Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9654aa65-b6ba-3988-80b9-274d5171887f.roa
File:                     9654aa65-b6ba-3988-80b9-274d5171887f.roa (raw, json)
Hash identifier:          RaQ2RFGt1eL6OmYm5YM47+RdHltZt8BC9YoqF5leXJ4=
Subject key identifier:   84:F9:75:B4:4D:1C:1C:51:B0:1E:B0:7E:D6:F0:E1:68:0E:71:C4:CC
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584DF0AB435F3362A2B3A0590980
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9654aa65-b6ba-3988-80b9-274d5171887f.roa
Signing time:             Sun 24 May 2026 13:00:30 +0000
ROA not before:           Sun 24 May 2026 13:00:30 +0000
ROA not after:            Sat 22 Aug 2026 13:00:30 +0000
asID:                     834
IP address blocks:        69.33.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f0:ab:43:5f:33:62:a2:b3:a0:59:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: May 24 13:00:30 2026 GMT
            Not After : Aug 22 13:00:30 2026 GMT
        Subject: CN=e3cc5331-6d00-4f88-a528-f12a5562e50e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:e4:23:f3:23:cb:07:97:1f:e9:ea:f5:e3:9a:
                    28:17:28:f9:d1:5f:d0:b8:0b:ce:11:ad:fa:4f:ed:
                    9c:4a:a9:ec:a6:09:26:d8:96:0e:cc:11:6e:f6:bc:
                    d0:d9:23:d6:4a:b6:5d:fa:2d:a4:38:97:77:fa:4f:
                    79:ae:99:ac:f9:33:d3:55:62:76:f7:86:83:3f:82:
                    91:1d:05:e2:2c:36:86:5f:c4:a0:6f:2f:e8:1d:2e:
                    49:0e:7f:b8:4c:d4:74:3a:97:30:7a:d4:ae:68:f1:
                    64:07:27:15:5e:06:6e:da:65:b9:be:4b:01:e0:7f:
                    6c:86:29:10:72:df:ad:c3:83:c7:41:ad:4d:dd:9d:
                    50:93:10:ca:14:67:09:45:5e:78:c9:64:6f:12:c3:
                    69:93:f9:b3:59:74:1d:36:7e:d4:03:d4:10:2a:3b:
                    9e:d5:28:6a:e0:23:93:fe:0c:06:84:44:bb:74:88:
                    5e:a2:29:cd:e9:da:fe:82:24:eb:43:7d:02:24:e0:
                    c0:7c:67:3b:90:5c:69:e7:97:48:5e:b3:6a:c5:85:
                    a0:95:59:bb:c5:e0:d4:05:bd:f9:f7:49:3a:2e:ee:
                    b4:8c:13:6e:8b:4b:a9:33:89:59:8f:d2:42:56:85:
                    f8:a9:06:fa:8c:36:6b:f7:91:eb:f7:b9:94:51:9e:
                    da:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:F9:75:B4:4D:1C:1C:51:B0:1E:B0:7E:D6:F0:E1:68:0E:71:C4:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9654aa65-b6ba-3988-80b9-274d5171887f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.33.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:37:b1:b4:d3:8f:24:ed:54:40:b6:b5:f2:c2:fa:10:cb:d3:
         aa:04:37:15:6b:a4:b1:80:c0:27:57:16:9b:5a:61:87:df:71:
         d3:67:19:ac:22:9f:b5:17:7c:52:af:97:d6:2c:dc:79:9c:41:
         9d:18:1d:53:c9:4e:6f:30:1c:7e:60:e4:93:51:c0:18:a0:28:
         52:81:ed:27:01:eb:be:48:94:b7:bd:0b:ba:a0:77:f1:00:39:
         54:7c:fb:d3:a8:d4:d7:9c:f0:40:d4:b2:6d:76:0d:2c:30:ad:
         62:f6:9e:d2:df:c0:97:7b:4d:65:92:3a:5e:53:b0:0c:56:16:
         79:d1:7b:02:a1:26:4b:90:0c:f9:b5:12:12:12:9b:f9:56:0c:
         1a:21:3c:0f:c9:4c:3c:79:f6:d8:8e:c2:57:a1:e1:33:a1:73:
         0a:e7:6c:9f:4a:36:ee:f8:31:7f:c0:51:40:be:6c:bf:06:e2:
         25:ff:09:93:3d:f4:1a:a4:d6:49:0b:2d:a6:0d:6b:a6:3c:d3:
         80:8a:71:f6:9f:7c:88:9a:31:71:e4:9b:48:44:03:51:c5:a5:
         9a:1f:78:ca:a3:dc:68:f4:05:c8:7e:d2:b4:8f:70:8b:2c:95:
         65:72:c3:52:e9:4e:75:19:4e:d8:d6:6b:81:d1:ac:b2:6f:ea:
         28:34:a3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 26 02:34:30 2026 by rpki-client