Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4298b6ff-8a6d-4135-b127-80a55c0919df/6a0bbce7-c581-3331-906e-a9f1222f970b.roa
File:                     6a0bbce7-c581-3331-906e-a9f1222f970b.roa (raw, json)
Hash identifier:          Br29vjmQx2eZPqXnDUof4qbuddtk75egb557TdqB11k=
Subject key identifier:   79:C4:E9:89:75:CC:D7:54:23:48:64:3F:B2:C2:F1:9C:9F:7C:ED:E2
Certificate issuer:       /CN=4298b6ff-8a6d-4135-b127-80a55c0919df
Certificate serial:       010D0C9F4328584D8EF9811C9FE7F1F92BDF3A80
Authority key identifier: 4A:FC:61:2F:3B:D7:32:8B:65:D2:0A:6E:34:9B:3F:09:6B:84:6F:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4298b6ff-8a6d-4135-b127-80a55c0919df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4298b6ff-8a6d-4135-b127-80a55c0919df/6a0bbce7-c581-3331-906e-a9f1222f970b.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     41095
IP address blocks:        69.194.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4298b6ff-8a6d-4135-b127-80a55c0919df/4298b6ff-8a6d-4135-b127-80a55c0919df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4298b6ff-8a6d-4135-b127-80a55c0919df/4298b6ff-8a6d-4135-b127-80a55c0919df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4298b6ff-8a6d-4135-b127-80a55c0919df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Apr 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f9:81:1c:9f:e7:f1:f9:2b:df:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4298b6ff-8a6d-4135-b127-80a55c0919df
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=3da662a7-2ffe-4897-a67f-c0df54655c84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9a:5d:4b:9a:b5:7a:5c:69:24:e2:60:62:c7:
                    82:f1:a6:ff:40:65:46:f4:6e:85:11:dd:66:bc:c0:
                    b7:a2:9e:80:32:34:58:15:7c:e7:5f:b6:24:47:f3:
                    66:dd:b4:3b:54:fa:ba:04:4c:0e:22:4a:13:43:53:
                    14:55:39:b1:fe:6b:c9:a0:f2:35:04:d1:b2:0d:dc:
                    91:b0:f6:15:25:23:38:b3:03:6f:ac:86:b2:73:9b:
                    b9:3a:f0:f5:2a:8f:df:d3:bd:e7:4e:70:19:8c:b1:
                    4b:fd:f2:cc:c2:d7:51:a9:33:15:bb:0d:29:c0:cf:
                    57:3c:1c:d9:96:66:8a:cb:97:f7:49:43:4c:a0:e4:
                    b3:b4:54:dc:03:e0:0d:09:e9:8f:50:6d:06:69:38:
                    f3:7b:de:ca:21:f4:a7:47:98:3c:e8:f9:7b:82:d8:
                    cc:a3:c6:94:a3:c3:18:61:69:bd:03:72:4a:a0:69:
                    8e:ea:6f:e7:ba:c8:45:82:31:26:f9:ed:57:27:a2:
                    ea:34:ac:46:b6:de:ed:9b:3c:d3:5b:8b:20:16:8c:
                    a8:bb:bf:ad:3d:4e:36:71:39:54:3f:d5:2f:2b:b7:
                    6c:3e:3d:a3:87:69:d9:3f:34:cd:ec:8f:62:35:3c:
                    71:93:b6:39:51:12:66:fd:ab:88:8e:37:5c:05:da:
                    5f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C4:E9:89:75:CC:D7:54:23:48:64:3F:B2:C2:F1:9C:9F:7C:ED:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4298b6ff-8a6d-4135-b127-80a55c0919df/6a0bbce7-c581-3331-906e-a9f1222f970b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4298b6ff-8a6d-4135-b127-80a55c0919df/4298b6ff-8a6d-4135-b127-80a55c0919df.crl

            X509v3 Authority Key Identifier:
                keyid:4A:FC:61:2F:3B:D7:32:8B:65:D2:0A:6E:34:9B:3F:09:6B:84:6F:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4298b6ff-8a6d-4135-b127-80a55c0919df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.194.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:35:08:60:c0:d9:3e:c2:82:4b:58:d6:20:fa:64:9b:20:86:
         c3:98:62:8f:4f:b8:a9:63:96:a4:9d:a9:cf:b9:be:19:94:42:
         78:20:39:37:fe:64:27:88:d5:24:5b:c2:4e:0f:85:be:b5:3f:
         33:0f:c4:ff:c7:f5:bb:0a:f4:83:cf:10:ba:36:b8:ea:9d:d2:
         9c:f2:b8:09:d0:e8:07:1d:07:1e:63:e3:d5:36:8c:33:86:c6:
         ba:02:38:4f:f6:4d:72:a1:9a:87:b9:23:47:dd:8b:1f:01:f8:
         47:c5:de:73:28:4a:76:db:59:9c:e8:2c:da:4f:90:18:2b:38:
         0b:cb:25:3b:9c:03:43:73:2a:e5:6a:44:d2:d6:dc:39:f7:c2:
         9a:96:11:c3:5a:5c:c0:f9:a8:7b:89:93:f6:82:88:bd:53:10:
         ac:97:9d:f8:a2:8f:f1:31:dc:7a:a8:c3:43:23:23:28:19:21:
         d6:b0:d0:b5:17:de:06:1c:1f:48:c0:6f:70:b8:72:8a:a5:0b:
         a5:9a:57:d1:8e:d1:9a:35:91:ae:9d:27:41:52:ba:ee:0b:fe:
         8f:2c:c3:6d:34:df:87:91:b7:1f:ff:ce:86:19:bd:b5:c7:d8:
         17:1d:a0:9f:90:87:4b:0f:b9:01:ad:dd:62:b3:6d:b7:42:8c:
         af:86:46:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 01:53:51 2026 by rpki-client