Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ff6d340c-0c98-4887-a683-1948f4be64f7/f488b8e8-1a05-3b30-a1e8-a94d36368834.roa
File:                     f488b8e8-1a05-3b30-a1e8-a94d36368834.roa (raw, json)
Hash identifier:          QuE58269wFRyWNCTa3grxE/LGLVqEOiGbLo15dME8Ps=
Subject key identifier:   9A:22:E5:0B:6B:FA:EE:73:EE:78:CB:10:F5:3A:55:C6:96:21:A5:9C
Certificate issuer:       /CN=ff6d340c-0c98-4887-a683-1948f4be64f7
Certificate serial:       010D0C9F4328584E74CF81A94988798B06CEAAC4
Authority key identifier: 68:34:CC:1F:63:E1:06:1A:62:42:77:42:D4:F9:78:4B:35:BA:79:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ff6d340c-0c98-4887-a683-1948f4be64f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ff6d340c-0c98-4887-a683-1948f4be64f7/f488b8e8-1a05-3b30-a1e8-a94d36368834.roa
Signing time:             Fri 10 Jul 2026 21:00:12 +0000
ROA not before:           Fri 10 Jul 2026 21:00:12 +0000
ROA not after:            Thu 08 Oct 2026 21:00:12 +0000
asID:                     402421
IP address blocks:        69.48.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ff6d340c-0c98-4887-a683-1948f4be64f7/ff6d340c-0c98-4887-a683-1948f4be64f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ff6d340c-0c98-4887-a683-1948f4be64f7/ff6d340c-0c98-4887-a683-1948f4be64f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ff6d340c-0c98-4887-a683-1948f4be64f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:74:cf:81:a9:49:88:79:8b:06:ce:aa:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6d340c-0c98-4887-a683-1948f4be64f7
        Validity
            Not Before: Jul 10 21:00:12 2026 GMT
            Not After : Oct  8 21:00:12 2026 GMT
        Subject: CN=4865a9ba-830c-49de-a6c9-5d30ecf6df1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ba:de:8d:df:e9:2d:cc:d3:e8:6c:1d:57:f4:
                    55:f2:af:ed:16:62:85:4b:c9:3d:c5:87:5e:a1:b8:
                    3d:75:c1:09:40:f8:72:98:5a:20:66:db:b6:06:ee:
                    98:ab:97:69:57:a4:f8:55:d6:4f:d2:ef:48:54:ec:
                    a0:01:79:e7:53:14:58:17:c2:fd:61:6e:b4:f0:fd:
                    85:44:ee:03:0f:da:69:84:11:28:ba:69:87:74:55:
                    2f:0d:ed:b3:80:b0:47:26:80:26:06:d4:31:41:e1:
                    6c:7d:d3:e5:74:ad:94:7d:ea:36:d4:2c:ec:f2:bb:
                    e4:92:e3:e7:e4:3b:41:14:3e:86:25:fb:b9:a5:0d:
                    10:5e:a0:47:a4:96:2e:37:46:cf:31:2e:23:e3:24:
                    28:6d:75:54:bc:9e:b5:9a:49:f8:53:1d:f6:4f:f0:
                    c6:4f:f4:25:62:b4:32:c5:19:20:5a:60:85:de:53:
                    4f:46:24:a7:11:b5:d9:24:8b:78:71:b3:9b:56:9d:
                    20:e6:91:fd:50:a6:7c:e0:96:86:63:58:89:b8:83:
                    f6:df:f2:12:bf:d4:bc:17:49:1f:51:96:40:72:fc:
                    6f:08:c9:10:db:0a:68:14:00:4b:d4:01:59:97:73:
                    d7:5f:c2:90:d1:35:d4:f4:02:0f:0f:f2:dc:75:31:
                    bf:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:22:E5:0B:6B:FA:EE:73:EE:78:CB:10:F5:3A:55:C6:96:21:A5:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ff6d340c-0c98-4887-a683-1948f4be64f7/f488b8e8-1a05-3b30-a1e8-a94d36368834.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ff6d340c-0c98-4887-a683-1948f4be64f7/ff6d340c-0c98-4887-a683-1948f4be64f7.crl

            X509v3 Authority Key Identifier:
                keyid:68:34:CC:1F:63:E1:06:1A:62:42:77:42:D4:F9:78:4B:35:BA:79:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ff6d340c-0c98-4887-a683-1948f4be64f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.48.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:80:c2:35:47:d5:81:0b:8c:29:22:83:4e:51:f6:37:5f:94:
         dc:a9:2c:ef:4e:c7:1f:b6:af:c8:17:ff:3b:c5:9f:00:0b:ce:
         8d:72:1b:ad:f1:96:92:9c:e6:fc:13:6b:05:e3:a8:fd:04:83:
         3c:fa:52:6f:26:00:18:6f:17:80:86:70:4c:ff:57:b1:61:50:
         2d:b0:38:91:24:eb:be:77:9d:e8:88:93:40:43:c8:67:e9:5d:
         e6:44:25:4d:a7:c3:c0:e0:2d:a6:64:53:8f:38:ee:ec:60:8c:
         d1:67:9f:61:54:9d:64:aa:82:c6:bf:86:be:e9:99:4f:7c:0c:
         cb:83:f8:15:f7:bd:33:19:be:d8:c4:74:f7:8b:3c:9c:d1:a8:
         8b:f6:45:3a:c3:2d:f1:ae:4c:a4:0c:38:2c:1d:be:ac:9f:aa:
         d5:e6:b3:e5:7c:00:cc:d8:f5:9e:29:12:31:81:1d:db:5b:6c:
         60:d5:1a:ab:4b:4b:f0:29:5a:c2:ad:f5:7c:48:4c:48:f8:69:
         18:ac:39:15:e1:fa:b4:4d:f7:5d:6f:fb:fe:37:09:da:fc:c1:
         42:2e:59:20:b1:5b:25:63:28:ba:91:dd:0f:55:46:37:8a:86:
         59:c2:e2:ed:2e:28:29:a4:1e:2f:d7:87:56:9c:2c:ef:1a:2d:
         63:93:7f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:48:25 2026 by rpki-client