Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/69c54836-fbb3-43bf-9e5e-1041e7098f72/fb1b91d4-7544-386a-b3a3-e03e088fe8ea.roa
File:                     fb1b91d4-7544-386a-b3a3-e03e088fe8ea.roa (raw, json)
Hash identifier:          A9bvKEUvsviDv0Edltn48uad5rZcFjSVZzYZHtsmzmc=
Subject key identifier:   2A:92:F5:9D:5F:33:F8:37:29:80:E5:08:FD:8F:CA:ED:12:EF:6E:E3
Certificate issuer:       /CN=69c54836-fbb3-43bf-9e5e-1041e7098f72
Certificate serial:       010D0C9F4328584E428F2FE55E9D2F542C17CD00
Authority key identifier: E8:63:20:33:D4:32:0A:11:DC:CA:8D:7D:90:F1:36:DF:C7:8A:4A:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/69c54836-fbb3-43bf-9e5e-1041e7098f72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/69c54836-fbb3-43bf-9e5e-1041e7098f72/fb1b91d4-7544-386a-b3a3-e03e088fe8ea.roa
Signing time:             Mon 22 Jun 2026 21:00:12 +0000
ROA not before:           Mon 22 Jun 2026 21:00:12 +0000
ROA not after:            Sun 20 Sep 2026 21:00:12 +0000
asID:                     396216
IP address blocks:        66.242.62.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/69c54836-fbb3-43bf-9e5e-1041e7098f72/69c54836-fbb3-43bf-9e5e-1041e7098f72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/69c54836-fbb3-43bf-9e5e-1041e7098f72/69c54836-fbb3-43bf-9e5e-1041e7098f72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/69c54836-fbb3-43bf-9e5e-1041e7098f72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:42:8f:2f:e5:5e:9d:2f:54:2c:17:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69c54836-fbb3-43bf-9e5e-1041e7098f72
        Validity
            Not Before: Jun 22 21:00:12 2026 GMT
            Not After : Sep 20 21:00:12 2026 GMT
        Subject: CN=3434445c-1f68-44e3-b4df-aed1bd6d8c0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:1d:9d:f9:04:67:cd:15:3e:29:5b:ec:88:26:
                    07:3a:19:04:f0:19:1e:b9:ac:0b:25:d8:a1:d0:f6:
                    d2:20:6a:be:11:ab:c9:6d:7a:07:f6:cc:13:96:4d:
                    d6:5e:72:24:46:a6:3c:64:92:c5:4d:0b:5b:a9:e8:
                    f3:57:14:a5:5a:4f:3f:81:ec:a8:82:13:5e:21:b8:
                    d2:5e:d0:78:d3:ca:30:5b:6f:ef:f5:28:d8:c6:4a:
                    2a:3b:51:61:9d:48:0f:bd:af:73:90:dc:4b:45:ae:
                    3a:ba:dd:4f:c0:6b:19:78:4c:16:f9:30:47:f6:23:
                    dc:b8:34:b6:88:04:7c:aa:8e:65:d8:17:56:e3:bc:
                    cd:f6:cb:e7:f8:12:b1:40:7b:83:08:a9:b3:05:f8:
                    ad:18:54:43:74:3d:04:28:49:09:33:8b:88:d3:08:
                    7f:7c:99:1f:6a:45:09:87:05:a4:99:a9:f3:c4:51:
                    03:ea:da:01:c6:40:65:fd:aa:fc:38:b6:df:d8:75:
                    29:41:d7:3b:ad:7f:c1:39:cf:40:6d:92:b7:c4:db:
                    de:5b:f8:53:a3:09:2c:a8:0e:aa:66:1d:f1:ef:dd:
                    7d:29:22:f3:ea:c8:e2:54:5c:2b:7a:d6:e2:ba:c6:
                    2c:7f:00:ca:bb:55:c5:5e:14:1e:01:24:31:38:75:
                    3f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:92:F5:9D:5F:33:F8:37:29:80:E5:08:FD:8F:CA:ED:12:EF:6E:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/69c54836-fbb3-43bf-9e5e-1041e7098f72/fb1b91d4-7544-386a-b3a3-e03e088fe8ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/69c54836-fbb3-43bf-9e5e-1041e7098f72/69c54836-fbb3-43bf-9e5e-1041e7098f72.crl

            X509v3 Authority Key Identifier:
                keyid:E8:63:20:33:D4:32:0A:11:DC:CA:8D:7D:90:F1:36:DF:C7:8A:4A:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/69c54836-fbb3-43bf-9e5e-1041e7098f72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.242.62.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:ae:91:25:f1:83:13:a5:65:16:4c:d5:5e:58:f8:0f:6e:4d:
         e8:b4:5f:76:43:ad:7a:38:e1:ed:6a:3c:54:87:30:84:09:08:
         fd:64:43:5c:f8:a3:cc:2c:d5:1c:72:04:1b:85:e1:96:46:4c:
         c5:63:b6:6c:3c:c1:e7:37:55:15:90:65:ed:4d:db:15:c1:d5:
         d4:17:ed:b8:9c:e6:0a:e9:ad:39:f3:bf:3b:68:19:03:d5:4c:
         45:97:ee:07:03:6d:96:88:fc:12:3c:a5:ea:31:00:c4:ec:50:
         48:8e:38:f2:6e:4c:da:db:d4:51:b1:2e:e0:c5:bd:f5:ef:ce:
         0a:37:be:a1:ff:95:39:52:ad:5d:d3:43:3b:d4:0d:d3:11:fa:
         2a:60:b0:46:4c:dc:4d:16:e2:99:fa:d3:46:ff:43:93:46:d7:
         db:06:c8:67:b9:c2:af:01:c9:d1:04:4a:f1:53:b0:cc:ad:57:
         19:b2:26:66:23:7d:09:07:50:82:6d:2b:25:09:00:14:80:ef:
         51:ac:4b:57:3e:69:77:ef:56:20:f4:41:5c:d5:c2:8b:81:37:
         c6:5b:77:82:db:04:81:f0:cc:8d:1c:b7:65:da:4e:ae:21:a0:
         79:21:b5:06:1e:11:c7:11:6f:4d:92:4f:76:42:6c:c4:4f:c8:
         c7:95:33:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:41:28 2026 by rpki-client