Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/ef8a5a61-2160-303a-9c10-61c3c9e4a40f.roa
File:                     ef8a5a61-2160-303a-9c10-61c3c9e4a40f.roa (raw, json)
Hash identifier:          EC4F1RyRStLpPBSmUVl74iUZecwlzrQSXiQI716ZnE8=
Subject key identifier:   BF:0E:9D:71:3E:01:24:87:94:E8:9E:9F:F3:C6:EE:BF:5F:83:4F:65
Certificate issuer:       /CN=937a6fc8-35c3-4151-aa2e-2513420f9344
Certificate serial:       010D0C9F4328584EA7873182B20BCA10AA1EE380
Authority key identifier: 6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/ef8a5a61-2160-303a-9c10-61c3c9e4a40f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     13720
IP address blocks:        69.174.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:31:82:b2:0b:ca:10:aa:1e:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=937a6fc8-35c3-4151-aa2e-2513420f9344
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=679ab4f5-0056-493f-8820-edd467edbf07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e4:8f:4b:a8:60:e9:89:3f:fd:1b:6c:45:7d:
                    05:80:29:08:47:b0:12:2e:64:fc:ed:f0:5e:cc:da:
                    a2:9e:04:f5:bc:51:b5:79:74:16:4a:47:3c:23:1f:
                    df:f9:f2:c9:3e:28:ad:99:9c:bb:27:b5:90:ea:0a:
                    26:93:1c:65:cb:38:b9:86:c0:f0:98:d0:02:dd:17:
                    d4:2c:ee:1b:a4:2f:ab:1a:34:0f:a7:67:6d:8e:92:
                    69:83:45:05:fe:e0:9e:02:cf:0e:b1:b7:f6:be:a4:
                    6e:6e:3a:09:2b:5f:3a:97:bf:43:ae:f6:3b:7f:fc:
                    05:79:6f:4a:5c:c4:f6:99:be:d2:ff:2a:cd:53:37:
                    60:08:4f:cb:30:f2:60:d4:e7:c5:f9:66:ac:24:82:
                    de:fb:db:5e:76:34:34:4b:3b:83:0f:c2:0c:12:7f:
                    50:d3:c2:b3:04:e9:f9:7e:d0:ea:60:33:ad:0a:37:
                    9e:58:8d:52:ae:67:f2:aa:88:c0:c9:62:04:dc:bc:
                    84:a1:1b:24:19:d2:72:02:80:78:51:01:63:3f:a9:
                    ed:be:10:18:fb:76:69:78:c1:5b:2f:04:a5:b4:bd:
                    cf:c4:1f:b1:61:9c:be:ea:bf:80:ea:d9:e1:8f:12:
                    8d:6d:9a:67:c3:80:4b:e8:ea:cd:a5:e3:3b:75:17:
                    9f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:0E:9D:71:3E:01:24:87:94:E8:9E:9F:F3:C6:EE:BF:5F:83:4F:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/ef8a5a61-2160-303a-9c10-61c3c9e4a40f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl

            X509v3 Authority Key Identifier:
                keyid:6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.174.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:06:a5:98:71:5e:76:4a:c6:c8:d9:c0:cc:6d:9f:da:4a:00:
         69:36:28:f9:bd:c7:5d:03:4e:c9:94:18:e0:0e:2d:00:4e:65:
         7d:67:3a:25:51:4e:ee:9a:cc:cf:9d:ac:85:f6:0b:88:2b:fb:
         1e:c0:ac:d4:82:20:db:2f:01:a2:41:f4:3b:42:af:41:6e:d5:
         69:4b:fe:e2:ed:8b:97:f8:b9:9d:96:d7:2b:2a:e7:4a:50:8d:
         7e:7b:27:b7:da:23:ce:50:9c:8c:63:a9:ab:80:c3:8c:7b:07:
         f5:9f:80:65:ca:7e:15:c8:50:69:eb:2d:83:d5:24:d0:7a:84:
         c1:e8:f4:4b:ca:ff:d9:0e:0f:c2:4f:b7:09:9d:9d:aa:66:03:
         07:64:48:57:37:75:31:39:c1:39:51:c4:0e:95:62:ff:96:70:
         ee:1a:0a:5a:69:15:51:6a:b0:29:d9:ca:fc:d3:62:16:c9:3b:
         7e:73:11:43:3f:4a:d4:4c:ad:14:f7:45:d0:06:37:bc:85:89:
         7d:96:18:2c:6e:6f:eb:87:ed:b8:5e:8b:57:17:2d:8a:62:39:
         61:8b:4f:2e:ad:69:fb:9c:4e:15:e2:7e:52:17:1e:49:81:1d:
         fc:87:07:dc:8e:4b:86:30:40:f5:cb:bf:c4:a9:ca:03:c0:0a:
         3f:25:88:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:13:41 2026 by rpki-client