Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/60d94136-b7d8-36c5-abcd-b93bcdfdc368.roa
File:                     60d94136-b7d8-36c5-abcd-b93bcdfdc368.roa (raw, json)
Hash identifier:          hVV3hj+RfqzJhQoLPwhBVkgzkTJOW8bRpv2LpxQEUog=
Subject key identifier:   B6:23:00:54:17:65:DE:AB:A6:53:14:ED:F0:C3:12:F5:10:B1:20:85
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D460A7F082C941B3594631D00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/60d94136-b7d8-36c5-abcd-b93bcdfdc368.roa
Signing time:             Tue 24 Mar 2026 10:09:18 +0000
ROA not before:           Tue 24 Mar 2026 10:09:18 +0000
ROA not after:            Mon 22 Jun 2026 10:09:18 +0000
asID:                     32693
IP address blocks:        69.33.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:46:0a:7f:08:2c:94:1b:35:94:63:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Mar 24 10:09:18 2026 GMT
            Not After : Jun 22 10:09:18 2026 GMT
        Subject: CN=e7caa9d7-1ce0-4b75-9eeb-5a5c2089a8b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:05:f0:f9:ff:bc:4d:02:a7:54:f8:6f:0a:6a:
                    12:93:d1:0e:9d:05:27:77:1a:61:01:9f:aa:3a:5f:
                    fc:8c:15:82:42:39:e9:8b:39:20:55:93:93:22:87:
                    27:ae:0b:88:56:5c:65:49:38:a5:fa:ed:99:b7:83:
                    a5:83:e4:1b:9c:85:b7:7d:1c:b1:f1:e3:4d:cd:28:
                    e4:f7:50:1d:bd:21:6c:7f:b6:fa:9f:06:c4:3b:aa:
                    c3:fd:6d:3b:84:67:d1:3d:14:10:7f:c1:86:27:57:
                    ad:d6:f1:0b:0e:76:f9:22:6d:42:36:84:ca:4a:72:
                    5f:00:8f:ac:65:be:b3:fd:41:a9:67:fc:82:3a:ea:
                    b0:ba:65:f8:ac:03:ec:c8:45:c8:cd:c1:a5:c3:47:
                    af:fc:3d:f8:17:6d:b6:08:2d:a5:e5:3b:f3:00:cb:
                    48:4c:5e:b0:6e:11:97:1c:98:a7:61:02:3a:cf:82:
                    da:7a:7c:a4:0f:65:af:9d:5f:90:17:94:18:fd:bd:
                    c8:ed:34:1b:a1:af:81:fa:01:ee:b7:39:7d:8c:d2:
                    14:09:be:da:f0:e7:06:ae:ff:fe:a5:57:51:62:b5:
                    3f:36:12:4a:31:33:c4:35:11:10:aa:59:00:05:45:
                    20:d8:e9:78:78:56:2d:ff:cb:b1:4e:96:28:6b:a8:
                    fd:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:23:00:54:17:65:DE:AB:A6:53:14:ED:F0:C3:12:F5:10:B1:20:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/60d94136-b7d8-36c5-abcd-b93bcdfdc368.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.33.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:8a:6e:bf:6c:f5:94:98:11:fe:fc:5e:27:f5:73:f1:82:13:
         c4:43:92:5a:ef:e6:78:ea:7f:fd:3f:e1:12:d7:65:92:7c:04:
         f7:19:b6:ac:0d:b2:98:67:8b:69:38:7f:db:70:f6:b1:12:4c:
         4c:f4:2e:e9:bf:ca:20:ba:91:d1:e9:6e:b4:59:f3:21:1f:9b:
         3c:1c:1d:5c:52:dc:49:9e:a1:99:63:9b:6d:5d:ed:93:b8:16:
         46:7f:4d:00:fe:1f:a5:b6:27:44:7e:2f:50:59:91:79:38:5d:
         93:93:e0:58:f9:e2:d8:44:6d:bc:72:e2:a6:9d:cc:3c:fc:c1:
         de:6d:95:7b:3d:26:7f:de:90:29:da:ea:45:e4:32:7d:3c:1a:
         3f:d8:34:05:4d:f3:5c:5d:4b:b0:bb:a4:1c:de:22:27:94:04:
         47:82:52:3e:63:8e:74:34:54:b5:ea:8e:b1:bc:38:69:c0:01:
         63:d8:fe:81:c1:06:fa:4e:32:44:65:bf:57:0c:77:10:b3:94:
         2c:1c:33:52:7c:4d:7a:01:27:61:78:ef:94:51:5f:91:32:9c:
         fd:c2:23:d0:34:03:7c:7e:4b:e5:02:62:f1:e6:f0:bb:76:97:
         ca:31:d4:f9:4a:77:a6:96:2e:a3:b2:72:b2:76:00:ef:5f:b5:
         08:dc:46:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 18:14:15 2026 by rpki-client