Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/187ea578-167a-4040-baae-c4022f6738f1/43c9ea79-5e0a-398e-bcc1-8ce8a9ace6f4.roa
File:                     43c9ea79-5e0a-398e-bcc1-8ce8a9ace6f4.roa (raw, json)
Hash identifier:          vWhEdzO+jf8qRxns+8h8fZRCRYbS8kYE/LeJIf9BYHc=
Subject key identifier:   28:9F:EC:60:0C:E7:D6:34:09:09:68:A6:05:EB:12:E4:12:D4:6C:7F
Certificate issuer:       /CN=187ea578-167a-4040-baae-c4022f6738f1
Certificate serial:       010D0C9F4328584E46BF290651162AD2C21D5600
Authority key identifier: 13:79:70:F8:E5:2B:42:94:84:41:6E:74:81:05:D7:B7:F9:50:CF:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/187ea578-167a-4040-baae-c4022f6738f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/187ea578-167a-4040-baae-c4022f6738f1/43c9ea79-5e0a-398e-bcc1-8ce8a9ace6f4.roa
Signing time:             Wed 24 Jun 2026 09:00:12 +0000
ROA not before:           Wed 24 Jun 2026 09:00:12 +0000
ROA not after:            Tue 22 Sep 2026 09:00:12 +0000
asID:                     22789
IP address blocks:        208.69.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/187ea578-167a-4040-baae-c4022f6738f1/187ea578-167a-4040-baae-c4022f6738f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/187ea578-167a-4040-baae-c4022f6738f1/187ea578-167a-4040-baae-c4022f6738f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/187ea578-167a-4040-baae-c4022f6738f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:46:bf:29:06:51:16:2a:d2:c2:1d:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=187ea578-167a-4040-baae-c4022f6738f1
        Validity
            Not Before: Jun 24 09:00:12 2026 GMT
            Not After : Sep 22 09:00:12 2026 GMT
        Subject: CN=1ad63e29-13d2-487a-8d4d-3fef60bd3d88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6f:4c:c7:be:f3:5a:11:d0:14:28:e4:90:21:
                    50:d2:09:2f:ec:db:3f:ca:0f:91:6c:2d:da:be:b2:
                    e5:06:ff:82:f9:46:91:0f:bd:10:4d:1a:e2:dd:4a:
                    7c:b9:82:bb:cb:4c:d3:ab:fe:1a:1a:11:55:ff:f1:
                    0d:d4:9f:c3:24:83:31:19:c6:67:fd:4c:bd:06:a3:
                    9e:58:37:fc:c2:24:1b:f7:43:82:5d:8b:5e:5d:14:
                    2c:7a:cc:fc:43:e0:ab:d7:c5:f9:ca:5b:cb:18:0b:
                    d4:1c:c8:af:f3:cf:0c:98:8c:cc:a0:11:01:d4:2b:
                    84:ee:95:09:73:a5:ea:f8:28:8a:26:bc:9c:02:d1:
                    96:e6:c4:96:b8:26:a2:23:8f:fb:34:bd:1a:e6:39:
                    fa:27:da:b8:a7:9b:d0:61:67:eb:94:21:34:4c:34:
                    07:6b:fd:9e:3f:c5:e5:66:f9:17:60:f4:6f:b4:63:
                    24:af:fd:77:76:50:e8:14:40:ab:ba:c3:67:58:fe:
                    52:77:76:0d:7e:5d:c7:02:74:2b:f1:4b:de:aa:2f:
                    75:a1:54:4a:40:a6:d9:36:52:ad:47:cd:7b:65:15:
                    cf:3c:3a:5f:4e:e6:44:82:15:fd:cf:fd:e8:81:85:
                    39:6b:e1:c6:c5:8f:f2:94:11:c3:8c:7f:cc:31:fb:
                    16:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:9F:EC:60:0C:E7:D6:34:09:09:68:A6:05:EB:12:E4:12:D4:6C:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/187ea578-167a-4040-baae-c4022f6738f1/43c9ea79-5e0a-398e-bcc1-8ce8a9ace6f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/187ea578-167a-4040-baae-c4022f6738f1/187ea578-167a-4040-baae-c4022f6738f1.crl

            X509v3 Authority Key Identifier:
                keyid:13:79:70:F8:E5:2B:42:94:84:41:6E:74:81:05:D7:B7:F9:50:CF:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/187ea578-167a-4040-baae-c4022f6738f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.69.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:53:59:6e:ed:09:1e:59:e8:02:b8:ff:c8:99:b1:5a:1f:de:
         30:00:61:59:ca:4d:d2:7e:25:f7:93:70:5e:32:f9:26:22:60:
         e7:c3:ef:14:e1:69:c3:93:e7:fc:47:d0:a5:81:03:ed:63:ff:
         a4:85:5b:1d:48:f6:b0:6c:56:4e:f3:0a:16:ad:e3:7f:d9:10:
         b2:74:82:36:53:db:e4:4b:c7:5c:89:e4:fd:8f:81:b1:67:0e:
         bd:b3:5d:64:7f:48:8f:fa:87:0b:ca:2f:8d:87:2a:d1:0d:93:
         2d:d6:36:24:73:c9:73:5f:75:9c:3d:23:21:45:ad:15:79:4e:
         f1:ad:cc:90:48:20:5f:8d:a0:0e:e6:08:c4:5e:3c:88:03:d2:
         d1:5b:8e:83:ef:f7:3c:48:6e:b4:13:3f:77:d9:2d:4a:b0:d4:
         49:84:13:7f:e5:15:31:8c:be:2b:bf:cb:70:fd:0d:ff:7a:14:
         2f:15:28:cb:c1:c4:ac:4c:d7:6b:72:69:0f:77:00:d0:e0:3f:
         14:fb:ce:87:7d:17:6a:9d:4f:7c:9e:a4:67:c9:47:a4:0f:b3:
         2f:09:d0:2d:25:95:a8:a6:30:ea:57:76:62:da:b0:95:59:f4:
         02:c8:e1:2f:64:5c:e2:2e:24:8e:89:6a:b1:22:84:a9:a0:96:
         70:31:dc:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 22:34:29 2026 by rpki-client