Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/8baa5710-3903-3a6d-8148-fec2d5a33c00.roa
File:                     8baa5710-3903-3a6d-8148-fec2d5a33c00.roa (raw, json)
Hash identifier:          nk9hpRl1CmA0GUv0Ojhbp4TeFpzJ/yWG/L9lgt8ModM=
Subject key identifier:   99:94:B8:EB:98:A8:FF:40:54:D4:B4:47:CB:FC:5B:A1:54:D4:72:6F
Certificate issuer:       /CN=5f6f7623-0788-410a-b9dd-8040879aa924
Certificate serial:       010D0C9F4328584ED001DBD786EE389EB69CE180
Authority key identifier: 6C:F1:38:A9:DC:91:8A:D7:97:D6:E0:2C:FD:36:EA:97:60:B3:CF:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/8baa5710-3903-3a6d-8148-fec2d5a33c00.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     19197
IP address blocks:        69.41.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:db:d7:86:ee:38:9e:b6:9c:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f6f7623-0788-410a-b9dd-8040879aa924
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=90dabe83-91f5-49e9-9373-a4994880c7e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bc:2f:0d:41:f0:70:31:8a:f0:71:b1:92:95:
                    7d:1c:23:bc:c9:72:27:d4:a7:02:45:8b:6e:ba:87:
                    ae:87:fa:7b:09:68:23:36:7f:df:1a:a6:c8:6b:d2:
                    63:65:68:62:60:24:7a:a5:32:8d:e0:93:3f:8d:3c:
                    27:2c:8a:7b:06:9f:d0:e5:01:96:82:4f:0d:cc:6b:
                    5e:ef:3f:12:45:f1:41:c7:dc:3e:4d:59:6d:b1:1a:
                    c1:fa:f8:87:41:69:67:f6:26:b6:6b:82:e3:4b:64:
                    ce:cb:8e:74:0b:28:8e:7e:f4:02:45:1a:a8:dc:3e:
                    56:a0:c2:4c:ba:80:e5:38:e8:3d:4d:00:58:83:17:
                    e0:c4:10:b4:3a:a1:7c:1d:e0:e0:ce:e9:50:a2:c5:
                    3e:25:25:ba:cc:f7:c1:9c:7d:62:51:d5:13:e3:e5:
                    cd:f0:02:f9:18:c4:76:e3:98:f1:1d:2c:c7:16:9e:
                    48:85:c7:73:92:ad:88:d6:60:ec:c8:77:0f:db:68:
                    b7:59:56:9c:38:11:ee:a4:3f:c8:af:1d:dd:f6:02:
                    14:df:e1:32:86:c7:c6:e8:17:43:bf:34:03:cb:8e:
                    42:0b:cd:02:51:e1:98:12:b1:7f:01:4a:4c:ad:21:
                    f8:d4:aa:e2:aa:a3:eb:96:ed:5f:ee:37:19:aa:2e:
                    00:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:94:B8:EB:98:A8:FF:40:54:D4:B4:47:CB:FC:5B:A1:54:D4:72:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/8baa5710-3903-3a6d-8148-fec2d5a33c00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.crl

            X509v3 Authority Key Identifier:
                keyid:6C:F1:38:A9:DC:91:8A:D7:97:D6:E0:2C:FD:36:EA:97:60:B3:CF:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.41.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:9e:8a:b6:5f:f5:6d:3e:f1:d1:51:84:c7:fe:dd:e5:19:98:
         e1:a7:e0:4b:4c:45:75:e0:55:84:2b:cf:c7:7d:c8:40:43:00:
         83:97:de:eb:e1:c6:fb:ef:46:78:98:4c:d8:04:b1:d1:56:61:
         65:7f:bc:52:0d:12:61:0b:29:22:0d:9e:59:02:8f:a4:06:96:
         a6:6a:a7:5c:ed:f2:c7:96:e6:01:34:bf:78:99:24:98:c1:d2:
         63:df:80:e4:6b:e7:3c:a3:3e:4e:88:37:3b:bd:b1:f5:b5:78:
         d9:1c:9e:6d:35:29:3c:22:d3:25:62:19:06:3a:25:37:42:9b:
         91:7e:a8:d5:cc:60:1d:cf:6f:17:9d:d5:61:4c:dd:92:42:13:
         c4:53:e5:6b:79:9f:d7:e6:44:9d:e5:66:b9:db:80:d4:63:a3:
         73:6a:c3:75:ee:71:76:dd:70:37:4f:74:cd:48:d3:68:b7:dd:
         21:f9:da:40:54:78:60:0e:3f:8a:f3:34:86:04:b9:e3:3e:14:
         bf:8a:31:e1:3a:f4:71:32:33:dc:68:77:96:10:f7:1b:4d:78:
         94:7c:68:a3:b3:8a:51:93:dc:8e:93:1a:2a:b8:c3:29:64:94:
         fe:8f:86:7d:72:a0:db:df:98:e9:b2:c0:08:4c:87:80:87:3a:
         45:b6:68:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 13:07:56 2026 by rpki-client