Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a3189ff-d6a9-39b0-bc89-a87c60cb1fbb.roa
File:                     4a3189ff-d6a9-39b0-bc89-a87c60cb1fbb.roa (raw, json)
Hash identifier:          p9IulRdmojLY4AZvDK3u8NAUJnWOsycY2B1WwMK2wyw=
Subject key identifier:   6F:66:F9:EA:C4:28:C6:6C:47:57:99:EC:FF:B0:4E:68:59:BB:69:92
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3A9FAAAB4B2F77E9442B40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a3189ff-d6a9-39b0-bc89-a87c60cb1fbb.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33287
IP address blocks:        69.249.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:9f:aa:ab:4b:2f:77:e9:44:2b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=5085e05b-7ccb-4637-87da-e977a7ef3ad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:af:54:43:6a:53:ec:22:2f:ca:eb:9b:e2:e5:
                    8f:27:6c:e3:b4:fd:c3:3c:a5:36:24:af:6d:a6:14:
                    7d:f7:e5:e2:c7:22:19:7f:d5:38:ac:8e:75:8d:0c:
                    67:4b:47:b3:12:90:71:f8:b8:92:06:bb:fd:76:76:
                    37:18:3a:e8:b7:05:42:88:59:14:c3:89:67:25:27:
                    fc:97:8d:9c:ea:23:ef:f6:00:df:b6:0d:1f:e1:59:
                    15:f3:32:47:0e:9c:bb:4f:3e:1c:5f:79:77:32:57:
                    35:1e:30:de:04:99:85:98:b7:0b:44:01:94:5a:a2:
                    c1:d9:72:92:10:27:94:aa:46:8a:72:7b:2f:9a:1c:
                    56:36:9a:2e:68:33:7e:9a:82:7c:cb:9a:0b:bc:bb:
                    9f:63:a6:ae:1a:a4:2f:58:ee:3c:85:bc:4f:32:7d:
                    33:d0:60:c9:d0:ca:be:eb:70:38:ea:9a:2e:6e:60:
                    6b:d9:6c:4c:09:2d:30:12:e8:4a:b1:8a:00:a7:ff:
                    03:03:ce:df:bc:d1:5b:49:21:b4:d1:d5:43:72:b7:
                    19:f1:53:57:71:17:fe:b6:3f:cb:71:db:8e:be:c0:
                    66:4a:eb:04:89:0d:0a:fa:95:e0:d5:c8:74:ba:1e:
                    8a:44:a5:d9:4b:d1:93:ec:c9:e4:00:8b:06:8f:f3:
                    80:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:66:F9:EA:C4:28:C6:6C:47:57:99:EC:FF:B0:4E:68:59:BB:69:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a3189ff-d6a9-39b0-bc89-a87c60cb1fbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.249.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:1a:51:2d:2d:46:76:e4:2e:a7:cf:2a:73:f7:86:80:d9:c3:
         a9:1b:fc:ed:8e:d2:b3:fc:e0:56:84:09:e7:04:4f:ed:83:bb:
         76:d0:38:52:ae:bc:a3:66:a4:9e:29:d8:b8:bc:e5:52:1f:ca:
         23:96:5f:64:55:17:24:96:9a:9b:34:31:d4:86:e8:3e:00:56:
         cf:b0:a4:d0:5d:91:4e:8e:e6:b2:8f:be:a7:96:da:1c:fa:2e:
         e6:2a:19:4e:d3:0c:ec:6e:d7:8d:80:cc:3a:a3:55:d3:f4:c0:
         22:36:28:9f:80:5c:06:b0:07:4b:16:46:6a:48:b2:9f:66:15:
         a4:e7:d9:54:c5:be:fd:d3:10:4f:b5:4d:5c:65:8f:37:75:46:
         c2:d1:02:b7:68:fd:1f:aa:3b:dd:a2:76:01:e2:8d:4c:cc:dc:
         cb:09:1b:11:27:bc:81:8c:ee:94:f7:1a:45:87:bb:26:c9:1f:
         64:5e:db:cb:e8:e8:99:dd:4a:f5:57:38:1b:9b:ed:f8:7d:da:
         a9:d4:43:98:4e:05:43:c4:08:df:f9:b4:3b:d4:72:52:47:00:
         ef:c2:c0:50:8f:e6:cc:4b:35:4d:4a:ae:6c:67:75:75:7f:2e:
         9f:9b:c6:52:26:f8:8c:d9:75:d9:43:b9:46:cf:f5:d8:e6:db:
         b7:27:2a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 21:40:30 2026 by rpki-client