Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/70cfb0d7-d749-381f-96a3-04ecdd3c25d0.roa
File:                     70cfb0d7-d749-381f-96a3-04ecdd3c25d0.roa (raw, json)
Hash identifier:          6qtakOKSNnmiCppBo17+QCJShrwy8J/6v1coD+UjGVY=
Subject key identifier:   1A:CB:B7:32:8A:15:21:C3:45:87:5B:E3:36:E6:51:A5:A5:57:7B:15
Certificate issuer:       /CN=911afcc4-db22-4282-acca-e1e676a5ae20
Certificate serial:       010D0C9F4328584D6DB886FD980CFB5F5037D460
Authority key identifier: 69:1A:B6:E8:3E:67:94:46:39:E2:EF:D1:4C:D5:E4:75:69:36:90:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/70cfb0d7-d749-381f-96a3-04ecdd3c25d0.roa
Signing time:             Tue 07 Apr 2026 15:16:29 +0000
ROA not before:           Tue 07 Apr 2026 15:16:29 +0000
ROA not after:            Mon 06 Jul 2026 15:16:29 +0000
asID:                     16509
IP address blocks:        199.68.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:b8:86:fd:98:0c:fb:5f:50:37:d4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=911afcc4-db22-4282-acca-e1e676a5ae20
        Validity
            Not Before: Apr  7 15:16:29 2026 GMT
            Not After : Jul  6 15:16:29 2026 GMT
        Subject: CN=f6a2c9c6-75ac-495c-84f3-7c4407202af7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:dc:61:e1:bd:e2:93:a6:8d:c4:77:f8:f4:ec:
                    d2:08:33:cf:79:44:db:5f:74:ed:00:4e:0b:ba:8b:
                    84:7a:e3:4e:ce:f6:bb:e3:33:0c:c2:c9:78:7c:4e:
                    7e:24:05:53:3d:ea:a4:ea:60:1a:08:d4:00:27:90:
                    7c:d5:41:e5:3e:d3:44:4f:58:6a:81:b5:5a:ea:37:
                    f5:61:96:21:c3:d0:03:b1:79:82:2e:60:8b:2a:43:
                    2f:e9:e1:b5:52:6d:d2:ec:c0:a0:a4:e3:54:e6:69:
                    56:f9:7f:ea:f1:93:55:fa:94:a0:5c:3c:fa:1b:23:
                    6a:80:b0:83:e0:17:04:4b:db:2e:80:95:3b:c4:54:
                    47:f4:bd:47:ba:e2:7d:d5:a2:3d:55:53:41:73:d8:
                    12:db:20:12:59:38:67:1a:e3:19:18:26:16:56:8a:
                    63:ef:70:28:a2:95:b0:8d:5b:a9:12:ed:a7:a6:95:
                    22:10:5d:ec:e7:12:02:0a:57:e3:ba:d7:da:be:3b:
                    fe:c8:aa:f8:56:e8:f2:e0:02:fd:9a:58:12:55:b0:
                    a4:19:95:8b:e5:c9:7c:a9:dd:46:50:ff:01:74:7f:
                    87:75:d7:3f:d2:f9:e5:7a:37:1c:64:fb:f7:9f:79:
                    ae:6b:c4:bf:b1:67:30:dc:fb:c1:d6:7c:7c:5f:91:
                    3b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:CB:B7:32:8A:15:21:C3:45:87:5B:E3:36:E6:51:A5:A5:57:7B:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/70cfb0d7-d749-381f-96a3-04ecdd3c25d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.crl

            X509v3 Authority Key Identifier:
                keyid:69:1A:B6:E8:3E:67:94:46:39:E2:EF:D1:4C:D5:E4:75:69:36:90:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.68.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:fc:70:54:ae:d3:43:64:c3:76:3f:17:e9:02:15:dd:f6:9f:
         6f:2b:dd:0d:8b:63:6a:db:af:6b:2e:69:67:bc:cb:94:d0:25:
         ba:e0:44:f4:55:43:f1:b7:a5:8a:c5:9f:9f:3c:08:0e:90:32:
         b3:64:ee:83:d9:fa:f1:1b:f9:89:ec:ee:65:3c:d6:f6:50:63:
         d3:28:b5:fe:14:0a:7d:ed:09:92:50:ef:cc:b0:f5:58:48:35:
         11:a4:4c:bf:6a:9d:0f:37:85:f0:81:0d:2c:e2:ad:d8:d5:be:
         47:9e:f2:84:32:1d:11:af:fa:87:04:4d:80:f1:d2:61:99:44:
         4f:45:ab:77:c1:63:7d:13:58:af:d4:73:90:d2:cd:94:b0:a7:
         67:39:72:c2:a3:a3:f0:05:6f:bf:c7:a1:4c:af:b5:ee:79:25:
         eb:59:65:51:7b:af:a2:b3:05:f6:08:61:0f:ff:6c:c4:e3:11:
         80:bc:d3:77:2b:ca:5e:bb:5a:6d:c5:7e:0b:ab:f6:9e:48:06:
         5d:b7:8e:6a:ad:87:d1:c8:b6:10:2a:c8:0f:26:04:89:6f:66:
         cd:e1:98:74:3e:bb:4d:4c:ab:71:46:09:f8:2b:81:a3:35:60:
         05:78:46:f0:a6:2a:4e:04:aa:c6:8d:56:96:4c:a5:7a:33:eb:
         6d:8a:76:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 18:45:20 2026 by rpki-client