Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/608cae8c-13d9-3110-b8d8-3db08c5e256a.roa
File:                     608cae8c-13d9-3110-b8d8-3db08c5e256a.roa (raw, json)
Hash identifier:          9PuGFNJkz92SQRFY7hAUD4MDQ1lKPpOSKrwzcENyY8c=
Subject key identifier:   65:2E:5C:85:35:06:27:E0:AC:14:0D:D2:67:A3:BD:6B:3E:FF:35:F3
Certificate issuer:       /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial:       010D0C9F4328584F7A4D8E93C5E958029E4D6E80
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/608cae8c-13d9-3110-b8d8-3db08c5e256a.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     11273
IP address blocks:        69.51.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4d:8e:93:c5:e9:58:02:9e:4d:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=30749a6f-31b8-4789-a5ac-be3d374aa51f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:79:4c:7f:09:f6:9a:7e:3e:ef:cd:d6:da:77:
                    c9:ee:8e:b9:d9:1a:7a:6b:85:df:d0:2c:60:43:a0:
                    3c:47:21:48:ce:3d:79:eb:a3:c3:33:d8:46:53:ac:
                    03:8d:e4:55:57:63:3c:da:fa:4d:51:26:4b:50:be:
                    09:85:2e:1d:4a:ea:ec:37:3d:79:c5:b2:73:1c:9b:
                    28:b9:16:cb:77:15:8b:81:dc:12:9a:a7:47:90:ac:
                    7d:bb:50:8e:71:8f:d9:97:91:19:43:79:e0:76:19:
                    f4:6b:cc:5a:f2:a6:0e:9a:ba:cd:f4:fb:d1:06:0e:
                    70:a5:db:d0:0c:25:54:63:eb:c2:d4:9c:1d:53:d6:
                    c5:2f:81:f8:08:c1:2b:45:e5:87:32:a2:f1:a9:ff:
                    da:76:47:b9:87:f5:6b:1e:cb:68:a0:4b:8d:a8:10:
                    7b:56:39:a3:0d:f5:cd:03:d9:65:85:e1:6b:1f:5b:
                    d5:c4:10:d1:9a:aa:6b:0e:99:0d:c6:d7:a1:aa:be:
                    bf:5a:3b:ad:ee:85:11:07:65:10:9f:79:57:52:03:
                    34:4b:17:a8:3d:c9:4b:ae:54:a3:44:73:2d:2b:f0:
                    05:60:6d:54:f4:32:62:26:6e:75:c9:c8:3e:76:28:
                    dd:96:d6:5f:35:2d:3a:24:55:d0:6a:47:27:78:33:
                    7b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:2E:5C:85:35:06:27:E0:AC:14:0D:D2:67:A3:BD:6B:3E:FF:35:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/608cae8c-13d9-3110-b8d8-3db08c5e256a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl

            X509v3 Authority Key Identifier:
                keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.51.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:c1:9e:d8:2b:d2:a2:0f:32:bf:bf:8b:6d:ce:41:39:48:83:
         a9:97:1c:00:4c:38:36:64:75:6c:ac:58:75:e3:43:b4:aa:bd:
         0d:0c:36:49:5f:2f:ca:68:ac:c6:7d:7e:ff:3c:2c:7e:23:d6:
         33:3d:bf:2b:0f:c1:b6:a4:bf:d2:f8:a8:fd:32:96:24:58:d2:
         bf:b4:f4:9e:12:42:a1:b6:81:93:d2:b5:5a:fc:97:73:50:f5:
         37:2c:28:d4:cf:f3:01:a7:b7:61:a3:d6:71:c6:f3:86:ea:70:
         ed:a5:d4:17:43:1c:10:4d:39:b1:d7:d6:97:ac:6b:73:00:74:
         46:09:d4:7f:3b:bc:3c:ff:33:ba:8d:b4:d2:08:1f:2b:1d:9b:
         97:52:12:fa:85:a0:66:46:b9:2f:e2:5d:12:64:8b:9d:2f:94:
         bf:f5:7c:96:90:1f:cf:f3:99:a6:2b:87:29:1a:bf:a9:df:f3:
         60:5c:0a:7c:83:b9:c1:18:66:f9:73:7d:5f:f5:6a:5b:55:c9:
         3c:52:3c:25:0d:2c:ad:13:b6:ce:b0:e3:f8:9a:71:38:ab:c3:
         7a:52:8d:ec:b2:6d:2b:e7:a9:ee:53:d6:af:fd:65:c3:80:50:
         e0:4d:b2:4a:eb:1b:c0:c5:8a:0b:a0:00:93:cf:f3:bc:ea:5b:
         8f:19:b1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 20:50:21 2026 by rpki-client