Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ec5d34c-bb0d-31db-9db5-a20ba6098462.roa
File:                     1ec5d34c-bb0d-31db-9db5-a20ba6098462.roa (raw, json)
Hash identifier:          MMtqSMc8hJ9gI4W/Iv/5U7EczSZLABmQL3vSifHwwoQ=
Subject key identifier:   6D:93:39:17:FB:55:46:86:DF:BF:C7:FE:61:0C:F6:32:60:7C:7C:22
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF710A75AC0345A0EFED980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ec5d34c-bb0d-31db-9db5-a20ba6098462.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33659
IP address blocks:        69.142.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f7:10:a7:5a:c0:34:5a:0e:fe:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=9c4f68bd-e6b9-4536-8209-01e2d03f480b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a0:a6:de:26:03:e0:25:b5:5a:53:89:76:38:
                    a0:85:23:fe:33:d6:eb:84:05:32:5c:27:a5:2f:46:
                    21:ab:70:80:6b:ce:fc:ef:d0:4f:20:73:ca:cd:9a:
                    d0:8f:a7:52:17:26:26:5c:fc:57:9b:21:7e:f5:d9:
                    82:90:69:2a:4b:73:ca:de:f1:da:3c:a4:91:5c:7e:
                    3e:ff:89:a9:8c:b1:77:db:8e:73:e2:e2:a9:da:ba:
                    05:bb:c9:a3:1d:e1:2d:8b:d1:90:81:94:22:3e:b1:
                    91:62:8c:08:42:7c:b2:0a:b5:ca:a9:9e:0f:4d:e7:
                    ae:d8:d6:3b:af:87:6b:4e:c4:c9:e6:5a:55:ed:1c:
                    99:90:7f:7d:2c:52:4b:09:69:2c:94:f3:03:05:c3:
                    d7:a4:5f:76:bf:c5:9e:93:46:92:bc:9b:eb:50:27:
                    a6:1d:48:0a:3b:3e:a6:37:92:38:d0:3f:81:a1:35:
                    21:30:e2:47:86:74:bf:cf:cc:4f:64:e2:23:ba:d9:
                    cc:6d:2d:0a:4d:ab:f8:ec:3a:7e:67:ee:c4:bd:c4:
                    ac:c2:a0:b9:ce:fa:f2:a4:89:d7:95:3a:74:f0:f0:
                    f3:2d:bc:51:ce:e9:f5:a4:a3:8b:cd:07:a6:34:c5:
                    0f:79:b7:fb:1f:7b:a7:a9:17:2f:99:06:85:de:e3:
                    b1:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:93:39:17:FB:55:46:86:DF:BF:C7:FE:61:0C:F6:32:60:7C:7C:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ec5d34c-bb0d-31db-9db5-a20ba6098462.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.142.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:8b:24:9b:4f:46:97:01:e5:87:4a:c6:cc:3b:09:e2:10:76:
         2e:d7:0b:0a:c5:d4:ac:3d:45:15:62:a4:d6:04:a2:81:4e:36:
         5e:4e:fa:46:48:5b:9b:33:f9:49:f8:0b:0b:62:ef:20:4b:fc:
         fd:16:80:5c:01:d5:8b:95:cd:72:5f:b2:76:aa:70:02:85:26:
         7a:1c:14:bb:20:e0:14:0b:d0:6b:a7:22:81:17:3e:dc:91:c8:
         f1:a4:b6:db:3b:a9:d7:ee:a7:85:52:52:53:e0:59:07:c2:4d:
         43:35:f9:1f:b3:61:51:71:80:26:a1:2a:95:3b:84:44:d2:64:
         01:7b:af:4a:da:22:d9:27:54:52:e0:c1:2b:bb:55:df:77:19:
         50:0e:e9:f0:0f:98:c6:2d:c7:a4:4d:ed:25:57:f6:b2:6b:84:
         19:e5:3b:a1:cd:c3:1c:db:8c:c0:14:86:83:ff:6b:66:3b:92:
         96:c9:cb:00:1b:8d:50:4c:02:3d:3b:44:02:91:0e:1c:93:01:
         1d:36:2f:88:12:66:b7:5d:5d:80:47:fc:7b:e5:6a:f4:0f:45:
         29:e5:03:aa:56:bc:46:05:7e:ac:3d:ec:f5:12:03:c5:bd:d6:
         cd:93:ea:9c:8b:99:e7:16:2e:57:18:a5:7c:f4:a2:d1:e4:6e:
         7b:fe:e6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 19:21:06 2026 by rpki-client