Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782/42027eea-f518-38da-a8a8-97e9aca956d3.roa
File:                     42027eea-f518-38da-a8a8-97e9aca956d3.roa (raw, json)
Hash identifier:          1ye7D8Uy0nzSh4fprgMebEliGddI7p34F8PfwMKGLL8=
Subject key identifier:   78:4D:8D:E8:A0:C4:F9:78:44:22:E2:28:A5:1A:B7:36:0B:02:34:84
Certificate issuer:       /CN=cb3c1858-774e-412f-8f35-dbceb0979782
Certificate serial:       010D0C9F4328584E210EFD747193914034F1C440
Authority key identifier: B3:17:21:79:FB:C7:21:75:01:31:E9:A1:28:22:A6:C2:CA:8D:B6:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782/42027eea-f518-38da-a8a8-97e9aca956d3.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     23118
IP address blocks:        69.36.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782/cb3c1858-774e-412f-8f35-dbceb0979782.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782/cb3c1858-774e-412f-8f35-dbceb0979782.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0e:fd:74:71:93:91:40:34:f1:c4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb3c1858-774e-412f-8f35-dbceb0979782
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=d9215804-c23d-48c4-a3ea-b66324c62457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8c:f3:ac:33:63:02:5c:54:e0:c6:c0:26:bf:
                    13:29:79:83:ac:54:77:b4:27:19:69:94:8e:fc:bf:
                    ca:fb:48:71:15:aa:b2:f7:86:c6:5f:b2:dc:aa:e5:
                    f5:71:1b:fe:bd:bb:5b:fe:17:21:c7:f6:3e:35:ee:
                    08:00:b1:87:76:3d:4c:06:47:2f:c1:78:59:45:d8:
                    ca:3e:a1:56:4e:08:c3:7f:b6:ee:75:af:10:0c:b1:
                    a1:db:79:a1:18:59:fa:d7:82:76:85:f9:ef:0a:f8:
                    90:f6:13:0c:80:2e:2d:00:aa:2e:52:03:5e:8a:54:
                    0e:94:43:28:15:6f:63:f1:2e:90:a9:8c:3f:67:25:
                    c9:e9:a2:5a:55:50:eb:90:5f:8e:a2:ad:b4:1d:88:
                    99:31:31:fc:a9:e5:f4:87:a8:3b:e5:e2:84:22:3d:
                    0f:6c:9a:0e:1a:ce:a7:a7:4b:a5:84:06:f7:c5:b8:
                    32:64:5d:ad:c0:39:1b:e7:89:a1:88:f2:97:c5:87:
                    f0:57:44:37:be:1e:eb:0e:69:d2:f7:84:5b:26:8a:
                    33:2b:7e:67:a8:86:29:11:af:04:10:d3:b1:78:3d:
                    1a:e5:6d:18:ef:4c:b1:53:d6:36:e9:11:0c:8a:05:
                    1a:c6:4d:9a:c5:59:de:5d:91:cc:81:81:dc:42:3d:
                    e0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:4D:8D:E8:A0:C4:F9:78:44:22:E2:28:A5:1A:B7:36:0B:02:34:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782/42027eea-f518-38da-a8a8-97e9aca956d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782/cb3c1858-774e-412f-8f35-dbceb0979782.crl

            X509v3 Authority Key Identifier:
                keyid:B3:17:21:79:FB:C7:21:75:01:31:E9:A1:28:22:A6:C2:CA:8D:B6:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.36.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:f6:10:17:b1:2f:43:0d:eb:93:a9:96:78:42:44:bc:a2:cf:
         86:18:99:ea:2d:78:4b:dd:4f:6f:14:e9:10:b2:e0:e6:1b:3c:
         05:2e:9a:d0:af:e1:c5:ab:82:8a:74:91:d8:cf:28:63:3f:a9:
         26:b6:75:6d:d8:b6:38:5a:74:15:73:12:e1:32:96:2c:33:b1:
         9d:b2:be:18:73:fe:90:5b:aa:0b:e0:ee:da:67:4f:7a:cc:c9:
         ff:e5:bc:ca:c5:73:bd:b0:ef:0d:c4:a4:cb:58:a8:3d:74:1e:
         ee:f0:4b:aa:ce:43:bb:f9:2f:01:1b:d5:30:0d:2d:b9:65:52:
         76:5f:ee:dd:86:a0:9e:5d:51:39:9b:62:0c:a7:76:e3:c9:22:
         41:1f:e0:01:48:9f:bc:c4:75:04:79:5f:c2:73:4d:93:ac:37:
         8d:8a:2f:62:b4:2e:8b:62:10:b4:82:4b:c3:93:f6:bc:85:33:
         10:08:8d:0b:7d:d2:8b:1b:00:68:f6:ef:8e:df:f2:26:8b:bf:
         32:45:da:88:22:76:08:27:e6:3c:f3:c4:03:e2:7d:eb:d2:b3:
         5d:3c:07:7c:2c:aa:c7:e6:25:f4:48:40:9f:f8:fb:b4:27:7e:
         9a:d2:68:0b:bd:2f:6a:d1:d4:81:e6:06:bd:06:b4:3f:41:c6:
         90:72:0a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 17:59:14 2026 by rpki-client