Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/9c56db0c-2c41-34c0-8d61-4cdfcc62ee6e.roa
File:                     9c56db0c-2c41-34c0-8d61-4cdfcc62ee6e.roa (raw, json)
Hash identifier:          R8vRN70boZSTNnAFxQmU5b7YLdIvCJDpEnznd8FPMgU=
Subject key identifier:   A9:9F:19:ED:1C:BA:E6:B4:6F:3B:B9:57:CD:6F:6A:36:BA:3E:12:27
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584E07009A33FE00606AF575BAA0
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/9c56db0c-2c41-34c0-8d61-4cdfcc62ee6e.roa
Signing time:             Mon 01 Jun 2026 13:00:10 +0000
ROA not before:           Mon 01 Jun 2026 13:00:10 +0000
ROA not after:            Sun 30 Aug 2026 13:00:10 +0000
asID:                     25961
IP address blocks:        69.1.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 02 Jun 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:00:9a:33:fe:00:60:6a:f5:75:ba:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Jun  1 13:00:10 2026 GMT
            Not After : Aug 30 13:00:10 2026 GMT
        Subject: CN=0ff775ca-3c95-4297-8d63-904873c768f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:61:71:55:ba:fd:c7:c0:05:c3:87:70:c5:f6:
                    40:6c:c3:90:af:88:63:f6:2d:b1:09:99:91:01:3a:
                    cd:41:72:4e:53:34:0b:16:58:52:82:2f:7b:b9:7b:
                    9c:04:fc:c5:94:71:fb:b1:f8:e4:3c:30:e9:02:ec:
                    ea:d0:3d:c2:9e:6e:cf:33:4d:c2:8f:8c:e9:58:05:
                    81:dd:47:eb:56:55:7f:08:37:87:5c:5f:74:57:69:
                    14:e4:b8:54:06:c0:f7:5b:56:79:ae:a8:23:a4:a9:
                    b0:1e:77:5e:fc:dd:69:6f:b9:06:44:df:dc:3f:bf:
                    5a:02:e6:c2:f5:80:47:94:e4:5f:15:69:50:ad:d5:
                    ef:af:d2:d6:fa:ce:32:55:90:71:b7:3f:4d:6f:8d:
                    dc:ff:15:03:41:a4:b0:73:b6:97:db:f8:58:a6:f7:
                    02:89:fd:41:78:05:93:94:ea:99:8f:63:32:88:a9:
                    34:dd:aa:ea:b0:c6:b0:e6:e1:de:be:af:14:11:54:
                    cd:62:c5:95:2e:ba:d5:5a:a5:4d:90:7e:10:10:18:
                    17:f4:70:26:8f:33:32:fd:e0:b3:6f:3f:37:f0:c1:
                    96:5b:6d:b5:71:3d:f7:1d:1c:d1:02:7e:4d:54:ca:
                    cd:0a:a9:cd:ec:16:69:a1:b4:72:d3:5c:18:ef:cc:
                    82:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:9F:19:ED:1C:BA:E6:B4:6F:3B:B9:57:CD:6F:6A:36:BA:3E:12:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/9c56db0c-2c41-34c0-8d61-4cdfcc62ee6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.1.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:2f:21:39:b7:8a:c9:0a:34:db:18:dc:dc:7b:52:f6:ef:dd:
         c9:8b:01:74:1f:ff:96:c9:29:93:4f:00:7b:30:cd:f1:6a:6d:
         35:ed:4c:f0:2d:b5:8a:95:e7:e6:9e:b3:fd:0d:62:ee:cd:75:
         d4:d8:6e:2d:ee:1e:40:67:5c:78:bc:ee:3d:fc:25:24:8a:6f:
         24:ac:4c:73:c2:ba:20:fe:ed:5d:df:32:b5:f4:d6:ec:58:c8:
         a4:fe:2a:cb:8b:e9:2a:91:c9:f4:1d:96:43:08:a7:c9:f6:9e:
         5f:d6:47:e4:87:68:0d:4b:0d:b9:e3:fe:38:10:c8:90:8f:73:
         05:06:0e:4e:9b:56:16:bb:b1:34:45:e2:00:57:5c:fc:6c:d2:
         01:36:7a:30:69:d9:d7:65:da:fb:1a:80:c8:e3:7f:b6:af:a5:
         84:67:cd:ae:fe:b9:23:85:72:43:2a:9b:2c:dc:d9:39:e9:16:
         b0:a4:9f:fe:0b:34:89:c2:71:f4:ad:2a:8c:fe:97:04:d4:57:
         e6:01:9f:4d:68:0e:45:cd:40:05:9f:0c:38:8f:9c:37:a2:78:
         2a:fe:53:00:ee:c6:cf:51:83:e9:58:7e:c7:24:41:f5:eb:86:
         a1:27:be:06:8d:e0:4b:85:47:74:03:7c:9e:2a:65:d6:00:05:
         a5:f1:66:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 1 22:57:34 2026 by rpki-client