Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9b7f0856-c308-366e-b3b0-8a104d24a3d7.roa
File:                     9b7f0856-c308-366e-b3b0-8a104d24a3d7.roa (raw, json)
Hash identifier:          OmjwlBY3uM33OlWnKAhJLK0qE7Vr/v5fvaMPShnuw1Q=
Subject key identifier:   97:EC:42:97:4D:B7:09:7B:E0:32:59:30:CB:69:43:06:E2:EE:3F:F0
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E709F7A68903388B4B0ABCF00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9b7f0856-c308-366e-b3b0-8a104d24a3d7.roa
Signing time:             Thu 09 Jul 2026 09:00:13 +0000
ROA not before:           Thu 09 Jul 2026 09:00:13 +0000
ROA not after:            Wed 07 Oct 2026 09:00:13 +0000
asID:                     174
IP address blocks:        69.33.88.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:70:9f:7a:68:90:33:88:b4:b0:ab:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul  9 09:00:13 2026 GMT
            Not After : Oct  7 09:00:13 2026 GMT
        Subject: CN=84a2d974-cf4f-4d6c-adf3-faf4b9a2aab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:45:30:06:2b:ad:c1:f9:31:2b:c2:94:0c:03:
                    a9:2f:52:02:bd:67:20:6f:17:ce:a2:72:3e:0d:ca:
                    79:99:2f:61:7d:bd:4a:d5:95:e3:b9:97:88:d2:61:
                    6f:94:ff:8a:82:0b:6d:5c:03:31:9a:88:28:75:b7:
                    84:d8:5c:88:92:a5:fc:dd:d5:c1:0e:2e:66:bd:7d:
                    e3:06:7f:87:26:9b:d2:d9:b4:4d:b7:6f:be:c8:22:
                    07:f1:7f:d5:f0:5e:a2:31:13:d0:7d:0f:3d:41:d2:
                    fc:56:82:21:ad:05:e8:ee:72:4a:e1:fb:c3:ae:56:
                    10:92:34:0c:ff:78:73:bd:3a:f8:8f:cd:17:77:73:
                    77:da:de:f1:82:4a:e2:62:59:66:6b:52:ef:d5:54:
                    6a:f7:25:0c:82:0b:76:be:fd:50:8b:c7:0b:bf:e1:
                    c8:eb:6d:66:e7:6e:06:77:33:b5:4c:7f:28:e2:9b:
                    af:e3:fb:2f:ec:85:33:94:1a:e1:01:27:81:b0:63:
                    09:be:40:aa:bb:0c:c4:69:11:89:e2:e7:30:5f:57:
                    cb:00:fb:94:aa:c9:72:6b:94:bf:74:98:dd:46:e8:
                    94:09:a0:f9:e5:b3:d3:06:95:38:ac:e7:2a:53:2c:
                    7d:94:35:62:04:e5:65:3b:1f:be:15:03:49:f5:da:
                    73:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:EC:42:97:4D:B7:09:7B:E0:32:59:30:CB:69:43:06:E2:EE:3F:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9b7f0856-c308-366e-b3b0-8a104d24a3d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.33.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:49:57:b8:6c:ec:6a:f8:91:f1:a2:7c:40:c2:7c:6f:c0:33:
         86:72:33:ca:6e:1e:04:3a:fd:06:59:b5:60:db:59:d6:93:ce:
         08:62:2b:30:78:59:00:63:64:58:2c:a4:a1:c7:22:fd:7c:07:
         5a:a4:cd:03:fb:bb:46:1c:3e:b4:5a:32:62:5e:7a:15:ea:c0:
         a9:15:45:31:f3:65:bf:79:24:c6:4f:75:82:be:83:2d:23:a5:
         8e:53:ae:88:35:3e:9e:6e:53:79:75:b1:d8:62:b5:96:ec:41:
         46:ac:50:d9:99:df:38:4f:0d:81:e8:c7:78:f3:88:1e:e6:5a:
         ce:17:39:29:78:23:4d:b4:e2:5c:16:88:16:34:28:e7:28:48:
         a8:f5:1f:36:ed:83:9d:54:08:0d:2b:4f:51:64:b8:eb:9a:92:
         40:9c:58:0a:12:55:ae:0e:37:87:41:0c:3b:f3:04:59:4b:43:
         27:f9:ea:f5:0b:f0:4f:3c:b7:60:11:c8:9b:47:80:02:5b:34:
         c2:11:f6:ff:f9:19:94:25:11:a1:89:4c:08:42:40:9c:24:30:
         77:d0:84:37:1d:f9:84:9f:0d:b4:97:cb:75:94:ad:d6:0b:b1:
         33:f9:ab:1f:fe:01:07:76:f1:95:1a:08:b7:5a:72:5c:ea:a5:
         03:a5:8d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 13:50:19 2026 by rpki-client