Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/bb269ca5-856a-33c0-95d4-1f5608886d4f.roa
File:                     bb269ca5-856a-33c0-95d4-1f5608886d4f.roa (raw, json)
Hash identifier:          Q9TsAjkenwtA+C04HbFAtkQR3TaNlzyBO9wVJj8bUY4=
Subject key identifier:   55:7D:58:58:4D:D1:8F:8C:65:C0:A6:BF:B5:FA:C2:38:AA:12:08:C0
Certificate issuer:       /CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
Certificate serial:       010D0C9F4328584B38219FC641C1AF21D7321400
Authority key identifier: 72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/bb269ca5-856a-33c0-95d4-1f5608886d4f.roa
Signing time:             Wed 17 Sep 2025 01:00:33 +0000
ROA not before:           Wed 17 Sep 2025 01:00:33 +0000
ROA not after:            Tue 16 Dec 2025 02:00:33 +0000
asID:                     27539
IP address blocks:        69.26.20.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:38:21:9f:c6:41:c1:af:21:d7:32:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
        Validity
            Not Before: Sep 17 01:00:33 2025 GMT
            Not After : Dec 16 02:00:33 2025 GMT
        Subject: CN=9feebc75-312e-4f63-9da3-f193fabc99dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8e:7f:ff:0c:c2:08:c0:52:02:5b:54:a2:2d:
                    ef:b1:58:9a:74:ac:fe:fd:d0:4f:c2:24:25:77:35:
                    f0:69:34:70:56:40:56:4d:30:9b:4b:6b:d1:43:02:
                    2e:97:97:36:4a:1d:cd:ed:3a:fe:67:3d:df:0b:92:
                    03:98:77:35:4c:10:2b:ee:b4:c3:2e:d3:3a:0f:e7:
                    a4:e9:b6:6c:e0:7b:29:3a:38:32:a6:88:b2:5e:29:
                    13:61:c0:aa:99:11:60:8c:7d:3e:49:6e:17:ad:2b:
                    18:a5:cd:5b:2c:dd:da:3b:9e:91:00:73:5e:5f:c2:
                    f4:3b:a7:dc:cb:e2:de:0b:47:74:0a:66:fb:b3:de:
                    9c:95:3f:e6:53:b4:4f:b0:1c:d0:27:d1:6c:5d:ce:
                    c2:21:d7:91:a7:e4:78:a7:3b:05:02:a8:3e:39:29:
                    de:f1:fa:0b:3a:9e:93:5f:ab:2e:89:21:ac:e4:ca:
                    80:70:a8:6d:8c:1a:e3:a6:b0:d4:da:77:29:23:8c:
                    e3:2e:07:be:36:ff:8e:e6:d0:42:37:e4:09:d8:c6:
                    3f:1d:9b:64:cb:6d:bf:2d:4e:7d:76:f6:4d:07:de:
                    5c:27:d6:83:48:b4:bf:8d:07:26:ee:57:d2:86:5e:
                    0c:ef:41:8e:22:8a:82:a0:f8:4d:af:cd:08:19:67:
                    f6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:7D:58:58:4D:D1:8F:8C:65:C0:A6:BF:B5:FA:C2:38:AA:12:08:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/bb269ca5-856a-33c0-95d4-1f5608886d4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl

            X509v3 Authority Key Identifier:
                keyid:72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.26.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:7f:43:a7:a6:2a:71:84:3c:02:eb:12:3e:27:ba:46:6b:98:
         1f:36:8a:78:89:26:98:ec:86:9f:0d:6f:49:c8:dd:b5:24:b7:
         c7:44:cf:17:09:14:66:a8:81:f3:01:7d:b5:47:be:33:3f:21:
         9a:9c:46:12:89:50:24:7c:91:9c:d8:a2:17:0b:e5:3e:8c:88:
         70:52:14:d4:55:20:78:89:b7:c0:d1:ed:09:19:c3:04:c6:bf:
         b0:09:2c:58:85:da:7b:ba:6d:e1:86:9a:9c:d0:22:b8:28:2f:
         17:ea:36:d9:88:09:ba:78:d0:0a:11:cf:47:bc:85:ad:6b:44:
         a2:8e:aa:15:e5:6e:a8:4c:af:2e:70:56:9c:c8:23:df:09:ee:
         3f:f4:86:1e:f8:2f:d3:07:4d:92:b0:23:e9:9a:cf:7f:65:4a:
         fc:81:0e:b1:b1:e3:70:bf:99:db:63:c8:2b:d0:db:b8:06:a4:
         ba:3d:ce:48:1a:70:03:52:db:f9:a2:f7:57:b4:2f:d4:03:81:
         c8:96:fd:fe:ec:5b:01:6b:6a:82:7f:3c:c9:52:35:fa:21:8f:
         47:3b:3f:24:2a:83:61:37:ca:7a:bd:92:e3:c0:a4:bb:af:99:
         b9:ef:c5:10:36:b7:0b:41:4c:38:00:27:2f:bf:1e:8a:fc:e4:
         36:90:1c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 18:04:59 2025 by rpki-client