Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/8a6469f0-4554-3b45-b9fe-fdbde6992151.roa
File:                     8a6469f0-4554-3b45-b9fe-fdbde6992151.roa (raw, json)
Hash identifier:          D8p+nNrKBPIFHsf9anMDICLZhIdjGrbjJ/A3BehfFEY=
Subject key identifier:   9F:7E:33:11:B1:3F:28:67:9E:70:9E:02:5A:C9:CE:C6:93:BA:E9:6C
Certificate issuer:       /CN=5f6f7623-0788-410a-b9dd-8040879aa924
Certificate serial:       010D0C9F4328584E2D9F1601D15B4F79EAEF3280
Authority key identifier: 6C:F1:38:A9:DC:91:8A:D7:97:D6:E0:2C:FD:36:EA:97:60:B3:CF:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/8a6469f0-4554-3b45-b9fe-fdbde6992151.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     19197
IP address blocks:        69.41.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:16:01:d1:5b:4f:79:ea:ef:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f6f7623-0788-410a-b9dd-8040879aa924
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=f9ebe9e3-a041-425f-8e60-84f371a0466e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:eb:22:dd:f8:e4:d6:89:9f:81:9d:a1:39:32:
                    d2:2d:4b:bf:5b:cb:27:23:f4:02:f7:39:54:5b:c7:
                    23:eb:b8:2e:91:44:59:a9:d7:93:03:50:d8:0f:12:
                    18:b8:f5:4d:2e:e3:54:da:95:ba:e9:07:13:c7:b6:
                    1a:89:91:00:08:cb:dd:87:48:0c:b9:95:ab:c1:77:
                    79:cb:91:cd:64:16:13:e4:66:d9:98:b5:f2:5e:87:
                    d2:ec:d5:13:bc:0a:31:03:8f:90:69:07:37:d2:3f:
                    56:26:59:00:ed:7a:e1:1d:0f:8a:c6:61:d3:69:80:
                    b7:8e:fe:2e:9d:34:ea:90:8d:1e:f9:6b:64:aa:5f:
                    e4:91:12:4c:aa:7e:19:17:b8:e5:35:51:3a:8b:a5:
                    f2:71:4d:62:b9:7b:8f:45:3e:64:eb:08:5c:4d:e8:
                    b4:a5:12:8d:54:60:2f:83:cd:81:f3:63:0d:3d:c6:
                    60:de:6c:4a:23:65:c0:e3:61:da:d2:17:81:87:d7:
                    94:b0:e6:15:32:56:0c:e6:ae:b6:52:c2:bb:6f:38:
                    2f:96:28:87:76:61:bb:1f:da:f4:9a:b1:29:56:b2:
                    9a:d9:71:2e:bf:ac:31:a3:9a:27:a1:4b:0f:4b:d3:
                    a4:e6:11:14:d2:97:22:dd:40:d8:b3:fa:b4:21:33:
                    b0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:7E:33:11:B1:3F:28:67:9E:70:9E:02:5A:C9:CE:C6:93:BA:E9:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/8a6469f0-4554-3b45-b9fe-fdbde6992151.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.crl

            X509v3 Authority Key Identifier:
                keyid:6C:F1:38:A9:DC:91:8A:D7:97:D6:E0:2C:FD:36:EA:97:60:B3:CF:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.41.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:91:70:14:8f:29:c2:f3:2c:44:c5:31:f0:4f:8a:3d:f7:b9:
         10:d4:56:e1:5c:49:95:40:7b:52:01:2f:0c:d7:ce:e5:af:2e:
         b2:09:4b:36:94:e8:57:cd:7e:9f:3e:60:a7:7f:b0:ba:9c:24:
         44:80:91:e1:45:de:7d:99:a3:cf:5c:76:59:5a:99:9e:2e:9c:
         9a:aa:9b:29:fd:3b:c5:87:28:17:a1:4b:b4:2b:25:1f:61:16:
         39:ab:8b:c8:01:fe:b1:c5:ed:5d:20:66:cd:dc:95:0f:15:d3:
         f3:ab:f7:ce:cd:8f:b8:93:ac:7a:46:cd:00:37:ff:1f:60:5a:
         d3:53:2e:d4:d4:b9:96:ac:60:00:17:75:83:b0:4d:a7:2f:8a:
         eb:59:7e:0a:80:c0:28:cb:f1:14:30:58:01:9f:cc:17:47:44:
         68:9f:eb:b7:e9:a0:68:c8:8d:70:15:b4:05:6f:ad:e1:e1:07:
         a5:b5:c7:1c:dd:f4:85:75:9b:18:b6:7e:4c:45:8f:ad:40:5a:
         48:6b:15:54:90:ec:89:6a:ee:d3:27:c6:b1:cd:47:9e:e5:9c:
         45:81:7f:4b:fb:ee:b9:e8:9e:08:ab:4e:2c:64:87:b8:75:96:
         8b:52:80:7d:1a:ba:fe:2f:9b:14:8f:a1:a5:41:9e:3b:9c:c1:
         69:dd:9d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 11:36:24 2026 by rpki-client