Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/ed51f9d5-3719-308d-96cb-590fd7335460.roa
File:                     ed51f9d5-3719-308d-96cb-590fd7335460.roa (raw, json)
Hash identifier:          8kbecSlp5r0PNhpChIuCaxbfWnyo3XRWlLoNXCS6y2Q=
Subject key identifier:   5C:B5:EC:E1:BF:79:60:EC:0C:6F:8B:6F:D0:28:65:8B:8C:A7:74:AE
Certificate issuer:       /CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5
Certificate serial:       010D0C9F4328584E2AD45D3D11AA8674A5C8FC00
Authority key identifier: 3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/ed51f9d5-3719-308d-96cb-590fd7335460.roa
Signing time:             Sun 14 Jun 2026 09:00:11 +0000
ROA not before:           Sun 14 Jun 2026 09:00:11 +0000
ROA not after:            Sat 12 Sep 2026 09:00:11 +0000
asID:                     40771
IP address blocks:        173.249.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2a:d4:5d:3d:11:aa:86:74:a5:c8:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5
        Validity
            Not Before: Jun 14 09:00:11 2026 GMT
            Not After : Sep 12 09:00:11 2026 GMT
        Subject: CN=8507ce2a-43f7-4251-8e1d-f01a6fdcba05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6d:2f:08:8f:97:75:2d:d4:77:16:d3:e5:10:
                    1a:33:6a:19:ea:b4:c3:bf:ac:ca:f5:b4:2e:45:61:
                    9f:48:34:cd:46:62:30:2b:0b:d8:35:a7:2b:d8:9f:
                    5c:53:b7:7a:9c:46:50:b4:01:fa:a1:2b:0d:9a:29:
                    27:77:27:4b:b0:f3:17:8f:ea:53:65:bf:1a:5e:c0:
                    79:48:d2:65:6f:fc:04:66:60:26:9e:be:75:29:52:
                    41:fb:af:d3:fa:fd:39:cc:ef:40:a0:f9:19:40:7b:
                    5c:aa:86:c1:91:8a:88:ee:04:1e:3d:9e:10:b8:44:
                    4a:94:0d:0e:53:af:83:d7:4b:28:de:43:b2:6e:f6:
                    e1:40:bb:5b:66:3b:09:02:a4:41:71:9a:72:ca:54:
                    60:df:7a:81:7b:20:31:36:1e:1e:f9:c3:6c:bb:6a:
                    c7:e2:a5:73:25:92:fe:a4:05:b3:9d:a1:ca:a9:b3:
                    5d:6e:81:37:32:fd:e7:bf:61:6e:91:4b:04:1c:3d:
                    f6:01:1b:06:3e:ab:c3:ee:40:7c:bb:c6:b5:01:c5:
                    a3:9a:ce:6c:59:03:47:49:15:62:0f:e1:b0:d6:64:
                    6c:4d:f8:2d:61:23:74:7e:ed:ec:8d:ed:d0:24:6f:
                    cc:9d:9b:a1:be:7d:81:38:04:a9:96:7e:25:33:e6:
                    45:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B5:EC:E1:BF:79:60:EC:0C:6F:8B:6F:D0:28:65:8B:8C:A7:74:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/ed51f9d5-3719-308d-96cb-590fd7335460.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl

            X509v3 Authority Key Identifier:
                keyid:3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.249.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:a4:2e:f6:d1:6e:d5:58:d8:d6:7e:36:24:e6:a7:01:be:2b:
         71:4a:0a:3c:d7:55:39:05:5a:0a:30:01:68:48:01:ec:1a:ec:
         0a:a8:da:95:52:d2:97:48:de:d0:f4:bd:ef:c6:93:56:a1:4c:
         5e:02:b1:68:f7:ba:23:c6:13:0c:06:45:8c:30:00:c0:e1:8c:
         14:21:eb:c9:b9:10:6a:5f:b3:79:f3:11:d7:3a:8a:2d:fc:a9:
         c0:4d:56:8c:6d:2e:6f:e4:e4:47:32:4e:d6:ff:08:56:8f:21:
         31:68:b2:00:02:a1:08:fb:23:d9:9f:9a:07:cf:3a:2e:db:7a:
         38:3b:70:cc:72:00:22:fb:96:ad:13:08:3f:c5:81:95:c3:d2:
         07:de:f9:bb:a5:e7:39:c0:68:3f:f8:9c:e0:1d:1b:13:a3:66:
         ef:04:7a:87:d6:22:26:0f:4e:4d:c4:99:cb:b5:4b:a7:79:3e:
         3e:3a:00:15:1f:51:1c:59:42:1b:4d:79:7b:b4:63:c1:5b:9a:
         2d:04:f4:37:d6:b9:3f:b3:9f:ad:6e:fd:b7:27:a3:a6:93:db:
         a5:87:d7:b1:ae:8a:de:37:06:1c:19:d4:d8:ca:00:5d:bb:62:
         a9:19:cf:ec:82:27:1e:02:82:43:00:7e:45:72:1b:f7:bd:2c:
         c4:32:c6:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 07:39:45 2026 by rpki-client