Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/a39b8138-6673-39e6-9aa9-4785a59f1238.roa
File:                     a39b8138-6673-39e6-9aa9-4785a59f1238.roa (raw, json)
Hash identifier:          xIgVLDA4qJchjg02n+KlRRfbKUshBkWRnMXI1x/7UzY=
Subject key identifier:   D5:DA:F3:D1:14:E5:5A:84:DD:26:63:56:24:3D:4B:88:9E:4F:92:43
Certificate issuer:       /CN=5294026e-22fb-4d13-b040-a0d74302e57e
Certificate serial:       010D0C9F4328584D667A5A058DF23D68C76CD200
Authority key identifier: 01:9A:82:A4:B4:AB:DC:DA:9E:35:9F:5A:72:BB:1A:93:59:97:7B:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/a39b8138-6673-39e6-9aa9-4785a59f1238.roa
Signing time:             Sun 05 Apr 2026 01:00:24 +0000
ROA not before:           Sun 05 Apr 2026 01:00:24 +0000
ROA not after:            Sat 04 Jul 2026 01:00:24 +0000
asID:                     10361
IP address blocks:        69.191.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/5294026e-22fb-4d13-b040-a0d74302e57e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/5294026e-22fb-4d13-b040-a0d74302e57e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:66:7a:5a:05:8d:f2:3d:68:c7:6c:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5294026e-22fb-4d13-b040-a0d74302e57e
        Validity
            Not Before: Apr  5 01:00:24 2026 GMT
            Not After : Jul  4 01:00:24 2026 GMT
        Subject: CN=6cbb5700-f05d-41db-8f1d-990e68e35495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6d:10:d3:76:4e:28:28:5e:2d:fe:4d:a7:d6:
                    f9:cc:d7:b9:cd:ed:9d:0a:61:b1:c0:2d:34:59:10:
                    91:d7:8f:45:eb:32:31:87:1c:33:fa:f9:83:67:84:
                    9f:ad:2b:74:2d:d8:3e:17:22:b8:54:74:a9:2c:ba:
                    9c:f9:dd:c8:69:17:a3:f3:c4:6e:c2:8b:30:6d:84:
                    d6:9c:ff:e3:47:3f:d8:8c:9a:ca:78:55:fa:7f:a8:
                    cf:be:7b:17:08:2a:25:a9:98:c8:ee:87:d8:7a:be:
                    10:cd:ad:96:32:4e:fe:76:42:a3:1f:93:05:c0:52:
                    b6:e4:c8:9b:d9:de:0f:4f:65:33:25:33:36:c1:e4:
                    a6:aa:2e:bf:98:43:c3:a1:38:aa:65:59:5c:9c:dc:
                    88:c1:b7:ef:b1:30:17:e8:bc:cd:49:1d:c6:d3:ff:
                    97:b7:a5:f5:43:f6:d8:19:41:a8:e8:56:60:c6:36:
                    85:c8:49:81:f2:09:dc:77:b0:89:32:f0:54:d3:c7:
                    49:30:77:cf:ca:e6:68:b2:44:d2:fe:28:a2:49:b4:
                    3d:23:e7:e7:2a:9f:c5:5d:9a:cf:1b:6e:b4:a4:1e:
                    ff:aa:a5:96:49:17:54:2a:65:82:6a:0e:bf:49:f6:
                    9a:32:c9:4d:be:6d:d0:e1:66:ff:6a:90:56:6a:82:
                    60:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:DA:F3:D1:14:E5:5A:84:DD:26:63:56:24:3D:4B:88:9E:4F:92:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/a39b8138-6673-39e6-9aa9-4785a59f1238.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/5294026e-22fb-4d13-b040-a0d74302e57e.crl

            X509v3 Authority Key Identifier:
                keyid:01:9A:82:A4:B4:AB:DC:DA:9E:35:9F:5A:72:BB:1A:93:59:97:7B:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.191.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:05:74:c4:2e:7b:8a:00:ea:a1:2e:3c:74:d2:51:54:2c:54:
         ac:27:8c:c3:4a:cd:94:4c:8a:08:21:c2:8f:2e:bd:6e:d2:ab:
         4c:17:39:82:7d:c3:7b:9e:d1:32:3d:04:b9:72:a8:a1:98:18:
         b0:be:df:e5:98:af:41:80:d6:24:20:5a:cb:6e:1b:dc:fc:8e:
         51:8e:58:d7:c2:34:0f:04:19:b4:4a:cd:9d:e5:b8:55:26:cb:
         ed:a4:93:c5:8a:d6:b5:8c:50:91:c0:b4:54:de:1e:f6:07:bd:
         6d:7d:7a:d3:09:5a:31:c5:7f:ee:73:42:ec:f7:5c:3c:89:90:
         72:be:09:ee:25:29:0c:10:bc:db:b3:a9:08:3c:ae:60:9b:f8:
         2e:f1:1b:3d:5a:77:ff:3f:cd:f1:90:b4:f4:00:7a:dd:a4:97:
         c4:29:82:c8:c7:41:f5:92:d3:7e:c0:13:ba:1f:bc:c9:f7:a1:
         01:e1:d7:89:42:6f:d2:4e:23:98:6a:c8:37:7a:3c:09:2e:7b:
         ef:dd:ba:6a:a0:a3:5e:e4:a3:f7:6f:6c:cd:06:a0:08:11:73:
         5f:b1:48:b3:d0:b7:3f:00:8e:a7:57:8e:37:f2:61:ad:1e:51:
         16:b8:b2:03:17:84:4f:11:dd:1f:09:5e:8a:e3:ab:ca:49:0d:
         72:18:e1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 19:38:59 2026 by rpki-client