Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/3d099cc4-fce2-3c79-acb3-d1ab23e69d1c.roa
File:                     3d099cc4-fce2-3c79-acb3-d1ab23e69d1c.roa (raw, json)
Hash identifier:          iIu/aLDSCLFZ9pfxzuSyvu4zKe5NLag96aacV2P7u3c=
Subject key identifier:   AF:FA:6B:83:67:29:CF:CC:03:A4:DE:FD:F1:DA:05:D9:EF:E3:61:4A
Certificate issuer:       /CN=1f7c91ae-026c-479d-9cb5-d3837e3d4751
Certificate serial:       010D0C9F4328584E534F3BC3118E1AB89E6E7C80
Authority key identifier: B6:31:20:DC:30:4B:1B:26:F4:1F:E4:5B:2B:92:7D:62:52:7E:13:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/3d099cc4-fce2-3c79-acb3-d1ab23e69d1c.roa
Signing time:             Sun 28 Jun 2026 21:00:11 +0000
ROA not before:           Sun 28 Jun 2026 21:00:11 +0000
ROA not after:            Sat 26 Sep 2026 21:00:11 +0000
asID:                     812
IP address blocks:        69.17.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:53:4f:3b:c3:11:8e:1a:b8:9e:6e:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f7c91ae-026c-479d-9cb5-d3837e3d4751
        Validity
            Not Before: Jun 28 21:00:11 2026 GMT
            Not After : Sep 26 21:00:11 2026 GMT
        Subject: CN=c1c4056c-5840-4c8e-93cd-99407ea13165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:11:30:6c:37:6b:ce:a5:75:23:ff:bd:ee:e9:
                    76:8d:74:67:35:83:1c:7b:5e:83:9f:19:b5:df:86:
                    1c:25:38:f1:f0:2e:87:c8:07:ae:57:55:11:1e:36:
                    5f:fa:a4:ed:f9:2a:ec:33:38:36:26:01:f1:2e:66:
                    bd:52:7f:62:a1:23:2b:2a:d6:d2:92:17:c1:92:9f:
                    e2:42:a0:b6:63:6c:d0:56:96:fd:17:a5:c9:06:34:
                    60:c2:ad:ee:30:47:c6:f4:67:f3:8a:c5:5d:63:d0:
                    c3:0c:16:63:64:d4:e9:b9:03:ff:25:63:bc:a2:9d:
                    91:38:66:38:23:a5:36:80:64:d4:a1:14:17:14:60:
                    0b:08:d0:3f:c1:ca:3b:35:a7:bf:1b:6e:a0:b2:19:
                    1d:e8:41:78:2f:95:dd:34:30:10:e5:5b:37:d6:d3:
                    5f:fa:24:3b:e4:dd:14:d5:e7:1a:ca:1f:12:d6:bd:
                    d8:fe:17:52:24:15:a0:4d:2b:eb:6f:22:38:2e:59:
                    75:a4:c1:5f:28:ba:b3:0f:41:5d:02:20:6d:92:06:
                    37:bd:3a:e6:72:5b:84:8e:1a:73:93:d6:72:b8:20:
                    72:44:67:65:c9:f8:20:20:e5:8f:97:0a:4f:41:44:
                    2a:68:42:3c:ee:07:d5:13:67:4d:80:de:7b:4f:fe:
                    ef:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:FA:6B:83:67:29:CF:CC:03:A4:DE:FD:F1:DA:05:D9:EF:E3:61:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/3d099cc4-fce2-3c79-acb3-d1ab23e69d1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.crl

            X509v3 Authority Key Identifier:
                keyid:B6:31:20:DC:30:4B:1B:26:F4:1F:E4:5B:2B:92:7D:62:52:7E:13:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.17.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:04:e7:a5:6d:4e:0b:f5:d1:a3:60:9e:9d:4d:b8:17:e9:df:
         e4:58:27:53:38:63:8d:3f:be:22:9a:00:0e:8f:51:92:c9:85:
         25:8d:52:ef:6b:2a:4c:10:f4:2c:d6:f5:e2:94:84:e3:2e:45:
         4c:c9:be:ae:03:be:4d:72:76:90:33:a7:70:51:a1:67:78:99:
         b3:df:a1:a5:19:72:73:d4:7d:40:1a:25:e0:a9:23:4e:82:8f:
         4a:38:1c:db:0a:83:0c:89:f2:8a:dc:71:73:fe:ec:b7:41:ca:
         2a:22:22:85:02:9a:36:02:fd:c2:ff:05:be:9b:18:72:6f:54:
         41:bc:ed:d0:34:91:ce:6e:da:91:db:e5:bf:06:21:ec:99:47:
         ee:45:0c:79:65:a0:15:57:d4:d2:ac:81:36:e4:21:6a:95:24:
         56:f8:64:2d:53:18:ba:9e:0b:4e:fe:fd:87:1d:b0:76:3a:f2:
         3a:3a:b8:1d:88:d7:63:de:5e:fe:8e:73:44:dc:77:ef:da:b7:
         c6:6d:ee:45:a0:51:bf:d4:d6:be:27:86:d9:51:27:85:c7:92:
         8c:d0:0a:8c:f8:b0:26:be:fa:ae:9b:3a:45:52:29:24:35:a5:
         b5:25:5a:3b:b7:17:0f:d2:3a:38:0a:8e:d0:8e:61:e8:75:cc:
         6d:48:15:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 15:01:51 2026 by rpki-client