Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/c1532893-d819-30c5-9494-feeccb5c6e66.roa
File:                     c1532893-d819-30c5-9494-feeccb5c6e66.roa (raw, json)
Hash identifier:          97ewji3H4iI0rOi+wxAqPVj+gZLYMkpr1n/GnQ2hQf0=
Subject key identifier:   65:0D:81:E2:19:CF:FA:F4:25:CD:56:F4:02:63:7A:65:58:C9:78:41
Certificate issuer:       /CN=937a6fc8-35c3-4151-aa2e-2513420f9344
Certificate serial:       010D0C9F4328584EA7872D5B0EAE5A24C839F320
Authority key identifier: 6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/c1532893-d819-30c5-9494-feeccb5c6e66.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     13720
IP address blocks:        69.174.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:2d:5b:0e:ae:5a:24:c8:39:f3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=937a6fc8-35c3-4151-aa2e-2513420f9344
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1bdc780a-ff4d-4cf9-8db4-fea2f294392c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6a:56:ad:49:5e:fe:1f:46:76:90:18:27:da:
                    d5:5b:70:a2:1a:81:78:ee:9a:9a:b2:cb:09:cf:da:
                    8e:35:5f:37:f8:4a:e2:2f:52:e2:bd:b0:a5:63:22:
                    0d:df:46:55:f6:ec:cc:0c:a0:62:5a:1f:b0:e6:c0:
                    e5:e1:64:e8:d4:a8:98:ae:b1:db:af:b4:82:52:24:
                    3e:0b:12:e6:f0:5c:2a:47:b4:4e:a3:09:e4:cc:28:
                    af:dc:0c:d2:2f:a7:cf:5d:15:e9:09:7f:a8:8a:eb:
                    c8:84:ca:b2:e3:97:f4:ee:75:3a:79:a8:0c:51:7e:
                    5f:8e:77:1a:eb:8e:91:e7:18:56:83:66:04:e5:14:
                    3d:de:e5:0c:91:60:95:2d:6f:3f:8a:30:f3:1c:12:
                    31:dd:af:de:90:4a:19:41:22:01:82:3c:02:68:bc:
                    2c:86:64:67:3b:b7:d0:d3:b0:1c:22:b5:6c:a7:ae:
                    57:d9:84:b8:5d:ce:3c:41:a1:77:e0:33:d9:61:23:
                    60:c5:66:b6:f7:af:f1:00:dc:dc:2f:43:62:0a:69:
                    86:03:e8:e9:66:75:8e:5a:1a:64:49:05:d2:cd:38:
                    81:f5:ea:d3:84:cf:ac:d9:d4:c7:ef:d5:7d:e0:11:
                    71:73:7b:58:9e:b4:44:7c:fa:bf:4f:7c:27:9b:13:
                    44:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:0D:81:E2:19:CF:FA:F4:25:CD:56:F4:02:63:7A:65:58:C9:78:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/c1532893-d819-30c5-9494-feeccb5c6e66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl

            X509v3 Authority Key Identifier:
                keyid:6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.174.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:6d:57:62:bd:ba:3d:1d:8b:01:6f:61:cc:ee:26:15:ba:c5:
         04:88:4a:2f:57:4a:86:46:73:ff:b9:65:9e:6d:f7:1f:1c:c7:
         1c:85:cf:dc:0c:33:0a:d4:db:a6:a5:e0:ab:08:57:22:73:8c:
         b0:ad:1a:f4:ff:d9:5c:86:d3:ec:f9:d3:77:58:32:5f:8d:93:
         28:30:b1:9e:85:47:e2:89:7f:dc:a4:21:a0:51:70:79:5a:b4:
         20:ac:4f:70:b0:98:44:81:ad:c2:d5:5b:e3:5b:38:04:92:e3:
         a7:ee:97:54:0d:f3:ac:e7:1b:1e:f1:03:af:34:f6:8c:13:eb:
         2c:14:a4:a8:1f:da:86:92:8b:40:b1:ca:ba:10:13:34:a0:ca:
         4d:e3:1c:5d:29:b2:fc:34:7e:3d:6a:76:6e:cc:35:f0:df:53:
         3b:b4:df:e9:e4:2d:86:e4:40:e3:21:ef:84:29:35:df:89:60:
         8b:08:e1:b5:05:93:ba:e1:4c:53:1b:81:f0:12:bd:d6:a6:20:
         9c:fb:ca:c0:c1:40:d5:56:3a:77:92:e6:c7:1a:28:a4:c2:cd:
         05:9f:01:eb:4d:af:37:7b:64:cf:8d:ed:f2:9e:ec:01:b2:74:
         01:3f:2d:ee:be:56:44:cf:05:01:54:5f:e2:15:c3:08:67:c4:
         77:f0:ae:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:53:13 2026 by rpki-client