Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/9c7578b3-4ce1-3dc9-859c-805442284ef1.roa
File:                     9c7578b3-4ce1-3dc9-859c-805442284ef1.roa (raw, json)
Hash identifier:          fOaPfJgIq5gUsHbjKZ8hZFz5xiUGHeyMG7bM4H/bfjM=
Subject key identifier:   09:26:E5:F3:53:F9:19:C0:45:04:42:AF:29:FD:38:8A:B2:C2:03:D9
Certificate issuer:       /CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
Certificate serial:       010D0C9F4328584D2D3F9CBEBF58E4FE3743D840
Authority key identifier: B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/9c7578b3-4ce1-3dc9-859c-805442284ef1.roa
Signing time:             Sun 15 Mar 2026 13:00:41 +0000
ROA not before:           Sun 15 Mar 2026 13:00:41 +0000
ROA not after:            Sat 13 Jun 2026 13:00:41 +0000
asID:                     31898
IP address blocks:        69.48.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2d:3f:9c:be:bf:58:e4:fe:37:43:d8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
        Validity
            Not Before: Mar 15 13:00:41 2026 GMT
            Not After : Jun 13 13:00:41 2026 GMT
        Subject: CN=5b92a00c-5bb2-4aec-9d1b-6a6a64e7d662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:20:ef:97:d7:92:91:1a:c3:a0:73:e6:69:3a:
                    65:d5:e0:4f:f7:c5:ba:44:be:7d:d9:2d:c2:41:b7:
                    18:37:0b:2c:2a:60:b0:2c:f4:29:32:9e:b9:8f:08:
                    62:a3:79:bb:a9:d7:54:b7:ec:95:0c:26:1c:c8:f3:
                    43:db:3d:c9:97:82:3f:df:72:de:b1:e8:53:44:26:
                    33:ce:c9:d1:cc:4e:87:86:be:3c:78:eb:36:00:64:
                    6f:13:24:ef:6b:5d:c7:1a:93:35:2d:a5:fe:01:f4:
                    e1:fa:e8:7e:47:f7:71:50:46:88:55:a2:78:83:94:
                    8f:14:02:b2:09:6f:24:2c:db:db:5d:2d:53:e9:5c:
                    5d:25:c8:bd:7d:89:81:20:46:ba:98:31:1b:3c:eb:
                    98:12:24:48:65:19:5b:cb:07:16:65:97:85:a1:a3:
                    dc:bd:ac:28:17:a5:3b:bd:68:99:b1:a5:44:13:fc:
                    75:54:b3:32:08:a1:8f:dd:0d:b8:6e:d9:cf:c6:e8:
                    62:5c:9d:a2:90:2b:c3:92:00:a0:bf:c9:a6:9f:f6:
                    13:3f:c4:ca:b7:13:7e:a6:56:45:3f:4b:f7:3a:87:
                    f9:97:c6:c4:6f:f4:6f:75:5b:41:63:c3:48:58:bb:
                    a8:0b:ed:ca:57:ca:05:d4:da:f6:b6:3e:b6:17:71:
                    b5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:26:E5:F3:53:F9:19:C0:45:04:42:AF:29:FD:38:8A:B2:C2:03:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/9c7578b3-4ce1-3dc9-859c-805442284ef1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl

            X509v3 Authority Key Identifier:
                keyid:B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.48.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:f2:ab:40:d9:b8:48:05:71:ec:aa:c2:a0:54:da:71:92:b0:
         1e:4e:19:23:a5:16:9d:69:fa:ef:80:7d:73:04:05:b1:70:48:
         d5:6b:fc:7c:ab:58:eb:08:29:2e:1b:78:4c:f4:89:90:ad:47:
         10:10:57:67:95:76:67:a5:a8:ee:a7:75:7e:57:64:40:8d:f3:
         a0:87:4d:75:b8:cd:93:ff:58:60:2a:a5:a1:7a:5f:70:36:fd:
         e8:f7:ce:ac:8e:f8:cd:95:8c:64:b8:60:3b:96:39:26:95:c4:
         59:3a:2d:1d:17:26:46:71:2c:8f:60:f3:1e:6b:bc:7e:0e:01:
         e0:2d:ea:21:1b:92:16:24:33:95:0e:d1:6e:07:8c:37:6e:04:
         2d:d0:76:a9:a4:3e:69:4e:20:1d:8e:43:e8:f6:b6:42:e8:65:
         98:9b:a9:98:7c:42:c7:9e:ff:6b:b4:29:8d:73:0e:52:81:07:
         84:5f:87:8b:30:1a:4b:00:58:16:72:de:47:13:0b:60:ba:d0:
         f5:13:4f:3d:4c:14:3e:49:48:6f:58:20:d1:d3:20:92:68:38:
         dc:04:b4:0e:41:a1:e2:06:14:d2:f5:05:1b:79:ff:70:81:ca:
         b3:9b:b8:35:0d:07:87:ba:fb:06:f9:c9:ec:76:df:a2:5e:2e:
         a7:40:87:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 14:34:09 2026 by rpki-client