Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/7cee06e8-d080-300e-a759-0594b0114554.roa
File:                     7cee06e8-d080-300e-a759-0594b0114554.roa (raw, json)
Hash identifier:          32SI03FhqHVpX6VGoY4CUvYFN3di2CI2+f9dQ/wTUVE=
Subject key identifier:   61:B4:22:84:32:D8:CE:2A:6F:08:F0:59:73:B7:F3:48:05:A3:BA:55
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328584E6144AA45811094F79E4CFE00
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/7cee06e8-d080-300e-a759-0594b0114554.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     30104
IP address blocks:        69.74.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:44:aa:45:81:10:94:f7:9e:4c:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=85551657-16bc-4533-a463-9a6ee76bc1ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ae:17:8f:74:7f:82:a3:f8:1a:4b:c2:49:0f:
                    dd:54:14:3a:99:4d:0a:a1:22:d7:70:64:c9:fd:4b:
                    00:5e:60:95:16:00:21:8b:e3:11:03:54:9c:eb:2e:
                    f6:b0:83:9b:ba:4a:dc:07:19:a4:76:df:a2:4d:59:
                    3a:50:b5:eb:59:65:f6:32:3e:28:c4:ae:47:32:cc:
                    bb:14:bb:4c:f8:59:cb:b6:4e:8f:ff:27:4f:c0:ad:
                    66:4d:59:17:5b:99:9f:f9:4d:1e:d9:9b:29:16:e6:
                    8a:28:f6:5d:74:32:c9:7b:71:87:a7:f1:39:44:7a:
                    34:b7:36:47:01:e6:7c:28:43:98:e4:a2:cb:00:1c:
                    98:54:83:2c:b0:dd:75:da:2a:de:7b:f8:58:a5:18:
                    4d:f0:bc:e0:72:e3:4f:08:6a:56:b2:85:e8:95:8e:
                    e8:92:f9:f6:60:c4:b8:b8:1b:ea:d9:81:98:59:5f:
                    df:04:79:df:c9:92:d4:cf:d0:6a:69:d6:e5:43:7c:
                    54:cd:89:50:07:b0:48:ac:ed:2f:2a:8a:2d:ad:d9:
                    ac:a0:5a:fd:ff:e6:f8:d6:d7:26:5a:fc:82:4e:f8:
                    aa:df:13:24:3f:5d:ae:95:6d:f4:c7:8c:d6:2d:6e:
                    4b:54:51:74:fc:6d:48:a1:aa:07:0b:c9:6d:98:55:
                    c8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B4:22:84:32:D8:CE:2A:6F:08:F0:59:73:B7:F3:48:05:A3:BA:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/7cee06e8-d080-300e-a759-0594b0114554.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.74.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:44:0f:eb:90:03:f7:f7:ac:34:f8:93:78:43:eb:7a:ff:cc:
         82:41:17:c3:27:2b:41:0d:58:f6:56:73:c8:8b:9a:9a:c0:17:
         92:a9:b5:a5:8f:6a:9a:3d:56:98:75:8a:34:b3:3e:2a:d1:f2:
         ab:b7:bd:5f:aa:5b:4d:19:bc:85:a8:07:34:22:5d:eb:41:84:
         3c:17:ae:41:a7:a8:95:dc:1f:09:c1:1f:e0:d9:f8:31:a4:07:
         97:c8:db:36:43:a7:e3:51:42:6e:e5:48:59:94:15:b0:04:1d:
         3c:52:cf:c4:61:3b:09:2a:7d:51:01:cb:87:ee:01:09:c8:cb:
         fb:f7:a8:0d:0c:43:9a:f8:af:6d:a3:ee:d0:dd:e9:78:a6:dc:
         7a:62:50:97:24:f7:91:01:d3:38:c5:4d:50:95:4a:82:5b:3e:
         0e:3d:0b:2d:0e:82:35:56:7e:e8:ad:70:64:cb:23:78:a7:5d:
         f2:3c:61:52:36:fb:de:bd:26:76:72:50:9e:90:77:ed:44:29:
         af:55:c6:a1:46:06:a9:c3:70:d5:a9:35:a1:6f:50:c6:e1:66:
         57:26:24:24:28:8b:09:ca:15:4b:38:b5:e2:9a:7b:e0:db:5b:
         18:fe:9f:ef:b9:ad:eb:ea:86:2d:f5:2d:d3:2a:b3:f4:93:15:
         6d:01:66:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 12:51:47 2026 by rpki-client