Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bbbf1e1d-51c2-3c0c-af59-2887e55df975.roa
File:                     bbbf1e1d-51c2-3c0c-af59-2887e55df975.roa (raw, json)
Hash identifier:          gglxLYQoSGK4uW1xHulW7wDd89nOYKm6NHviV4hKtww=
Subject key identifier:   F9:3F:D8:51:3F:DC:A5:CF:BE:32:A5:3D:50:76:61:58:54:F8:2E:66
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EBF224280A2E7A42D0DD1BA00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bbbf1e1d-51c2-3c0c-af59-2887e55df975.roa
Signing time:             Thu 06 Aug 2026 11:56:56 +0000
ROA not before:           Thu 06 Aug 2026 11:56:56 +0000
ROA not after:            Wed 04 Nov 2026 12:56:56 +0000
asID:                     63099
IP address blocks:        209.101.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bf:22:42:80:a2:e7:a4:2d:0d:d1:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug  6 11:56:56 2026 GMT
            Not After : Nov  4 12:56:56 2026 GMT
        Subject: CN=6ebf44ab-173b-43a3-971d-624c2335c1e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:51:6a:35:e8:96:96:09:d0:4a:84:24:b0:90:
                    11:ff:6e:4c:4d:fb:b3:6f:47:6e:ec:76:2d:27:11:
                    8d:9e:8c:45:70:1c:06:06:37:63:82:df:bd:95:0f:
                    6f:28:f5:87:c1:77:bf:01:bc:c2:65:fd:7d:b4:c6:
                    54:4f:c9:53:bc:7b:a6:69:24:cb:06:80:d9:b5:d5:
                    0b:57:29:87:f3:a7:ab:b3:0e:ce:73:07:dc:dd:72:
                    f5:6a:4b:21:df:95:eb:da:3e:83:e6:43:5a:20:cc:
                    ca:20:6b:60:67:89:5c:7a:75:63:5f:d3:08:78:49:
                    32:61:8f:e6:b4:95:06:11:1d:a0:08:43:85:de:34:
                    1e:a8:cf:06:d5:5a:e2:06:10:3f:7c:39:09:39:70:
                    69:73:87:39:b3:f9:7a:db:98:f5:4f:be:7c:6c:85:
                    dc:bd:03:36:38:6e:70:f5:dd:46:75:60:3c:9b:fb:
                    04:5a:9a:2e:34:d7:33:f8:89:f7:ff:a2:43:92:4f:
                    ff:84:22:26:57:3c:13:51:96:fa:5a:84:8c:1d:d6:
                    f5:0a:0e:14:50:3b:26:7e:19:3a:e3:70:c4:89:da:
                    34:85:9d:1d:1f:33:8c:98:92:7d:41:92:3e:12:82:
                    a2:61:ae:93:d4:35:90:32:c7:a4:15:4b:96:7a:90:
                    55:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:3F:D8:51:3F:DC:A5:CF:BE:32:A5:3D:50:76:61:58:54:F8:2E:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bbbf1e1d-51c2-3c0c-af59-2887e55df975.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.101.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:45:01:46:26:3d:27:0a:c7:8c:cc:17:7d:cd:33:74:f3:24:
         1b:90:2e:e4:7e:fd:f8:36:7a:ad:9c:92:04:5d:0f:f1:03:89:
         0b:76:ec:ba:05:e6:0f:30:73:85:22:25:33:f1:fb:49:87:bd:
         b0:25:b3:4d:c0:35:46:c0:d0:9a:2a:75:43:dc:a7:72:7b:17:
         b9:cb:a4:dc:98:19:1c:78:9c:73:3b:0e:99:d2:6c:03:4f:9d:
         cc:56:28:7d:57:58:6f:bc:cf:c6:4c:5f:25:73:d3:89:82:a9:
         89:6b:48:68:72:85:48:d7:20:6f:fe:ca:0a:1c:7f:53:68:84:
         84:1d:e9:21:ba:41:b2:c9:bb:df:6c:27:fe:a8:aa:72:49:96:
         36:92:01:86:93:e5:9a:77:12:95:ff:df:2a:46:48:f0:b4:81:
         60:1f:18:ac:a9:63:9f:39:a8:e5:c4:8b:70:3d:26:90:cf:f0:
         a5:ac:a9:e0:90:5d:0b:ae:43:42:34:0f:e2:4e:3c:eb:3d:a2:
         3d:1e:e0:2d:53:63:86:f8:d4:cb:40:a8:21:ec:0e:46:eb:72:
         56:24:39:5c:94:34:71:db:4a:f2:83:a6:17:ed:48:37:34:8a:
         aa:51:ad:ef:51:30:5b:df:d9:d8:e4:f6:bf:e4:71:98:a1:d5:
         24:43:01:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 07:52:17 2026 by rpki-client