Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/e392cf93-7481-30cf-b74b-7885c2cd3502.roa
File:                     e392cf93-7481-30cf-b74b-7885c2cd3502.roa (raw, json)
Hash identifier:          JdrPYY/TkHVtoHYgrj+Pt4nqtL7U9OYXam2iPVsCgXk=
Subject key identifier:   82:44:4B:C6:21:4D:73:ED:50:FF:56:36:26:0A:A6:14:A5:5C:FD:D3
Certificate issuer:       /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial:       010D0C9F4328584D55BA397E957F768D60DA6D00
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/e392cf93-7481-30cf-b74b-7885c2cd3502.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     2386
IP address blocks:        69.51.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:39:7e:95:7f:76:8d:60:da:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=6e9f91b0-4eed-4029-adce-947c8e63fa9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ef:87:18:e0:df:08:6f:e1:ed:43:d4:d0:4f:
                    89:c4:39:04:14:ad:33:fc:be:0f:9a:3e:17:87:d6:
                    26:23:de:72:95:35:b0:9e:3b:1d:64:60:c7:06:ca:
                    24:57:85:d8:43:af:88:89:51:18:7f:f4:1d:8f:ba:
                    8f:10:6e:e7:4e:78:3f:5e:a6:53:e5:a6:46:64:66:
                    96:92:45:6f:d2:9b:d0:58:77:9e:5e:02:24:90:60:
                    8d:f6:66:67:1e:fc:a5:46:5b:30:37:6f:20:67:63:
                    8e:c9:4e:84:ee:69:ea:8f:f8:6c:d9:1a:ad:92:fa:
                    96:6a:f7:52:2e:97:4d:e2:ed:ad:6d:da:bc:ea:f7:
                    58:8d:60:05:dc:1a:df:a4:15:df:ab:b0:95:7b:31:
                    71:cb:9f:6a:40:2e:73:3f:59:ad:83:7a:1e:3d:fc:
                    8f:47:c8:87:27:e3:f7:2d:ee:49:56:29:bb:a7:27:
                    52:d2:d4:4d:5e:08:87:0e:e0:a5:b2:6c:68:b7:92:
                    51:3f:c4:68:2b:56:79:05:3c:0a:de:46:78:bf:40:
                    5d:f4:20:f8:58:35:fb:5c:ed:47:09:90:fe:e0:42:
                    ac:64:ea:82:79:91:22:b7:bf:2c:e1:20:4e:b8:ff:
                    f1:e2:8c:07:c3:0f:9d:fc:cf:de:40:6b:09:2f:6f:
                    6b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:44:4B:C6:21:4D:73:ED:50:FF:56:36:26:0A:A6:14:A5:5C:FD:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/e392cf93-7481-30cf-b74b-7885c2cd3502.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl

            X509v3 Authority Key Identifier:
                keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.51.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:6b:5d:f2:92:c2:e7:05:23:79:e1:00:30:ed:c4:bd:81:d0:
         f9:b3:8f:89:8c:e4:dc:af:e4:d3:34:a4:f8:3c:7e:88:04:20:
         41:28:78:bd:11:82:3e:67:69:98:fa:91:9e:9d:cf:0d:45:ab:
         03:c6:a7:32:bf:7e:db:cf:3d:a2:0b:13:59:92:9d:07:64:87:
         52:8e:74:97:37:55:49:ab:dc:df:45:8a:19:7e:25:6a:19:ef:
         d4:23:77:81:f7:7d:67:b6:9c:ce:5b:3a:5d:82:df:54:6f:31:
         56:b0:fe:59:0e:07:a7:87:64:88:2e:ea:05:6f:b7:78:bb:73:
         09:20:a7:3d:41:df:ed:78:8a:8a:84:8b:fe:54:76:72:ba:98:
         2b:08:99:11:b8:7b:f7:a6:2c:f7:28:16:c8:47:4e:5b:12:4b:
         d7:73:a5:8e:63:8f:e4:78:e9:7e:09:4b:1e:b3:64:f7:36:60:
         20:11:45:9f:2a:da:f2:53:7d:56:50:2f:f9:be:62:84:8f:21:
         4c:b3:22:14:f9:91:ae:2c:20:b2:08:0f:03:0a:e6:8c:b3:ef:
         79:5a:db:fb:e2:f5:1f:0e:60:d3:b2:fe:02:18:e0:e2:b1:1b:
         65:a3:c2:ea:3c:0c:2a:35:3e:20:e1:8c:28:68:84:93:43:3c:
         d7:5a:41:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:25:30 2026 by rpki-client