Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b13bf762-9f25-3db2-9dfb-36e5f6b1f4c3.roa
File:                     b13bf762-9f25-3db2-9dfb-36e5f6b1f4c3.roa (raw, json)
Hash identifier:          X7QiP/Lg7gKId/zxvMaLaUKBH1qbKuzw4i/68v4G+io=
Subject key identifier:   E9:14:C6:23:EF:17:A1:C0:E4:C2:F6:C0:17:86:A7:50:E1:4F:47:77
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E3B94737F5B4E559AD28354C0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b13bf762-9f25-3db2-9dfb-36e5f6b1f4c3.roa
Signing time:             Sat 20 Jun 2026 09:00:13 +0000
ROA not before:           Sat 20 Jun 2026 09:00:13 +0000
ROA not after:            Fri 18 Sep 2026 09:00:13 +0000
asID:                     40676
IP address blocks:        69.33.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3b:94:73:7f:5b:4e:55:9a:d2:83:54:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jun 20 09:00:13 2026 GMT
            Not After : Sep 18 09:00:13 2026 GMT
        Subject: CN=0a9c574e-9dd7-4ef8-ad00-68e2f0f97bf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:64:97:f7:ce:24:4f:0c:3c:97:c6:e3:e2:e1:
                    e2:99:0b:88:f6:b8:0b:6e:bc:8b:01:15:57:3f:93:
                    bc:10:e9:37:19:6f:4d:0d:55:4c:52:1c:8f:91:49:
                    8f:f6:75:6e:35:52:80:72:ba:a3:b9:0e:33:c4:bb:
                    55:24:bb:d2:01:d6:70:da:86:cf:62:a2:ae:dc:df:
                    6f:e9:b9:7e:80:d6:f9:bb:84:38:51:9a:20:6f:96:
                    38:c0:3c:2c:74:d1:cd:96:c6:d1:28:49:aa:d9:df:
                    c5:6a:c9:65:e9:1e:bc:33:45:4f:c3:12:f5:7d:b0:
                    82:c1:82:c7:72:d9:1b:80:70:75:50:fd:08:b4:84:
                    7b:a2:4c:5f:e8:85:65:06:19:94:ff:9e:50:cd:e0:
                    38:20:cc:9d:99:bf:e4:6d:14:2f:77:ea:1f:bc:b7:
                    a2:f5:d8:80:02:ba:fa:43:60:f6:c7:4f:0b:8d:2a:
                    bb:b7:49:4e:c2:e0:1d:2c:fc:38:25:7b:8b:5e:19:
                    e1:e7:de:87:b0:2d:bb:48:32:20:a2:fc:ad:e4:0d:
                    dd:b7:4d:7e:45:a0:f0:9f:5a:d2:ce:4b:08:41:2c:
                    3d:dc:72:19:ac:6b:11:5b:2e:d2:ba:4f:a9:80:2d:
                    10:22:bf:2f:d1:3a:db:e8:37:b2:3c:72:dd:86:db:
                    ee:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:14:C6:23:EF:17:A1:C0:E4:C2:F6:C0:17:86:A7:50:E1:4F:47:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b13bf762-9f25-3db2-9dfb-36e5f6b1f4c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.33.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:0d:f4:78:2a:b9:72:be:c0:e9:cc:36:8c:6e:40:b0:c2:31:
         c4:2e:d4:4f:01:c0:6f:45:40:b0:2a:af:d9:be:b9:6c:c6:48:
         a0:d5:53:6d:e6:d5:79:7d:d9:8f:dd:7e:4d:aa:1b:76:6e:09:
         aa:4f:2d:3c:31:69:99:40:18:e1:ff:dd:8e:7d:3d:d8:e8:84:
         79:e1:ec:e8:fc:a5:fc:88:75:e6:6d:f1:8f:38:7c:16:e9:a0:
         9e:7f:30:1d:7f:86:5a:ed:5c:0e:47:5f:60:72:e3:50:3a:ff:
         bc:42:08:15:3c:9c:fc:1f:83:93:3e:b8:de:b4:c6:4c:d7:7d:
         5a:be:ed:52:19:dc:b2:de:01:b5:22:1e:7e:3a:cc:af:f3:f1:
         63:0b:97:77:fb:65:f3:b8:9c:3e:b2:5b:fa:69:af:d6:5a:ca:
         bc:79:22:5f:16:ff:42:37:22:45:11:9e:fc:c4:7f:62:4a:a1:
         a0:c1:fc:a7:70:f1:81:c2:3a:b0:af:65:5b:9c:3a:f5:2b:57:
         59:0e:30:59:9c:10:51:e9:b1:28:bb:31:09:43:81:76:38:2a:
         c4:fd:2a:33:8f:d2:e7:1c:7a:e9:52:62:82:bd:8c:58:f2:17:
         21:cd:17:9c:c2:39:44:0b:f2:da:d3:61:b1:32:f9:77:c1:ea:
         a7:b1:cb:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 13:55:53 2026 by rpki-client