Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/afee0b7b-e9cc-3859-8de2-d79b5b5a4975.roa
File:                     afee0b7b-e9cc-3859-8de2-d79b5b5a4975.roa (raw, json)
Hash identifier:          lb68bzVnZX0FzKoy8Ai0zoP/D8B+z3I/+zgKmAS/2f4=
Subject key identifier:   92:45:29:A5:6C:E1:7B:52:42:E2:D9:F1:93:99:7B:9A:C5:0E:33:B8
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E7D2F7A9D564910EB31B99B60
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/afee0b7b-e9cc-3859-8de2-d79b5b5a4975.roa
Signing time:             Mon 13 Jul 2026 21:00:12 +0000
ROA not before:           Mon 13 Jul 2026 21:00:12 +0000
ROA not after:            Sun 11 Oct 2026 21:00:12 +0000
asID:                     6079
IP address blocks:        69.17.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7d:2f:7a:9d:56:49:10:eb:31:b9:9b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 13 21:00:12 2026 GMT
            Not After : Oct 11 21:00:12 2026 GMT
        Subject: CN=4425c0a5-a7d7-4f77-91f5-c7a0154a537b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:bb:22:43:dc:34:a8:aa:50:f2:8d:3b:a1:c0:
                    dd:d1:c0:e2:a4:eb:87:31:b9:ea:ea:d2:90:85:50:
                    ce:dc:0d:a3:c5:2b:db:da:47:17:90:06:5c:35:aa:
                    32:ae:c3:d2:b0:11:48:37:52:90:16:56:e5:9f:bc:
                    07:f1:3c:34:99:3e:76:34:60:68:d4:c4:1e:64:e5:
                    e9:e3:cf:0e:a0:3d:96:01:ae:ba:6b:2b:d8:fd:54:
                    75:9c:10:5d:e6:a9:60:13:e9:aa:ef:00:4c:b8:21:
                    92:7e:6b:51:13:b1:48:8b:fa:1b:b8:54:c5:59:6f:
                    cc:66:2a:4f:63:10:fd:e7:b5:a1:0b:46:4c:27:cd:
                    b0:05:33:d8:11:86:00:d9:a7:1b:0e:44:d5:5c:29:
                    00:4b:04:c7:23:fe:9a:35:41:14:7f:66:1a:73:19:
                    ad:85:8d:a5:73:b8:c5:ff:c5:83:a4:01:b0:2f:b3:
                    e4:10:37:d6:e8:de:24:ba:f6:d4:25:de:5a:7e:df:
                    cb:b6:69:16:92:21:04:c9:11:ff:70:23:f1:25:1b:
                    75:f7:89:32:1c:c0:2e:9a:66:49:a3:3c:ec:60:97:
                    d3:18:3a:b6:22:c0:ba:3f:bc:98:f9:6e:bf:f7:09:
                    cd:4d:42:c7:e2:d2:e7:1a:38:8a:b6:5f:1f:02:81:
                    19:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:45:29:A5:6C:E1:7B:52:42:E2:D9:F1:93:99:7B:9A:C5:0E:33:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/afee0b7b-e9cc-3859-8de2-d79b5b5a4975.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.17.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:e3:51:97:6c:ef:b5:0b:11:ea:c2:10:19:18:c8:c0:02:a7:
         a4:c2:bc:86:0e:73:1e:3b:1b:a7:ae:03:7a:af:f2:df:7f:b3:
         83:16:fc:5e:c5:bc:b3:07:46:ba:14:99:b3:bf:03:33:12:5d:
         a1:98:dd:1b:91:1c:7b:96:fc:02:5c:a1:b8:ab:07:f4:29:84:
         29:1c:7d:6c:20:7d:68:75:68:6c:72:b8:70:85:40:ce:61:12:
         4d:1f:92:8c:e9:6a:d4:2d:75:fd:4a:3b:b8:96:cb:7f:a6:ab:
         1c:4d:5f:ad:50:a8:db:bb:fb:7f:54:b5:ac:92:65:25:36:70:
         64:e5:eb:67:e3:8c:e8:12:db:e6:9d:73:fd:de:38:cd:4e:62:
         f6:63:cd:c0:a6:58:6e:de:8f:ed:c2:f9:27:3a:a5:5f:fc:b9:
         45:c5:49:5e:55:4b:ca:e4:d7:9b:35:dc:a1:d2:87:24:3a:64:
         0e:bc:36:52:81:e5:6c:63:25:33:dc:95:9f:4b:90:61:f9:3d:
         25:63:f6:38:e3:fb:3d:37:f5:ac:37:67:bd:52:b4:e1:3e:c5:
         cf:6a:a2:89:fd:63:b1:08:ba:ae:97:74:d6:6a:05:43:a0:d2:
         55:b1:3f:c7:d0:7e:29:89:4c:97:53:c5:99:b4:ec:a9:91:5d:
         b4:94:b9:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:48:33 2026 by rpki-client