4d:3c:a7:3b:99:b5:0f:91:63:
         74:5c:05:3b:c9:ec:17:c9:84:7f:35:d7:7c:d2:5f:58:97:10:
         21:63:ee:4e:ba:36:12:d5:09:53:a1:69:48:c6:34:1a:ec:a6:
         16:6f:05:f3:65:97:45:ab:b6:69:6d:3b:05:96:e7:d4:51:f0:
         c2:b9:44:a8:c3:1e:b7:51:58:fd:1c:c2:c8:b4:54:fb:01:05:
         53:81:24:8c:d3:1d:7f:8f:53:74:31:f2:24:58:bb:6c:67:36:
         7a:18:27:44:d3:9d:38:0b:c6:0d:0a:44:df:08:ef:04:32:09:
         73:87:0c:76:cf:25:db:e5:8a:d2:25:fb:8c:60:9a:63:73:15:
         da:1e:ae:75:15:0a:c6:ff:ac:18:b1:95:91:e0:29:09:73:c4:
         0e:9d:68:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:00:14 2026 by rpki-client