Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1cfad67d-a829-3e67-af1e-49e06b9803c4.roa
File:                     1cfad67d-a829-3e67-af1e-49e06b9803c4.roa (raw, json)
Hash identifier:          KugFnXPRLyhe2Z/yAKaQtYWVliWXBw3md7y0HsbMF5w=
Subject key identifier:   BF:99:56:97:3B:41:1C:AD:F7:D8:B4:60:19:26:15:03:F1:C0:56:B0
Certificate issuer:       /CN=1f7c91ae-026c-479d-9cb5-d3837e3d4751
Certificate serial:       010D0C9F4328584E55CF617772C82D3C57F66300
Authority key identifier: B6:31:20:DC:30:4B:1B:26:F4:1F:E4:5B:2B:92:7D:62:52:7E:13:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1cfad67d-a829-3e67-af1e-49e06b9803c4.roa
Signing time:             Mon 29 Jun 2026 18:30:04 +0000
ROA not before:           Mon 29 Jun 2026 18:30:04 +0000
ROA not after:            Sun 27 Sep 2026 18:30:04 +0000
asID:                     812
IP address blocks:        69.164.176.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:55:cf:61:77:72:c8:2d:3c:57:f6:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f7c91ae-026c-479d-9cb5-d3837e3d4751
        Validity
            Not Before: Jun 29 18:30:04 2026 GMT
            Not After : Sep 27 18:30:04 2026 GMT
        Subject: CN=db86bf81-c875-45c6-9543-f289f2a5ce11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b5:a5:ed:e4:09:7f:81:cb:33:51:19:81:a7:
                    96:5f:0b:58:8f:ad:cd:67:bf:8b:66:19:4d:71:b8:
                    c6:4e:13:17:2b:9d:ce:63:a5:92:8b:85:45:da:33:
                    91:d4:98:0c:e0:2f:aa:10:6a:03:57:74:58:92:21:
                    5a:aa:85:07:68:74:9a:2b:91:c4:e5:8e:56:f6:6b:
                    1c:18:ea:52:9e:bc:c4:a9:5c:bb:98:96:8f:63:b6:
                    46:df:27:89:29:ad:d2:28:5a:a3:fe:ee:d8:50:77:
                    9c:b2:a8:b4:d8:7b:5d:f2:5c:2a:d5:42:68:38:d7:
                    39:f4:8e:c9:0c:f8:b9:d2:ff:23:ae:13:e5:cb:87:
                    f4:b9:e4:94:be:1b:1f:df:37:04:27:cd:5b:b7:1a:
                    be:70:92:21:56:78:dd:1e:98:40:01:2e:c2:63:77:
                    a1:b8:52:2b:bb:b7:c3:16:fc:64:e4:e5:1b:69:14:
                    bb:12:a3:28:33:40:eb:73:1a:a9:44:5e:91:c1:27:
                    9a:35:f6:43:0b:92:78:29:95:34:c5:f5:9e:b2:e1:
                    89:9b:60:e3:76:48:d2:33:e1:b9:f0:af:b6:7d:3d:
                    a8:82:82:da:dd:24:ce:89:a4:7e:c8:8a:c2:bb:b3:
                    05:2d:b8:9e:8d:49:a5:d9:c1:e8:f6:d0:8f:13:fa:
                    ad:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:99:56:97:3B:41:1C:AD:F7:D8:B4:60:19:26:15:03:F1:C0:56:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1cfad67d-a829-3e67-af1e-49e06b9803c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.crl

            X509v3 Authority Key Identifier:
                keyid:B6:31:20:DC:30:4B:1B:26:F4:1F:E4:5B:2B:92:7D:62:52:7E:13:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.164.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:a7:e7:c6:20:ec:b5:55:2a:9e:e4:d3:38:2a:6d:ca:74:eb:
         12:f8:c7:42:2a:c5:c8:3b:30:c1:8a:bb:d2:54:61:b1:85:23:
         24:c0:c7:7c:5b:72:e3:9f:97:12:5e:62:2f:63:07:08:3b:94:
         b1:1b:ff:3d:f5:93:46:e3:6d:ce:40:e0:1d:36:ee:17:57:5b:
         c0:1a:0d:e7:d7:3b:85:e1:ae:fe:00:6e:c6:b6:22:18:e4:b9:
         57:96:34:78:92:1e:62:e6:8d:c0:c4:a4:ac:6c:57:89:43:92:
         fc:b2:c9:fc:a0:e3:c6:24:86:bc:11:ec:f2:34:c6:56:52:1b:
         6e:8d:71:cd:43:0a:2d:70:6f:b2:95:a6:36:aa:08:d9:01:b3:
         d2:1d:da:78:65:8d:d5:65:0c:b3:24:13:eb:41:40:86:88:17:
         a7:64:9e:b4:cc:94:96:9c:93:04:40:65:54:81:8d:a2:15:bd:
         0d:cb:ad:e9:75:a6:f2:eb:d9:18:07:9a:98:3e:89:11:d1:39:
         87:3c:90:8b:cc:cd:d6:f3:68:c1:d2:32:c0:a5:4a:7d:c6:bc:
         6c:37:8c:50:5e:70:c4:05:ad:0c:09:d8:e7:f8:98:1d:72:dc:
         d3:41:f6:07:3b:fd:8e:84:9c:dd:c5:94:d1:0f:d8:29:a7:7e:
         71:0d:ee:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 15:00:44 2026 by rpki-client