Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/789bcc89-55d1-3440-a816-1162d1d9d789.roa
File:                     789bcc89-55d1-3440-a816-1162d1d9d789.roa (raw, json)
Hash identifier:          hbBW45cJLzjl3bvoxvQ//D5IXI/H1yZ4omR73VzeN54=
Subject key identifier:   50:53:F9:7E:42:B2:94:B3:9A:B6:57:F2:0E:E0:3D:F1:0D:55:40:51
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F4328584D59EA6FF45D59CE6953140EE0
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/789bcc89-55d1-3440-a816-1162d1d9d789.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     5769
IP address blocks:        69.24.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:6f:f4:5d:59:ce:69:53:14:0e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=cb1bcae1-a141-4fad-ade1-553e2ed98de2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:14:a1:9f:04:b7:71:b7:eb:dc:3e:7b:81:5d:
                    43:52:ed:a0:86:26:aa:fa:4a:b5:bc:fb:cf:79:a9:
                    a5:96:6f:9f:f5:75:90:5d:b6:68:e4:ce:4b:89:28:
                    08:53:7a:74:46:69:a2:8b:17:a1:46:2b:c7:66:c5:
                    1c:65:e6:45:21:15:cb:31:07:22:1d:f7:52:63:c4:
                    d9:ed:69:20:00:6a:83:34:2b:ae:ed:6b:44:af:22:
                    50:70:e3:88:ea:44:d8:83:85:c2:76:f7:b5:3c:d6:
                    e1:e1:8d:33:b1:fd:bc:c2:64:39:19:6d:6c:e0:c4:
                    ad:a8:c0:0d:ed:a2:e9:85:b1:7f:18:7c:df:68:b1:
                    94:b0:30:5c:8c:30:97:8b:53:4b:dc:06:e1:63:9d:
                    f4:d5:a6:f3:22:1d:2b:dd:74:8b:e2:63:72:99:f5:
                    7d:02:98:49:c3:d0:0d:dc:ea:f3:b9:de:79:aa:07:
                    1d:ac:81:32:aa:74:b6:73:cd:c6:8a:78:94:9a:aa:
                    69:21:37:e1:57:7c:3a:13:e6:3c:83:b1:d1:9e:b9:
                    6a:d1:07:d4:d4:96:e3:ca:cd:7f:4b:c2:f2:19:fb:
                    8f:af:eb:f9:97:04:a8:f2:e7:e9:69:68:4c:03:ad:
                    f0:be:84:38:72:c5:db:be:7e:4d:11:0c:1b:c1:ec:
                    cc:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:53:F9:7E:42:B2:94:B3:9A:B6:57:F2:0E:E0:3D:F1:0D:55:40:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/789bcc89-55d1-3440-a816-1162d1d9d789.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.24.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:a9:cd:93:b8:8c:ae:d0:16:98:44:5a:88:d6:66:ae:c3:eb:
         7b:c4:d5:31:bf:84:87:5a:de:7a:35:94:93:dc:b8:4c:c3:86:
         59:7a:30:b6:23:2d:fb:ec:7a:04:55:94:3b:ad:97:7e:3d:dc:
         60:27:ab:d2:06:25:8d:32:e3:1a:d6:66:d1:4e:e8:7b:e1:01:
         16:c9:47:81:79:61:49:db:58:d3:a3:41:74:cd:f3:46:31:c4:
         4b:e5:08:d8:8c:e8:27:d5:59:7d:98:6a:c8:da:0d:da:1a:c8:
         16:6a:dc:18:0a:98:03:bf:c8:43:50:c3:f6:22:c5:23:b1:4a:
         ab:96:6b:ce:fb:42:1b:ff:65:21:c8:55:03:76:32:a1:59:22:
         76:38:36:2f:85:c2:01:cb:dc:70:33:22:59:83:23:9a:7c:88:
         cf:c7:4e:f8:ab:00:a8:e1:fb:8e:f7:0b:96:ac:cf:75:b4:5f:
         25:01:24:86:87:44:88:b1:0a:d1:65:47:24:97:fe:ae:be:74:
         67:ed:5a:4f:d0:89:54:70:bb:5f:e6:7d:4c:b9:6b:3b:a9:76:
         b5:10:1f:e8:07:12:67:40:af:24:e8:fc:04:70:49:18:e1:67:
         44:72:32:1b:03:09:df:6e:5f:ab:d8:2e:8a:0a:06:3c:47:dd:
         e7:c3:d6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:03:11 2026 by rpki-client