Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50/728a07be-35f9-32b8-a947-4c03fbfddac4.roa
File:                     728a07be-35f9-32b8-a947-4c03fbfddac4.roa (raw, json)
Hash identifier:          rtSKqKoPE2HOnmoW8Mk9N1wI/H2L76jvsgNybBZEpVg=
Subject key identifier:   48:9F:90:F7:B7:C1:AF:5D:2B:73:91:77:48:D4:0B:31:47:52:1E:82
Certificate issuer:       /CN=9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50
Certificate serial:       010D0C9F4328584DE84B443530B36F7B4BC70F00
Authority key identifier: 29:D8:39:BC:8F:B6:00:7C:FB:EB:42:7D:25:FD:CB:C4:A5:92:1C:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50/728a07be-35f9-32b8-a947-4c03fbfddac4.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     14618
IP address blocks:        69.196.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 May 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:44:35:30:b3:6f:7b:4b:c7:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=00ec52f3-9767-4099-aae1-546068873f3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:04:50:a8:77:86:42:5d:b4:a1:57:73:55:a1:
                    53:15:a2:37:e6:7a:80:33:af:e2:95:f5:92:c6:de:
                    cf:cc:7e:6e:82:93:ae:d1:70:72:46:59:e7:db:59:
                    d0:d7:1b:ab:11:ef:cb:34:a4:44:8d:9e:41:c3:e4:
                    e5:ec:fe:aa:13:dc:d3:0d:ab:0a:98:1b:1c:9d:71:
                    13:44:b4:2f:e5:0b:51:78:a2:c0:a5:8e:90:c9:b0:
                    0b:54:e4:fe:b2:57:7f:12:28:01:65:cf:81:78:e0:
                    63:28:fe:d3:56:75:ab:e9:8c:bd:3e:c8:cc:df:36:
                    5b:83:d9:ca:37:8a:49:51:e6:75:54:27:ae:fa:ea:
                    97:64:4a:3d:dd:8c:b6:07:d4:8f:13:68:ab:ed:b1:
                    8f:3f:3b:0a:90:b5:38:fd:e1:d9:b0:c9:11:57:b1:
                    8a:3e:18:5d:8c:b7:52:10:99:8e:c2:8e:97:c7:ce:
                    53:9d:3e:ba:c8:cb:6f:00:73:b3:a4:93:50:81:51:
                    ad:b2:59:74:29:e0:73:f2:d5:a1:e1:00:6a:72:d4:
                    02:1c:f2:ea:f7:07:86:69:e4:28:71:b1:1e:64:43:
                    24:cb:35:d7:a1:79:11:cd:c7:77:53:f9:f5:68:a0:
                    f6:f8:c4:85:0a:e5:58:67:0d:ea:c5:1b:12:74:b7:
                    51:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:9F:90:F7:B7:C1:AF:5D:2B:73:91:77:48:D4:0B:31:47:52:1E:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50/728a07be-35f9-32b8-a947-4c03fbfddac4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50.crl

            X509v3 Authority Key Identifier:
                keyid:29:D8:39:BC:8F:B6:00:7C:FB:EB:42:7D:25:FD:CB:C4:A5:92:1C:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.196.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:39:41:96:fe:39:0b:a4:bb:1b:35:83:9b:77:d7:01:56:92:
         49:f9:3e:a7:f6:f2:1f:a5:1d:75:aa:da:7c:4d:31:bc:30:5c:
         a8:00:6e:7d:67:8f:47:98:80:3a:2c:2f:16:5a:63:15:9a:16:
         5c:e4:b1:a4:13:30:91:a7:66:74:fc:e3:eb:d1:a3:b5:01:7a:
         60:2c:0f:e3:56:98:87:ad:dc:c7:16:76:b7:56:43:34:5b:89:
         99:08:de:fe:2c:f7:2d:21:1b:8b:bc:6e:19:4b:2b:12:25:a5:
         c7:9b:b9:68:9f:73:74:5e:9f:8e:cc:c8:93:b1:ff:8c:f1:f2:
         90:bf:54:b3:1e:eb:6d:ae:3d:4a:8f:b5:4d:83:77:be:64:f0:
         31:c5:cf:b4:4f:7d:28:c2:85:85:84:50:13:99:9e:bb:ad:2a:
         e8:13:4b:37:e7:b7:a8:fe:0d:1a:86:39:7d:af:c5:dc:5d:dc:
         68:64:32:68:e7:c2:ab:cb:4c:71:fe:43:7a:7c:cb:fc:e4:a8:
         d9:25:23:25:0e:16:ed:fd:f4:95:38:d0:2f:1a:d1:01:ec:61:
         05:b5:b2:ed:28:3a:d8:55:c4:44:a3:d6:ed:29:b7:1e:f9:80:
         68:40:29:96:94:90:4c:fc:cf:d0:b8:fa:ad:fe:53:bd:e9:82:
         77:70:58:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 18:34:21 2026 by rpki-client