Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f5f41705-f389-38f6-9694-e37c244e2486.roa
File:                     f5f41705-f389-38f6-9694-e37c244e2486.roa (raw, json)
Hash identifier:          scAk7rCmbLrZvjncxPIj41AQzjMlbCmp5+qtFnk0PIU=
Subject key identifier:   9B:D8:15:86:7C:E3:86:46:17:D3:04:DB:B1:1D:64:72:32:3E:02:26
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F3FAD74114117D31BAE89C200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f5f41705-f389-38f6-9694-e37c244e2486.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     0
IP address blocks:        69.96.0.0/13 maxlen: 13
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:74:11:41:17:d3:1b:ae:89:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=fb5e1550-2121-41b2-8884-8cb83e4d342d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5f:8e:ac:d0:4e:ff:17:a2:76:29:3b:72:c3:
                    78:77:26:13:e2:7a:63:8e:78:da:79:71:47:ee:41:
                    e4:5c:b9:4f:b5:32:4b:39:b6:e9:ff:a5:bd:5c:e1:
                    12:27:88:ee:43:7f:6a:2f:bc:d2:55:12:30:35:37:
                    1b:4f:a5:c8:91:ea:f2:ba:7e:d4:6c:28:f7:6a:57:
                    c0:9a:a2:02:e7:2c:ca:aa:45:4b:75:a1:92:51:ed:
                    d2:6f:a1:74:4c:ac:7c:c7:89:e4:87:6e:1e:2a:bb:
                    75:2c:d6:71:1f:c3:89:61:1f:f7:48:de:f4:d9:c3:
                    bd:0a:15:ad:7a:b0:ad:4e:86:44:24:f8:59:95:91:
                    c0:a0:8d:6f:ab:d9:e4:53:4f:97:d5:00:ea:d9:8e:
                    a2:26:7b:d5:ae:63:73:04:61:f9:bf:fc:77:ac:67:
                    75:4e:a5:90:e1:2d:e7:25:6f:a5:06:fe:d8:f8:cc:
                    51:a2:ef:7a:2b:8c:7f:01:e1:f9:5a:26:22:8e:4d:
                    19:0e:dd:c5:79:3e:65:31:e5:44:11:86:09:d8:be:
                    e8:d1:60:27:13:dd:d5:d7:50:7f:b9:01:01:f2:d6:
                    28:13:33:59:32:72:f1:fe:0f:5b:ca:91:f9:6e:d6:
                    68:7b:9c:19:a4:87:d7:c7:fa:46:6f:ff:d8:2d:15:
                    8e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:D8:15:86:7C:E3:86:46:17:D3:04:DB:B1:1D:64:72:32:3E:02:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f5f41705-f389-38f6-9694-e37c244e2486.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.96.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:22:d2:5b:d6:aa:ea:64:53:55:07:26:81:c4:34:4d:ea:83:
         9f:24:d9:59:7e:5c:1f:67:2e:08:3d:c4:15:c8:5b:80:d7:9d:
         76:6f:1b:96:ea:01:eb:e7:d2:4c:55:3e:36:2a:3e:94:89:f4:
         3c:cd:d8:f8:89:32:3a:c9:82:b5:f9:24:0c:3f:79:2f:b3:6f:
         d1:ae:b4:0b:0c:e6:2c:97:b2:c1:e2:69:fb:4d:cb:48:3b:47:
         4d:1b:f2:36:50:2e:3b:d8:08:63:1e:88:0f:e1:4a:f5:c3:3c:
         e7:bc:b2:f2:7d:cf:dd:e5:92:36:78:53:5f:d5:66:b6:9d:43:
         62:cb:3c:29:47:86:93:09:9a:ae:db:aa:a7:8f:50:3d:4b:5f:
         07:71:32:c6:e0:ad:8e:84:f2:22:5d:53:d3:bd:e6:7c:c9:22:
         bb:cd:b6:c4:51:f3:ab:ca:40:86:1f:8e:3f:9b:5d:c4:e4:46:
         ed:35:93:8e:14:70:b1:a6:e5:c3:4b:f2:bc:06:75:c3:5a:71:
         19:e0:fb:54:3e:4a:d7:2d:e6:cf:83:65:a9:41:86:92:1e:76:
         9e:a5:ff:c8:51:cb:ee:ae:84:71:cc:6a:83:6b:83:cb:03:10:
         5a:87:80:9a:83:0d:9c:13:ea:23:0f:61:9c:da:55:a6:ea:79:
         6a:71:77:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:44:50 2026 by rpki-client