Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25a97f85-b799-3662-a6f4-654b953fc63f.roa
File:                     25a97f85-b799-3662-a6f4-654b953fc63f.roa (raw, json)
Hash identifier:          KSOfUKsHGKTtPra4q9f7UmFSaPWTdKf78eJE3Xb6BVA=
Subject key identifier:   78:34:EF:B7:AA:68:6F:03:65:41:23:6D:A9:06:5B:AB:62:20:96:88
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE87DEA6BBF6A83DA677A680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25a97f85-b799-3662-a6f4-654b953fc63f.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     33659
IP address blocks:        69.142.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:87:de:a6:bb:f6:a8:3d:a6:77:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=41636652-44c3-4a1f-a645-207f671d8d6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1e:8e:43:ed:e6:b0:12:00:19:04:e4:c4:ad:
                    65:41:05:71:99:fe:be:a8:c9:ec:3d:13:e0:51:61:
                    0d:6d:09:f4:0c:63:52:ca:ac:db:95:67:3a:64:be:
                    b6:92:31:a8:79:01:88:c6:08:85:c9:61:f8:4e:0e:
                    22:0a:3d:2f:94:03:82:54:5d:ea:01:ca:b8:99:ae:
                    bb:17:12:11:af:11:93:62:20:57:72:7d:84:fa:68:
                    5d:fb:dd:77:94:18:d8:0a:97:c8:fd:1a:be:78:f4:
                    38:a9:d4:bb:ed:46:22:57:22:74:ad:bd:3a:0f:52:
                    5b:5b:a5:01:c7:92:42:95:2f:60:2b:f4:7c:d0:7c:
                    36:41:8c:10:7e:90:2e:a8:50:20:31:24:c6:43:f8:
                    7b:31:48:e3:2d:b6:f8:ba:0c:9a:a7:80:bc:64:76:
                    e8:c5:d0:40:5c:19:aa:51:7c:db:24:16:69:79:72:
                    d3:b6:a7:3d:ee:21:05:ed:c0:63:7c:e3:84:48:b7:
                    e7:f4:04:8e:f8:44:42:75:d0:20:2b:e5:ac:eb:09:
                    c1:0d:04:7d:de:c6:cc:87:86:8f:e0:f5:c8:52:b9:
                    05:c2:59:5e:51:3c:0a:75:e3:77:11:19:d7:2f:3f:
                    32:47:54:ae:0b:10:e3:0f:f3:3d:20:8b:9b:db:3f:
                    45:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:34:EF:B7:AA:68:6F:03:65:41:23:6D:A9:06:5B:AB:62:20:96:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25a97f85-b799-3662-a6f4-654b953fc63f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.142.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:26:37:68:0a:5e:ce:d6:5b:3a:6b:25:84:af:cf:7d:a9:6d:
         ba:6e:c3:cd:b6:4c:3c:92:e7:c7:ba:48:a3:a5:d9:9e:07:8b:
         96:51:f0:b8:39:04:b1:c8:c0:fb:dc:d1:ca:ba:79:b3:a7:60:
         e3:36:05:ad:44:b0:1a:53:54:3a:d4:0c:c4:1a:58:81:5e:9c:
         74:fb:d6:23:65:6e:e9:8c:db:05:ef:34:d1:cc:14:7b:b5:03:
         82:8f:5d:ec:08:bd:63:37:25:da:63:f1:d2:69:ae:b9:9a:b0:
         4f:91:2d:0c:92:2f:09:ff:8d:cd:b5:20:cc:42:50:6d:51:a0:
         07:97:e1:91:75:40:a3:ce:c4:fa:2f:fb:4c:09:23:b6:34:8c:
         e6:2a:db:d3:9f:ba:8e:0b:71:54:42:7e:7a:cd:84:8a:22:fb:
         68:a4:9a:4a:7b:45:b8:db:09:71:a3:e2:10:b4:f4:91:0c:85:
         40:a7:57:b9:96:fb:d3:53:fe:b3:9b:df:5d:a0:87:7a:24:d0:
         cc:63:e1:80:ae:44:37:97:4f:5f:62:2f:25:ec:33:b2:57:4e:
         0e:7d:27:67:18:59:98:9f:33:e9:a9:80:42:64:fa:16:be:51:
         c0:63:2d:8e:e6:ba:9b:fa:be:4b:ee:4c:d3:1f:a1:44:11:03:
         99:ee:f0:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 11:13:26 2026 by rpki-client