Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/5dfd4330-33b8-3dc7-909f-03e8179a40d0.roa
File:                     5dfd4330-33b8-3dc7-909f-03e8179a40d0.roa (raw, json)
Hash identifier:          /CryuXnMwvMCZ/H8DFa5/rNGvtVI7JU9gw/yt9RlUq0=
Subject key identifier:   A9:42:78:6F:1E:03:13:D0:57:84:A5:BB:77:C8:96:99:9E:DC:F7:B8
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F4328584EA786E3C7429267386EBC3E00
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/5dfd4330-33b8-3dc7-909f-03e8179a40d0.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     5769
IP address blocks:        69.70.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:86:e3:c7:42:92:67:38:6e:bc:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a2e1427f-0d1b-4322-aa1c-d9c0fee52fcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ee:b7:1c:d8:29:f0:52:e8:00:af:2f:b9:cb:
                    9e:5e:59:68:ee:05:1d:5c:84:d7:7c:00:e5:3a:15:
                    03:0a:f9:26:cd:ba:73:2f:9d:f1:05:3a:11:8c:7c:
                    b7:a8:4a:69:7d:34:3a:6b:96:28:6a:e8:73:2f:49:
                    3b:c5:33:3b:42:c1:8d:67:20:2c:cb:e0:18:d6:95:
                    e7:0a:56:40:97:a8:d2:bf:ab:bf:8b:ab:d9:23:74:
                    6e:71:74:d5:30:85:69:a3:7b:45:90:77:c6:8b:3a:
                    ca:a6:c8:d6:ba:6b:57:06:6a:8d:24:eb:b7:68:75:
                    72:06:f7:90:7c:fa:7c:1d:02:06:2e:b3:65:7d:14:
                    2a:5f:06:a2:3b:c7:2e:d4:88:3f:c9:e4:bb:12:52:
                    80:cd:9f:eb:42:57:8e:13:47:01:33:00:37:b0:b0:
                    5e:ce:02:79:0f:0a:45:c5:da:44:58:d9:14:fd:cf:
                    48:af:bf:06:50:5d:29:b5:58:1d:a9:10:26:71:43:
                    8f:7f:68:95:6b:91:55:55:41:bd:69:38:96:3a:7f:
                    1b:d9:08:ae:69:bc:19:ea:33:e0:93:6f:e8:94:b4:
                    72:bc:e6:ef:17:c0:d9:54:b7:4c:bb:76:92:82:23:
                    99:fe:22:15:3c:2a:62:76:3e:40:32:ba:94:77:29:
                    45:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:42:78:6F:1E:03:13:D0:57:84:A5:BB:77:C8:96:99:9E:DC:F7:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/5dfd4330-33b8-3dc7-909f-03e8179a40d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.70.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:2b:7d:b6:bd:59:c2:31:5c:1b:85:10:ce:3e:b8:52:ed:16:
         e8:57:0b:08:66:0e:0e:65:e0:c7:de:58:a7:d3:1e:b4:1f:18:
         85:17:92:3f:3d:30:f6:5f:7a:f0:4e:01:12:0e:64:ed:bf:60:
         fb:b6:6c:0b:d9:dc:a8:26:d7:16:d0:4e:1c:34:f7:d9:c8:7d:
         c0:f9:30:5d:e0:34:de:7f:6d:23:b9:b8:a8:93:36:fc:79:eb:
         7c:d4:0a:4e:a6:3b:8d:19:27:09:c4:5a:68:b4:ec:3c:87:20:
         2e:8d:f2:0d:7b:67:65:ff:85:83:54:bb:f5:71:07:10:40:4f:
         50:27:4f:ff:fb:58:fb:ad:53:87:8f:70:09:11:9d:bd:3c:23:
         03:42:d9:84:7c:9f:f4:dc:8e:88:c5:98:b4:1d:c9:14:6f:5b:
         1f:03:7e:cd:e6:f3:dc:7a:75:da:44:51:fa:6b:63:d8:9f:9f:
         51:4c:77:ad:2e:38:4a:e2:31:71:7a:ec:1c:e1:e4:4d:46:e7:
         79:44:38:96:43:b4:02:31:d7:dc:f8:44:cb:16:dd:df:03:1b:
         b4:5d:11:6c:33:5e:03:e8:5e:9f:1b:75:38:27:81:06:53:a4:
         02:85:5d:11:6c:5a:ca:d2:af:b2:f5:fb:cf:bc:d2:29:0d:59:
         49:c5:55:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:51:13 2026 by rpki-client