Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/b4571b48-499a-3019-b6a2-8f7792617c1c.roa
File:                     b4571b48-499a-3019-b6a2-8f7792617c1c.roa (raw, json)
Hash identifier:          y+/wA/a+cK7JY5StcrFfMqvzCcOVD2nwq/Zl4dSu3MY=
Subject key identifier:   12:DD:15:03:D3:68:46:1E:F2:69:53:64:7D:A8:EB:B2:32:17:91:6B
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584EBF476376B033A34C2573D880
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/b4571b48-499a-3019-b6a2-8f7792617c1c.roa
Signing time:             Thu 06 Aug 2026 13:11:45 +0000
ROA not before:           Thu 06 Aug 2026 13:11:45 +0000
ROA not after:            Wed 04 Nov 2026 14:11:45 +0000
asID:                     396190
IP address blocks:        69.147.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bf:47:63:76:b0:33:a3:4c:25:73:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug  6 13:11:45 2026 GMT
            Not After : Nov  4 14:11:45 2026 GMT
        Subject: CN=789102e9-e0eb-4ebc-8483-e0c55ed9f761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:12:fe:e1:33:b6:05:73:00:0e:9e:2b:c5:65:
                    18:aa:6c:7c:eb:8f:f2:a6:5b:87:2a:7a:8a:91:c2:
                    ab:96:16:a7:d1:8d:71:65:85:49:01:ca:bb:05:d2:
                    91:f2:ef:f5:0c:01:5e:49:71:b1:b4:56:9f:22:ae:
                    19:c8:ee:89:af:dc:97:e2:4b:2c:fb:f8:d0:60:8c:
                    9f:bb:9b:33:f9:24:a8:b2:fc:7f:f8:15:c1:ae:90:
                    31:f5:53:7f:2e:3e:ff:16:42:24:4a:41:fb:1d:78:
                    79:e9:a1:9c:14:2b:d6:af:a3:70:55:7e:82:a3:0b:
                    50:62:fc:b9:57:92:5d:c2:4e:df:86:17:3c:3c:e2:
                    21:95:f7:9e:74:41:7d:4a:f0:5e:56:c9:19:d6:62:
                    96:af:96:67:de:7f:62:21:3b:a6:13:23:06:c1:eb:
                    1a:3f:a1:56:6c:b1:a5:47:7c:b9:42:d9:99:8c:f3:
                    8e:19:fd:2e:b4:4d:32:33:fc:9e:2c:1a:3a:f3:be:
                    fa:84:1b:b6:15:df:b3:04:dd:fe:9e:73:0a:2c:a6:
                    48:14:bd:c7:88:e0:31:a8:f5:0d:cf:01:6a:06:48:
                    5c:ed:dc:87:b2:b5:e2:86:1c:8a:48:14:0b:ea:49:
                    41:0d:41:7b:21:13:ef:4c:a9:5f:e6:9e:6d:85:67:
                    bd:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:DD:15:03:D3:68:46:1E:F2:69:53:64:7D:A8:EB:B2:32:17:91:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/b4571b48-499a-3019-b6a2-8f7792617c1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.147.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:31:a2:24:da:4b:2d:c4:7c:5a:74:87:34:d4:ac:ea:27:7e:
         2f:b9:19:f1:6d:72:c5:f3:d2:a1:c3:59:fd:fb:4c:89:a1:30:
         6e:d9:c8:5c:c1:bf:73:19:49:9a:ff:0d:dc:41:a3:6d:17:22:
         cb:83:b2:78:80:b6:a2:c3:1d:df:b1:4b:17:f2:16:e0:1d:a6:
         a8:c4:c8:a9:b2:be:29:e4:b9:1c:3a:96:43:a5:09:be:b0:5f:
         2a:1d:4b:98:c4:20:54:d1:86:3a:c4:5a:f1:66:3c:72:d5:f8:
         0a:91:32:13:da:09:ff:21:05:ad:53:bf:5f:14:a9:85:d4:80:
         63:cf:be:05:8a:e0:e4:9a:fa:84:0e:f2:47:6b:10:96:9c:47:
         22:18:13:e3:1c:e3:ba:c9:ee:c8:34:41:6a:33:eb:36:50:41:
         c2:58:53:9a:d0:91:6a:d0:9e:cf:72:be:4d:a5:25:c9:f0:a1:
         d9:5e:c0:14:e6:0f:d3:90:4e:48:44:4b:77:bd:10:73:0e:da:
         ce:49:43:9b:5f:f8:6c:49:37:87:33:c3:88:35:9d:e3:a3:65:
         e0:05:9b:72:dd:df:0d:45:27:70:ec:4b:c8:c3:a3:47:5d:bf:
         6e:ab:20:68:71:dd:6f:bf:e3:ee:c6:fe:2a:fe:1d:80:fb:b6:
         85:13:7b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 17:39:18 2026 by rpki-client