Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/d36f4611-6cc9-3900-a5b1-383290f44950.roa
File:                     d36f4611-6cc9-3900-a5b1-383290f44950.roa (raw, json)
Hash identifier:          FxgutJc4IM/wvCe5Vd9nHPSqJrmlm0LLEAeuZLJ5LMM=
Subject key identifier:   77:6B:DC:E3:71:A9:6F:0C:DE:FE:01:0D:C7:C2:6D:C9:67:01:FD:70
Certificate issuer:       /CN=974309dc-20f5-4894-9707-f2e446573ea1
Certificate serial:       010D0C9F4328584EA79752F616C22131A8EB01C0
Authority key identifier: F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/d36f4611-6cc9-3900-a5b1-383290f44950.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16509
IP address blocks:        69.67.168.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:52:f6:16:c2:21:31:a8:eb:01:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=974309dc-20f5-4894-9707-f2e446573ea1
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=fdfa936a-dd40-49c1-9646-423906972428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a7:08:35:b5:2a:41:d3:d6:c3:02:13:6e:49:
                    e7:0e:06:2c:20:c6:f8:c1:48:23:dd:49:0c:e9:d0:
                    14:de:d9:c4:11:29:cc:72:b4:72:3d:cb:2f:43:34:
                    0c:bf:76:c5:0a:7e:19:07:80:6f:8c:c9:7f:6e:1b:
                    c9:4b:ac:e0:45:43:e0:ab:ef:8e:b4:f5:28:78:97:
                    29:00:1c:4c:33:71:af:72:bd:99:e7:d7:ee:5e:fc:
                    ae:55:e1:90:f4:9e:93:88:6d:7a:20:e4:31:5a:cc:
                    ee:50:65:e6:7e:d6:d8:dd:37:95:fe:57:92:01:89:
                    0a:28:64:4f:63:1e:45:db:c5:c1:4a:6c:29:f8:70:
                    8b:79:59:23:73:6a:d3:44:a7:58:bf:39:3d:dc:f7:
                    86:2c:eb:4f:7b:e5:f9:59:35:f2:e1:65:fb:84:07:
                    c2:65:e8:d9:fd:29:e8:2b:5f:52:14:36:5f:37:47:
                    d6:18:00:ff:7b:91:e8:f5:f4:b3:08:8b:98:e4:02:
                    5c:fa:14:83:5e:56:93:d0:b9:47:08:62:fc:1c:ab:
                    db:09:c9:18:fa:33:18:de:1f:22:b8:c5:ca:20:d2:
                    c5:53:07:0e:f1:a8:5b:82:bc:96:3e:5e:fa:86:72:
                    04:b9:13:d5:50:3c:1e:a9:41:dd:b6:59:18:43:c2:
                    fd:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:6B:DC:E3:71:A9:6F:0C:DE:FE:01:0D:C7:C2:6D:C9:67:01:FD:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/d36f4611-6cc9-3900-a5b1-383290f44950.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.crl

            X509v3 Authority Key Identifier:
                keyid:F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.67.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:4d:83:81:24:6a:87:4d:ba:e4:77:dd:99:99:0e:79:08:d7:
         cc:c9:a5:83:f2:90:a2:ef:7f:c5:b6:57:7f:f0:dc:78:5b:39:
         e1:ba:cb:e2:98:e9:e5:44:37:4f:38:e2:f9:87:ae:28:9e:f5:
         61:36:e0:82:35:6f:26:73:e8:3c:eb:39:65:ee:b5:92:59:ac:
         07:e9:a0:8d:9a:4c:3d:ed:62:df:33:f9:fb:0e:3a:65:33:46:
         8b:fe:e0:b5:fe:99:10:cc:1d:6e:1a:ec:bd:41:68:56:15:4a:
         b3:72:f0:89:a3:8f:1d:ae:ab:25:8d:9e:4f:ec:9b:45:7e:de:
         3b:37:cb:c5:ca:d0:9c:ef:c6:2f:db:32:aa:4c:aa:c1:19:bd:
         8b:28:4e:61:64:1e:3b:c1:e2:48:4d:68:d1:e3:3d:74:6b:05:
         84:7e:f4:09:90:82:af:66:16:ab:09:0a:80:5a:a2:c1:07:92:
         e7:41:b5:bc:a6:06:98:2a:98:30:bf:50:ef:e7:97:ef:47:d9:
         c2:84:e1:e2:e4:a9:86:88:fc:d2:73:29:5a:cb:24:cf:69:d5:
         54:7f:b2:5a:29:b1:5b:ef:aa:a3:01:19:c3:16:ea:e3:d0:4a:
         e4:c3:1e:71:ca:cd:e1:13:cb:3a:28:47:62:55:54:f3:a4:23:
         65:d2:1d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:41:04 2026 by rpki-client