Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d349578c-04b5-3c80-9560-c75e5eb87637.roa
File:                     d349578c-04b5-3c80-9560-c75e5eb87637.roa (raw, json)
Hash identifier:          bHJtUT4JISVthlj0ez9X5HAG0It57owPeRYiV42j3Mc=
Subject key identifier:   16:63:E9:3B:9C:BA:6A:63:9B:41:53:37:D9:9E:D5:A9:17:81:C1:34
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584DC29B586BF088B15A3F6711C0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d349578c-04b5-3c80-9560-c75e5eb87637.roa
Signing time:             Fri 08 May 2026 01:01:24 +0000
ROA not before:           Fri 08 May 2026 01:01:24 +0000
ROA not after:            Thu 06 Aug 2026 01:01:24 +0000
asID:                     151389
IP address blocks:        69.33.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c2:9b:58:6b:f0:88:b1:5a:3f:67:11:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: May  8 01:01:24 2026 GMT
            Not After : Aug  6 01:01:24 2026 GMT
        Subject: CN=309d9c9d-6fc0-4cab-8f3f-64bc78c17ea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6a:1c:ea:6b:93:1d:0d:13:aa:a7:c0:2b:f6:
                    f8:9a:f6:93:99:78:dd:10:ff:6f:f1:26:ce:d4:3f:
                    90:dc:01:f2:46:2e:e2:ae:2e:b8:39:1a:d9:be:b2:
                    ef:e8:6d:f2:9b:33:12:bb:e6:be:97:a4:a6:73:67:
                    d9:32:61:60:9a:39:44:4f:1a:0f:96:55:6f:c7:ac:
                    39:e0:eb:f9:b9:a5:81:96:6a:2c:cf:4f:04:f6:c2:
                    b0:8a:4b:5c:b3:cf:da:5b:e9:21:f2:f9:b6:84:b3:
                    0e:f8:06:0d:e6:88:f7:15:92:9d:fe:b4:32:c4:d6:
                    07:86:f0:ca:9c:3b:ed:ed:70:d2:e7:2f:6c:bb:1c:
                    df:cb:c5:86:f1:c0:55:e3:64:6e:73:9d:0f:06:cd:
                    a2:4e:d5:7e:7f:8c:47:28:34:6e:17:e7:66:4d:7c:
                    e1:23:3c:71:c1:b6:2a:aa:61:94:02:9b:4e:50:eb:
                    c9:08:4f:3c:70:bf:1a:07:11:44:fd:d1:57:25:9f:
                    76:07:d5:04:12:d3:bc:c4:d4:b8:cc:50:3d:30:5e:
                    b8:fd:01:97:ff:4c:bd:47:06:3a:37:5d:2d:23:79:
                    2a:c9:f6:0c:12:e8:e6:27:e0:49:2d:68:5b:1c:5f:
                    98:1f:6a:da:6f:c0:cc:c6:4c:32:9c:0b:fd:6c:08:
                    14:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:63:E9:3B:9C:BA:6A:63:9B:41:53:37:D9:9E:D5:A9:17:81:C1:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d349578c-04b5-3c80-9560-c75e5eb87637.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.33.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:68:c1:d4:d5:b9:88:5f:dc:68:b8:af:db:16:71:e8:57:5a:
         05:38:37:b4:8d:bc:d7:a4:c0:dc:53:ee:07:01:f8:0f:6c:e0:
         cb:f1:ba:37:15:f9:6a:89:97:f0:41:cb:7f:a0:b9:9a:84:bd:
         31:69:47:68:70:40:fe:34:7e:82:a1:90:aa:f5:9c:66:cf:9d:
         f8:8d:21:c7:93:80:d8:d3:26:24:e0:a9:c6:bf:1a:e0:f6:9f:
         1c:3e:02:ee:4b:99:19:c8:fb:e6:8f:80:9b:01:c7:de:58:24:
         f2:7c:15:45:b8:d6:ad:72:eb:b5:74:01:9f:46:1b:fa:76:ad:
         77:58:21:c6:93:04:b9:b1:3b:c5:62:a3:a9:94:ce:71:bb:a6:
         b9:41:87:1f:1e:a2:ec:a5:0b:c0:c5:16:b0:f5:b4:38:0b:1a:
         b9:81:b0:cd:e8:57:b9:8e:dd:4b:9a:69:e4:81:95:b4:74:d7:
         09:cc:c1:8f:36:cb:fb:d6:95:4c:09:4f:2d:40:43:6b:12:b3:
         97:e6:68:54:e3:02:98:c1:b7:e6:73:2a:68:21:7b:40:1d:f0:
         62:26:95:5f:7a:5c:54:72:ea:83:81:d4:e1:f6:11:a9:3a:53:
         1c:e8:54:74:f1:53:d1:1d:9e:16:cd:05:10:fe:eb:e3:41:b4:
         e6:f6:e4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:57:35 2026 by rpki-client