Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9310772f-1d2f-3679-a455-f3c83da59a43.roa
File:                     9310772f-1d2f-3679-a455-f3c83da59a43.roa (raw, json)
Hash identifier:          ML/a1AuzcnZG2FYsEQk0fOO+yUIbeL3fgeusF7sAajE=
Subject key identifier:   0B:3B:1A:E6:88:17:A9:35:14:9E:2A:DE:AB:09:01:11:33:FC:A3:4E
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D6AAA667C6D7B00646E313F00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9310772f-1d2f-3679-a455-f3c83da59a43.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     152672
IP address blocks:        69.33.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:66:7c:6d:7b:00:64:6e:31:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=c49e634e-4376-4d66-8cdf-b5fcb99d0950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:eb:24:d5:58:0c:54:d4:c9:1a:ec:b5:d1:29:
                    ad:8b:c4:62:ee:1c:6e:d8:30:a7:62:37:d7:8d:58:
                    0e:67:81:21:8c:3a:a9:33:56:e7:f8:64:d1:86:9e:
                    62:2b:0d:a2:90:83:f4:2f:8f:73:47:9a:0d:1b:e5:
                    7c:0d:c9:a2:3b:10:c7:b0:16:77:02:f9:bd:c9:31:
                    12:8a:44:ad:61:4c:fd:dd:83:d2:f2:5c:a8:25:2d:
                    71:06:5b:e8:6e:a1:91:7f:48:9a:1c:32:5c:0d:6f:
                    bc:8b:69:62:7c:cb:a5:28:b5:99:a0:97:d7:9f:d0:
                    47:4e:37:c1:73:d0:a3:15:d7:4f:df:79:17:39:03:
                    ca:ba:b0:ca:f7:90:d4:06:e7:d2:3d:87:92:4b:3f:
                    60:57:7d:3d:00:76:2d:f3:1b:b4:39:72:c3:b8:a6:
                    ca:a9:42:ad:5e:72:c4:8e:55:72:85:cd:5a:0b:d5:
                    72:7c:a6:ad:00:4f:fa:5c:6f:d4:e8:e9:6e:b1:dc:
                    57:f8:4b:e1:eb:1e:ee:e6:68:39:a9:51:c1:8f:d1:
                    60:8d:b4:1f:5a:d1:29:ff:50:2a:de:3f:b7:a3:fa:
                    2d:70:10:d4:fe:52:b6:c1:e2:8b:da:32:4a:af:91:
                    5f:0c:a0:59:36:20:38:e1:05:ef:ec:d2:d7:f1:fd:
                    ec:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:3B:1A:E6:88:17:A9:35:14:9E:2A:DE:AB:09:01:11:33:FC:A3:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9310772f-1d2f-3679-a455-f3c83da59a43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.33.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:82:75:87:34:80:37:23:79:f4:48:af:d4:b2:58:ac:97:32:
         b5:93:c5:7f:61:7d:a1:91:d1:fe:a9:a5:db:37:7b:bc:f5:38:
         be:e3:e6:4a:05:0b:15:8c:8b:b0:66:27:07:52:87:7d:84:51:
         b1:fb:69:75:a7:e7:dc:83:33:69:f0:d0:2f:2a:ed:f3:c6:c8:
         11:cf:77:4e:28:e6:0e:c1:2e:f2:af:44:e0:b1:6a:9c:4b:d8:
         8c:0d:2f:75:c7:74:e9:2c:14:10:14:46:ad:d3:a2:62:8a:7a:
         0f:c6:c3:0a:39:f5:36:c3:f8:fc:27:21:02:0b:df:92:27:94:
         2b:30:17:ae:2a:b7:04:f3:0b:c6:fd:08:6d:92:40:b7:5a:73:
         55:64:0d:64:85:14:9f:0b:50:8e:82:57:0a:42:3c:22:d1:d2:
         b2:18:fa:37:a5:52:2e:0b:75:85:83:08:b0:db:6e:a8:ae:b5:
         21:fa:03:fd:9f:6c:28:c8:ec:b6:13:f1:eb:eb:63:7b:1b:24:
         ad:66:73:8c:a8:63:ff:1c:f8:65:e7:97:20:f6:66:8f:d7:51:
         1e:36:49:ef:e8:e3:79:21:18:b4:da:43:c9:51:fd:6f:d0:e9:
         1e:fc:5d:2e:00:5b:5d:8a:1e:95:05:63:9b:ea:3e:37:e4:5d:
         c6:54:0b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 10 23:18:20 2026 by rpki-client