Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/899fc356-7769-3771-8801-72b850e98504.roa
File:                     899fc356-7769-3771-8801-72b850e98504.roa (raw, json)
Hash identifier:          cUqtozUWCp6eAmsF7V95+KCnjXwwt2HM3n6zpePwhgg=
Subject key identifier:   71:A3:EF:28:E7:30:E1:3E:B0:33:30:B7:20:07:C5:24:EE:CC:A7:D3
Certificate issuer:       /CN=937a6fc8-35c3-4151-aa2e-2513420f9344
Certificate serial:       010D0C9F4328584EA7873176BF8E21971C95F980
Authority key identifier: 6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/899fc356-7769-3771-8801-72b850e98504.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     13720
IP address blocks:        69.174.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:31:76:bf:8e:21:97:1c:95:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=937a6fc8-35c3-4151-aa2e-2513420f9344
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=5da7e6f3-c4c4-4ec1-a133-fb1153b78484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:86:bf:43:f8:4f:ec:39:08:04:4e:46:26:16:
                    1d:42:88:e3:9c:b1:c7:a1:d7:60:11:a2:13:e3:85:
                    be:af:e9:23:1e:5d:8f:91:dc:56:91:bd:39:c5:b6:
                    3c:1b:fd:db:47:73:7f:94:18:b3:7a:f3:39:a5:1c:
                    be:80:52:b0:7f:b3:04:2b:d7:f3:7a:a2:3f:f1:34:
                    45:1e:ee:a2:08:94:c3:f4:9d:a3:56:84:58:7c:36:
                    c9:4b:fd:4b:27:be:53:50:ab:fe:bc:fe:bf:ed:9b:
                    3d:6e:38:8c:5c:7a:64:b2:4a:f5:6a:b3:dc:42:51:
                    8c:39:23:81:54:6a:41:a3:f6:22:d9:6b:01:5d:2d:
                    4e:d9:92:06:9e:b2:ed:29:d4:76:86:0b:9e:72:8a:
                    d4:c4:4d:05:fe:09:53:58:21:d9:3a:93:37:0f:c7:
                    43:b8:b9:6d:4b:41:21:34:63:4f:af:b6:a3:e7:0a:
                    e2:d9:5e:e0:8a:42:41:d3:46:db:1e:e1:5f:c5:c6:
                    e0:bd:e1:e6:1a:04:f6:c9:d3:8e:77:ef:d5:62:6f:
                    95:fc:11:b0:ed:f8:fa:12:67:1a:d3:bc:96:0b:0b:
                    55:97:25:04:fa:d8:2e:7b:9b:28:bd:61:00:d7:12:
                    dc:0b:cb:b0:d7:ce:35:1d:8d:03:30:38:9e:bb:a6:
                    1c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:A3:EF:28:E7:30:E1:3E:B0:33:30:B7:20:07:C5:24:EE:CC:A7:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/899fc356-7769-3771-8801-72b850e98504.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl

            X509v3 Authority Key Identifier:
                keyid:6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.174.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:7f:b9:e7:27:d1:73:8c:14:a7:94:ac:bb:6f:6b:75:ee:0c:
         74:1a:1a:f5:89:f0:a5:dd:ff:58:68:48:4d:e0:10:80:0c:cd:
         5f:33:72:f3:6d:b2:5f:85:2e:02:30:61:98:0f:53:6b:83:53:
         36:9d:66:fa:09:e0:76:a2:c1:7e:6e:ea:d8:cc:01:2e:59:72:
         19:fb:1b:dd:09:72:d7:4c:58:7f:8c:a4:64:34:63:59:97:3f:
         8f:86:6f:9a:92:b1:54:8a:ce:d7:fc:8f:ba:81:2b:aa:3e:71:
         0b:39:5a:ea:bb:d7:23:7d:89:bc:4f:e7:ff:b0:ab:a3:03:f7:
         14:de:13:61:29:97:2b:3a:a3:37:d5:9e:b4:1f:09:da:d7:ea:
         e2:15:1f:df:7a:d2:d1:6d:46:2f:41:82:2b:50:e0:5a:33:84:
         41:1f:04:54:7b:f8:49:75:c9:f7:8b:83:bb:e1:ef:f7:ea:d4:
         f7:82:0d:88:73:03:64:55:3e:76:8e:74:05:1c:6f:39:1e:d0:
         e4:c3:38:86:a9:16:7e:2d:35:8b:ce:81:8d:a1:ac:ad:8c:4e:
         1c:b4:b8:99:41:16:dd:1c:17:58:62:be:3e:50:43:08:1d:72:
         0d:54:50:bf:c3:ff:3b:94:5a:f7:a6:2b:0f:a1:56:cc:ea:94:
         44:08:47:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:04:19 2026 by rpki-client