Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/cb117f56-35f0-3907-94de-b9bad3b0749f.roa
File:                     cb117f56-35f0-3907-94de-b9bad3b0749f.roa (raw, json)
Hash identifier:          G7k2zq2Hg/ZKsIXNhbxrZqAZSCiz+W3lAUN8Uj6WPR8=
Subject key identifier:   D1:05:1D:9B:87:94:E3:FB:08:D9:89:E1:57:20:F0:24:03:D2:22:08
Certificate issuer:       /CN=937a6fc8-35c3-4151-aa2e-2513420f9344
Certificate serial:       010D0C9F4328584EA78731F2EB918BB0AD8FE100
Authority key identifier: 6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/cb117f56-35f0-3907-94de-b9bad3b0749f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     13720
IP address blocks:        69.174.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:31:f2:eb:91:8b:b0:ad:8f:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=937a6fc8-35c3-4151-aa2e-2513420f9344
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=3290b4a9-c228-4b3a-aea7-cf6a039ed734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:60:e8:0a:b1:1e:56:9f:ff:4e:b0:ae:50:fe:
                    c2:b3:9d:a2:94:48:37:97:35:89:d6:36:58:b4:72:
                    02:80:fe:61:f2:82:f1:9e:12:c9:37:43:9d:60:f3:
                    bb:10:66:c4:c1:ef:de:5a:de:1f:6d:f2:79:84:53:
                    e5:6b:d9:77:50:d2:46:ac:fa:a4:fd:85:71:7e:1a:
                    74:2b:e6:1f:86:34:42:f9:2d:21:10:e6:3d:c9:00:
                    7c:7e:33:f8:cc:25:de:b5:9e:54:dd:d5:74:b4:3b:
                    d2:1b:02:03:91:f1:27:86:90:8c:4c:bd:9f:08:87:
                    0e:56:a3:f1:2d:c7:94:5a:08:d2:ba:93:94:41:f8:
                    cb:71:df:d9:c7:73:4c:78:62:48:bb:44:92:e1:50:
                    12:16:13:97:19:f3:f7:0b:66:0e:63:9c:50:20:a1:
                    13:54:57:05:f4:34:46:94:6b:e4:90:8c:6f:fa:8a:
                    40:e3:94:b4:eb:20:3d:1e:1e:a9:46:f5:a2:d7:46:
                    b7:42:98:f3:87:76:a8:a0:39:78:e8:d6:84:0c:c2:
                    88:6b:e3:f1:10:e9:9f:4d:df:b6:f7:45:06:0b:c7:
                    e2:4c:a7:c4:d0:8f:10:bf:03:95:17:1b:20:6d:35:
                    1b:88:88:9c:cd:97:1d:cd:89:9e:07:6e:73:1d:3b:
                    65:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:05:1D:9B:87:94:E3:FB:08:D9:89:E1:57:20:F0:24:03:D2:22:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/cb117f56-35f0-3907-94de-b9bad3b0749f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl

            X509v3 Authority Key Identifier:
                keyid:6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.174.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:e5:08:1f:41:bd:bb:41:3c:f3:f7:31:27:16:26:7c:b5:71:
         7e:e5:74:63:c0:3a:83:c4:e3:18:49:71:f3:95:c5:88:0c:f3:
         99:35:d3:aa:0a:08:0f:97:dd:8a:2f:b2:bb:c1:58:a8:54:9c:
         6b:ca:fa:a3:b2:44:86:23:f9:4e:a2:d5:70:67:12:55:27:0c:
         2f:60:26:5f:41:16:e6:45:88:37:e8:12:a9:9f:b1:9a:19:62:
         18:f2:ef:57:a9:13:af:5a:30:63:ed:29:c9:ca:f5:03:3d:a6:
         4c:a1:5f:25:5a:ff:e9:34:d3:92:90:39:0d:ab:23:db:5c:59:
         2f:73:50:23:c5:de:3f:f6:f9:9a:7d:57:6b:82:12:c1:ec:0b:
         d8:b8:66:83:ed:8c:6e:a3:a8:d0:d4:8a:91:f0:3a:24:a6:9e:
         01:39:35:88:fc:81:5f:8a:20:5e:c6:fc:7b:5e:24:e8:4e:e4:
         4f:08:e0:9f:8b:19:f9:af:8b:d8:b4:5e:e5:7b:6b:81:10:37:
         10:fa:ee:2d:80:dc:83:69:37:59:e1:47:ee:bf:b5:26:39:13:
         ac:e8:9b:67:d2:82:9e:2d:26:62:e6:a7:c5:44:8f:5a:b7:fe:
         ea:6c:ac:eb:a3:44:b8:56:de:25:e5:d0:04:0d:cb:ee:b3:50:
         df:0c:c7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:51:03 2026 by rpki-client