Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/4ab4d6d8-b18f-331b-a6ce-5da760a16c54.roa
File:                     4ab4d6d8-b18f-331b-a6ce-5da760a16c54.roa (raw, json)
Hash identifier:          WBUOR9UKjMrOnuzgo6azeDrYdeK3dgA1MDLM+kmhXK0=
Subject key identifier:   6E:71:CC:97:76:DB:A0:A7:FD:8F:55:27:21:E3:07:AE:1D:1C:B1:66
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584E059C72108DB9FFDC26AC1420
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/4ab4d6d8-b18f-331b-a6ce-5da760a16c54.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     14813
IP address blocks:        69.73.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Jun 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:72:10:8d:b9:ff:dc:26:ac:14:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=c18671c1-8677-4450-a26a-253fc3f330ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ab:90:97:5d:bc:33:af:0e:ba:ab:d7:ce:8a:
                    9b:4f:ca:19:28:9b:77:5b:87:31:82:f5:92:53:9e:
                    a1:10:a2:ae:21:e1:65:43:a5:63:6f:bd:b0:76:d3:
                    88:ef:56:f6:a7:2e:5d:e2:47:78:62:b2:a9:a7:c5:
                    44:f5:18:bc:a3:ac:ed:fe:73:26:e2:54:f3:4d:23:
                    a2:0d:45:13:3f:70:f4:c8:69:81:0a:be:15:0e:74:
                    3d:1d:bc:6b:61:0b:36:36:19:d1:e3:e8:e3:94:2f:
                    15:f6:2e:1f:92:8e:17:f0:03:a5:96:0b:7b:e2:be:
                    de:21:4c:d2:25:b1:a2:a8:f2:bc:b7:cb:e4:cc:0a:
                    52:d5:ce:8f:c7:f8:e1:49:58:6f:ee:9d:27:d1:3e:
                    5d:4a:a9:40:8b:ed:97:11:f5:17:72:49:d8:3c:69:
                    d2:6a:25:b5:76:39:9b:ff:4f:2a:e8:19:8f:16:52:
                    da:8b:b8:83:95:5c:05:f4:84:a0:13:89:aa:ed:17:
                    3c:51:ae:38:ac:8e:65:58:96:a0:b7:b3:fb:17:59:
                    b6:db:5b:83:e6:b8:76:ca:87:56:2a:3d:d9:8e:6c:
                    af:0e:f1:10:81:0f:66:99:45:06:f7:ec:91:c4:7b:
                    e7:2b:3b:ae:25:27:cc:09:dc:49:e4:80:df:26:5a:
                    ba:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:71:CC:97:76:DB:A0:A7:FD:8F:55:27:21:E3:07:AE:1D:1C:B1:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/4ab4d6d8-b18f-331b-a6ce-5da760a16c54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.73.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:99:67:45:c5:27:1d:9c:cf:97:67:12:6f:15:61:69:11:51:
         c9:5d:b0:64:21:5c:fb:f3:be:44:4e:aa:91:52:4e:56:5d:4f:
         99:96:e4:73:c3:85:de:25:20:15:c8:21:e0:03:40:16:f2:7c:
         17:0f:36:35:d9:e8:79:9f:3e:a0:c5:51:5e:88:18:8d:d3:db:
         e4:5c:6a:0c:c2:f1:74:d8:63:60:42:cd:6f:85:5a:e6:a2:61:
         fd:f1:05:a9:27:2d:f9:05:bb:d1:c4:82:cf:1d:c6:0d:bd:81:
         df:82:40:0b:cd:b2:4b:57:75:5c:6a:50:9f:dd:88:3f:23:34:
         ec:a0:41:b4:c9:4a:ae:6a:f4:ab:c3:bd:11:1d:37:f7:1c:a6:
         f8:17:94:45:87:7b:ea:df:6d:83:f8:4a:89:07:cb:fd:24:1c:
         9e:99:7c:2e:49:22:f2:c6:bb:80:11:60:bd:af:a6:26:0f:5e:
         a9:1d:9e:50:26:46:fd:a6:96:7e:79:77:fb:b6:7f:16:f9:8d:
         34:24:da:54:75:8b:6d:50:2f:3b:ff:55:18:e2:f4:65:33:ca:
         88:82:7d:9c:5d:5c:6f:ca:97:90:bb:86:a0:63:25:0f:81:ca:
         2d:3d:dc:25:79:98:9e:cc:0f:b9:3c:28:c4:f8:3d:8d:7e:fc:
         d6:0f:c1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 8 22:05:19 2026 by rpki-client