Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/a8e50db5-9074-37a9-98cf-27d755ac2384.roa
File:                     a8e50db5-9074-37a9-98cf-27d755ac2384.roa (raw, json)
Hash identifier:          +CZnnpoanbHoSMBfriDpSwq8FH3zDSuVnR8kYkGnVOQ=
Subject key identifier:   07:F0:60:85:08:E4:B1:0A:26:C8:52:30:09:74:AA:7B:AB:4D:42:65
Certificate issuer:       /CN=5294026e-22fb-4d13-b040-a0d74302e57e
Certificate serial:       010D0C9F4328584E7634C7197D348732FF480E00
Authority key identifier: 01:9A:82:A4:B4:AB:DC:DA:9E:35:9F:5A:72:BB:1A:93:59:97:7B:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/a8e50db5-9074-37a9-98cf-27d755ac2384.roa
Signing time:             Sat 11 Jul 2026 09:00:12 +0000
ROA not before:           Sat 11 Jul 2026 09:00:12 +0000
ROA not after:            Fri 09 Oct 2026 09:00:12 +0000
asID:                     10361
IP address blocks:        69.191.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/5294026e-22fb-4d13-b040-a0d74302e57e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/5294026e-22fb-4d13-b040-a0d74302e57e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:76:34:c7:19:7d:34:87:32:ff:48:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5294026e-22fb-4d13-b040-a0d74302e57e
        Validity
            Not Before: Jul 11 09:00:12 2026 GMT
            Not After : Oct  9 09:00:12 2026 GMT
        Subject: CN=f4cb94d3-c67e-4846-8b85-2f6f7eb63c23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:05:eb:d8:1c:25:1c:93:ed:ce:93:19:33:b7:
                    9e:05:bd:b2:27:8c:ff:3c:df:74:59:96:fa:bb:df:
                    1c:90:07:20:a7:7c:23:32:b7:95:7a:84:b4:db:9a:
                    19:5b:ad:a4:1e:bc:89:7b:bc:06:a3:07:ad:27:70:
                    56:bc:00:c8:7e:d7:32:30:41:8e:b2:87:e3:15:0b:
                    0f:a0:78:e7:24:5d:49:20:61:bc:57:28:22:24:a4:
                    ab:36:5f:e1:cd:34:0d:19:b6:0c:dd:fd:0c:a7:a8:
                    df:fb:af:1d:ec:d8:d4:32:5e:2f:ce:44:ce:90:e2:
                    15:be:32:e5:66:7e:13:e9:11:b3:1d:a3:15:0f:ac:
                    ac:2f:f0:e2:26:9c:3b:ce:37:b8:d9:a1:4f:96:7d:
                    f8:8c:ed:36:f6:d3:84:d4:8b:66:b4:f8:4f:14:b2:
                    f3:c7:26:f8:bd:0d:e9:e5:97:e9:2d:48:20:6a:93:
                    2c:d9:35:41:78:0a:c8:90:25:17:44:ce:72:b1:4c:
                    91:a3:27:d5:df:78:e4:a0:d0:da:f7:b0:71:9b:67:
                    b9:09:f2:9b:77:a8:87:9f:3b:07:a9:50:3a:ff:ec:
                    37:95:ec:6a:09:c7:ad:5f:b2:d0:34:37:a7:c9:3a:
                    d7:25:18:4f:65:4b:cf:7e:ed:22:86:84:a3:e9:87:
                    16:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F0:60:85:08:E4:B1:0A:26:C8:52:30:09:74:AA:7B:AB:4D:42:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/a8e50db5-9074-37a9-98cf-27d755ac2384.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/5294026e-22fb-4d13-b040-a0d74302e57e.crl

            X509v3 Authority Key Identifier:
                keyid:01:9A:82:A4:B4:AB:DC:DA:9E:35:9F:5A:72:BB:1A:93:59:97:7B:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.191.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:6f:e7:25:b5:34:b6:f0:7c:e1:1d:da:f5:e2:6d:c3:ef:12:
         31:40:1e:fe:fb:44:99:57:ad:41:0d:f5:ba:9f:bf:cf:dc:71:
         cb:4b:71:2c:90:2b:9c:ce:2f:7b:fa:9c:34:eb:a9:7f:d8:e5:
         c5:36:32:3b:3d:46:ce:ef:05:3f:4f:82:90:b0:6d:31:c2:14:
         0a:be:ad:db:15:2e:46:ed:e2:0c:6b:2a:31:f9:1f:8f:19:38:
         51:9b:25:8e:1b:f7:8d:fe:ec:7d:b5:86:62:c1:96:70:32:75:
         f3:35:84:e3:eb:11:9a:97:f8:9b:b0:6b:5e:65:37:91:1a:54:
         d5:7f:1d:f7:44:43:e6:9a:3c:52:44:b8:fe:dd:2b:2d:99:3d:
         62:44:21:f6:a0:89:1e:bd:08:d4:91:a7:57:ed:2a:90:6d:cf:
         c5:0b:de:7b:af:12:8c:6a:28:84:42:31:da:b3:4c:01:e2:f5:
         1f:a5:c2:6b:99:b3:0d:07:a8:e8:59:02:db:4c:72:69:bc:fb:
         9b:bc:63:5a:e4:b7:58:f7:3a:9e:d5:70:04:23:c3:42:8d:33:
         10:5c:d1:4b:27:e3:4f:1d:e5:cf:69:94:51:9a:06:2f:57:02:
         f2:e2:72:75:43:d2:11:dc:bd:eb:35:af:42:61:32:06:ef:9b:
         fe:a2:d6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 12:56:32 2026 by rpki-client