Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a687c46a-89db-380a-b337-cdc67c4ee430.roa
File:                     a687c46a-89db-380a-b337-cdc67c4ee430.roa (raw, json)
Hash identifier:          01G2c/O3SJ2P+7X/VhYnX6op6YU7QkO8nb2axxAYeck=
Subject key identifier:   DC:EE:96:A8:AA:B2:F0:ED:82:3D:60:B8:53:4F:C9:3E:60:AA:95:AF
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584EA8EC48584A29FC3616481200
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a687c46a-89db-380a-b337-cdc67c4ee430.roa
Signing time:             Wed 29 Jul 2026 13:00:12 +0000
ROA not before:           Wed 29 Jul 2026 13:00:12 +0000
ROA not after:            Tue 27 Oct 2026 13:00:12 +0000
asID:                     25961
IP address blocks:        69.1.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a8:ec:48:58:4a:29:fc:36:16:48:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Jul 29 13:00:12 2026 GMT
            Not After : Oct 27 13:00:12 2026 GMT
        Subject: CN=a8c1b150-b7bd-466a-89fb-aa0e43975d0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1a:8f:0d:5b:61:6e:7b:96:78:22:ed:a3:fb:
                    d2:6c:7a:ea:d6:63:72:2c:7e:c7:86:f8:50:67:cd:
                    f3:5c:18:59:cf:ee:87:84:cc:7a:99:bb:dc:97:c9:
                    db:e9:62:38:85:44:49:64:fd:83:88:b8:42:99:cd:
                    25:85:5e:04:d6:ef:c6:30:0a:ca:48:eb:2f:8a:8e:
                    4c:b7:97:3f:4f:05:8f:72:87:0f:a1:3c:56:ff:ac:
                    35:5f:2b:79:2e:ee:cd:de:f0:45:10:41:2b:c4:0a:
                    f3:fd:63:a8:ed:00:35:50:51:d2:37:78:38:70:88:
                    67:b6:07:89:78:10:12:89:8c:4f:ac:de:21:91:05:
                    bd:31:48:a7:7b:5c:24:15:4b:7e:0e:14:50:37:79:
                    f1:df:10:12:4c:4d:df:b1:ce:61:6c:14:66:39:2a:
                    a1:bd:0f:74:de:c8:2b:82:8e:b5:54:07:42:5c:c0:
                    3a:f6:1c:e1:96:66:e0:7a:60:e8:f6:91:05:b1:ed:
                    3b:89:5d:71:d0:31:a2:51:91:0f:e9:66:5e:63:bc:
                    91:fa:90:d6:2d:54:3b:6b:d4:72:b3:be:ed:06:1e:
                    c0:bf:c1:77:64:c2:58:42:bc:5d:98:36:f8:c4:12:
                    9e:ff:b3:23:39:ac:24:bc:fe:40:f4:1e:1f:9c:28:
                    c5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:EE:96:A8:AA:B2:F0:ED:82:3D:60:B8:53:4F:C9:3E:60:AA:95:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a687c46a-89db-380a-b337-cdc67c4ee430.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.1.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:cd:48:09:2f:b0:97:84:75:a1:bf:d2:51:7e:bc:cb:92:9d:
         f4:0f:02:99:8e:92:50:11:5f:20:4f:dc:93:49:1b:59:d4:f4:
         8b:4a:3e:25:62:15:5e:97:db:d9:7c:82:28:79:0e:2b:d5:29:
         35:ad:8c:69:ff:94:1b:c7:66:58:bf:c8:20:cc:53:1d:fb:59:
         1b:a7:4c:1a:50:a2:57:10:16:7b:f5:96:bf:49:8f:cb:70:a4:
         86:7f:fb:8e:9e:24:3b:05:8f:34:ca:3f:68:f9:de:d1:d7:5d:
         0e:38:3a:bf:fe:39:1e:5b:61:30:e1:59:0f:ab:0c:d7:6c:19:
         7a:7c:e4:02:68:9c:b8:21:e7:f6:31:27:e5:fb:e7:55:d0:99:
         f7:3f:cb:33:07:ee:97:b6:25:bd:2e:58:91:5c:b1:8a:b3:40:
         9f:75:f8:05:eb:b2:c8:44:40:90:fd:bf:0c:36:38:51:ee:20:
         97:01:33:c5:43:54:5c:50:4b:f2:b0:52:d5:59:33:50:c6:8e:
         27:4f:cb:bb:f0:cf:3c:1a:54:3c:34:dc:a8:91:54:d1:61:38:
         71:c6:36:97:4b:0c:d8:7a:a7:95:d8:53:0f:96:1a:23:a9:ed:
         e8:f5:5d:e2:83:25:0c:93:4c:43:ff:c1:47:e0:31:ee:bc:bc:
         c8:91:c8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 11:23:41 2026 by rpki-client