Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ecfe31eb-7fe3-3708-b226-b10400bec7ea.roa
File:                     ecfe31eb-7fe3-3708-b226-b10400bec7ea.roa (raw, json)
Hash identifier:          Xq9bZzhbp9dNs0Dp4V5tQmIDq2FWX4fFadnGhd3JUzY=
Subject key identifier:   60:B0:4D:E9:3D:CD:D8:E7:54:56:8B:BF:2E:C0:04:B8:47:CF:A6:95
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584E8DA23590B807DD9ADFAF9680
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ecfe31eb-7fe3-3708-b226-b10400bec7ea.roa
Signing time:             Sun 19 Jul 2026 18:24:19 +0000
ROA not before:           Sun 19 Jul 2026 18:24:19 +0000
ROA not after:            Sat 17 Oct 2026 18:24:19 +0000
asID:                     54858
IP address blocks:        69.36.224.0/19 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8d:a2:35:90:b8:07:dd:9a:df:af:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Jul 19 18:24:19 2026 GMT
            Not After : Oct 17 18:24:19 2026 GMT
        Subject: CN=bad4271d-48c9-45a1-a18e-4150ea1a0981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:bc:8b:49:ad:95:13:e5:b9:8b:d6:8f:37:75:
                    8d:27:68:e7:83:44:54:82:78:bc:0d:cd:d4:3f:3b:
                    14:88:78:15:14:5e:1b:cc:27:a1:4f:46:7c:59:34:
                    c5:88:7b:da:ee:d3:dc:42:80:ba:20:d4:66:a8:1b:
                    b7:83:69:56:21:61:2e:fe:ba:37:b2:b7:4c:c1:8e:
                    56:b8:12:a4:b5:68:76:a8:a3:76:4a:9c:83:f8:5d:
                    b2:c9:b6:24:03:5d:4b:16:e3:e8:a3:08:40:80:ae:
                    61:f9:68:e5:83:e9:90:95:a0:19:be:26:39:1d:cd:
                    83:99:d2:cb:7d:1e:26:fe:5d:48:2d:c3:59:11:70:
                    5d:5b:53:15:21:14:c1:ae:61:c6:5f:2f:bd:6a:5e:
                    d3:50:cb:cf:f6:21:1a:06:93:b8:cd:f0:ef:0c:53:
                    f6:b9:e5:ed:a7:da:49:dc:cf:b8:42:9f:47:69:31:
                    9a:40:b0:ef:77:86:47:5d:80:bb:9b:d5:89:05:de:
                    6e:97:47:47:41:7f:df:e7:9f:fc:15:a0:90:45:36:
                    de:53:07:51:9c:91:94:35:a5:08:e3:b5:28:a5:7e:
                    1b:67:da:9f:56:e3:12:ae:be:35:b8:7a:5d:c5:9d:
                    f4:a8:8a:23:d4:40:28:5f:1c:cb:ef:ee:50:5b:c4:
                    ed:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B0:4D:E9:3D:CD:D8:E7:54:56:8B:BF:2E:C0:04:B8:47:CF:A6:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ecfe31eb-7fe3-3708-b226-b10400bec7ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.36.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:37:f5:2d:2e:c2:1a:64:66:26:cd:0e:f1:30:cc:46:88:92:
         0d:64:06:c8:c3:3d:59:51:ff:61:30:07:21:6d:0c:cf:c0:44:
         cc:1a:54:61:0a:d2:9c:c6:ff:96:73:ed:20:62:25:72:ed:62:
         4b:12:d9:07:3c:90:9d:e3:c4:3c:69:52:a8:1a:bd:73:a6:d6:
         84:18:90:74:9d:79:6b:a1:24:b7:e8:cf:c0:bd:a7:79:9a:4e:
         85:b8:a1:b0:36:68:fe:63:1c:50:84:5e:fc:d7:4e:3d:b1:ab:
         6b:4a:b5:1a:13:28:cf:17:13:78:5a:8d:5f:54:68:55:4e:33:
         ce:6a:e3:6e:3d:f3:77:7d:a6:84:5c:13:c6:c5:16:35:8e:f0:
         55:a7:c1:64:3c:94:c0:6b:7d:c9:65:b3:11:1a:ba:7c:2c:99:
         2a:86:77:19:4d:06:81:43:c2:2e:c2:8c:42:bf:07:2b:fc:24:
         a3:32:54:a9:40:74:82:83:d6:92:83:23:ab:fe:8d:a5:c7:10:
         7d:cc:7f:2c:c6:3c:95:25:06:07:c0:6c:28:31:67:f7:51:21:
         70:29:b4:6d:55:b2:e0:0a:81:5b:7a:d2:c2:eb:21:5f:5f:9e:
         15:fa:28:f9:0e:67:ed:d6:a3:bd:da:77:d1:ef:28:c1:f4:c1:
         76:e4:08:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:36:45 2026 by rpki-client