Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/adc8117f-d262-3d82-bf2b-f17cd5401913.roa
File:                     adc8117f-d262-3d82-bf2b-f17cd5401913.roa (raw, json)
Hash identifier:          D8W5E8FwUtHwprNa3VUMW9CtnxXd1QaPKI9PMCG6tjM=
Subject key identifier:   1A:4A:57:CC:1E:0F:4F:8F:B2:B0:CF:3C:B7:7D:ED:4F:1E:3F:44:F7
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E683F6175E2394E3A3670A840
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/adc8117f-d262-3d82-bf2b-f17cd5401913.roa
Signing time:             Mon 06 Jul 2026 09:00:12 +0000
ROA not before:           Mon 06 Jul 2026 09:00:12 +0000
ROA not after:            Sun 04 Oct 2026 09:00:12 +0000
asID:                     9009
IP address blocks:        69.3.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:68:3f:61:75:e2:39:4e:3a:36:70:a8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul  6 09:00:12 2026 GMT
            Not After : Oct  4 09:00:12 2026 GMT
        Subject: CN=7c9e93b9-5f9c-4944-9680-bb2591f7a677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c7:54:21:34:d5:db:88:e2:9b:56:16:b7:d6:
                    6b:2b:68:24:bb:ad:64:0a:76:19:2a:b7:bd:c6:e0:
                    a5:2e:47:d5:c4:8f:c8:c3:51:23:fe:dd:33:66:a3:
                    b0:6c:22:8d:cf:26:42:23:fd:98:3d:c9:0a:d2:89:
                    fa:42:be:79:66:45:95:41:05:66:95:c5:d3:8c:d4:
                    ae:71:b0:cb:67:6d:bc:36:ea:5e:bb:09:bc:7c:af:
                    37:87:25:df:06:3a:07:71:f8:8b:e4:53:09:66:50:
                    f3:15:7d:5b:57:08:92:75:bb:6e:b7:14:e4:89:f1:
                    46:c8:40:d5:c6:d6:c4:0b:5a:01:f3:b8:33:00:74:
                    37:9c:e1:6a:9c:b5:a0:38:88:30:2c:cd:92:0c:c4:
                    58:c8:27:33:f2:b3:7b:94:0d:25:38:b3:f7:99:96:
                    cd:63:1b:fa:67:3a:8b:b9:1f:74:0e:ae:7f:30:43:
                    66:42:1c:6c:ae:1d:61:f5:80:4b:9c:69:4e:1f:ff:
                    9c:06:ca:2d:a4:53:c0:9a:13:4d:bd:0f:bc:38:6f:
                    71:22:67:ff:ff:7a:f8:fa:36:0a:3f:51:df:28:ff:
                    6d:ff:d5:e6:05:d2:d6:8d:a7:4f:20:d2:74:65:0a:
                    4e:40:d2:03:2e:5e:23:be:64:4d:59:5d:c1:13:4d:
                    cf:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:4A:57:CC:1E:0F:4F:8F:B2:B0:CF:3C:B7:7D:ED:4F:1E:3F:44:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/adc8117f-d262-3d82-bf2b-f17cd5401913.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.3.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:3f:7e:dc:34:b7:6c:ce:3b:49:d3:0b:11:44:3c:d8:17:e0:
         29:e3:2b:83:be:cc:31:c7:d4:13:08:e0:33:3b:34:f8:00:6b:
         ff:6c:c5:08:19:9e:bb:bd:57:08:22:18:77:13:4c:ee:4c:83:
         42:27:8e:0f:a1:7b:f7:77:d4:a1:98:be:a8:c4:08:9f:3f:61:
         e4:2d:79:39:45:f8:36:66:a2:0f:a6:eb:a0:fc:b9:e5:e2:3e:
         7f:63:2b:62:5b:3b:09:69:2b:c4:df:27:42:28:4a:02:1d:4c:
         90:b6:66:ec:3a:ca:55:ca:e5:95:84:a7:fa:12:5a:74:54:9c:
         3a:c0:dd:fe:5a:cf:12:0d:d7:5e:62:14:95:84:fa:0c:07:eb:
         60:2e:9a:de:61:9b:0c:61:6f:8c:5e:be:91:db:3f:1c:88:d1:
         70:e6:fd:4e:30:25:fc:82:51:de:5e:73:2f:c1:81:dd:06:39:
         b9:a1:e6:d4:2b:72:21:40:3d:f4:f2:92:51:09:d7:bb:4e:37:
         08:2e:a5:d5:a4:51:24:24:57:f6:68:a2:f9:92:d4:5e:5f:42:
         53:ea:03:cd:c2:47:a9:dc:b4:fa:33:5c:fe:2d:7b:f4:be:2c:
         ca:c4:e8:09:72:d8:ba:1d:50:87:ef:97:98:d0:ea:7a:89:a5:
         df:b4:dc:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:31:39 2026 by rpki-client