Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/243c9ac8-87aa-3e50-a697-5055732c5dd8.roa
File:                     243c9ac8-87aa-3e50-a697-5055732c5dd8.roa (raw, json)
Hash identifier:          0XZuxH3+e9D5zCGANtHPXfyHiV7XfCP5w2Og6VkArsc=
Subject key identifier:   AC:54:99:E7:D8:2F:0A:40:FC:BD:1E:2F:EF:14:6A:ED:BE:25:76:55
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D52436999055C353A6B49D240
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/243c9ac8-87aa-3e50-a697-5055732c5dd8.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     22258
IP address blocks:        69.246.12.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:69:99:05:5c:35:3a:6b:49:d2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=d36e9e8e-b361-4f22-a307-dfc064440173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d6:db:4c:84:09:9c:3b:c1:6f:80:a4:9c:86:
                    82:9e:2f:10:57:4e:19:90:7f:21:ea:b6:3b:91:1c:
                    9f:4d:69:cf:63:83:47:28:ca:91:bd:14:8f:dd:03:
                    60:a6:1c:d7:1d:f5:4b:c3:77:7a:f6:3b:24:6b:e6:
                    ac:a1:e5:62:d0:8d:1a:3e:50:f9:93:69:a6:e8:2f:
                    06:f7:aa:c1:c1:bf:41:25:3d:03:a9:49:19:b8:2b:
                    1c:b6:1b:e3:27:45:d7:8f:c9:8b:58:95:a3:34:17:
                    73:5f:2b:fe:21:a0:04:a9:f8:86:1c:15:f5:5e:67:
                    af:45:00:a3:27:89:fa:14:d7:40:4a:e8:bd:c1:45:
                    9d:97:5c:78:89:66:ee:93:3d:72:4a:40:24:25:46:
                    52:77:7e:22:a4:9f:a1:6f:e3:27:ab:11:7d:ff:e5:
                    cc:a7:5f:82:ae:ff:4f:66:4e:2c:7f:69:2e:4d:d9:
                    7e:19:e7:f8:fa:d3:67:a5:52:0b:29:4f:86:9e:43:
                    a6:d5:06:bb:af:a5:61:93:46:01:8e:b6:31:3c:b7:
                    e7:3e:87:ee:0e:15:34:5a:10:d1:7f:d4:00:d9:26:
                    71:4c:b4:29:44:1a:38:c2:2b:bf:85:b9:10:43:ec:
                    54:9d:7e:19:23:08:ff:c1:ae:89:7c:2d:bc:49:3c:
                    8e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:54:99:E7:D8:2F:0A:40:FC:BD:1E:2F:EF:14:6A:ED:BE:25:76:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/243c9ac8-87aa-3e50-a697-5055732c5dd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.246.12.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:e6:2e:31:4b:c6:88:70:89:42:bf:1f:71:7c:fb:a4:30:5a:
         0a:10:d2:f9:c0:f3:a4:64:7f:44:20:cc:ca:c8:4a:fd:ff:10:
         ee:16:f7:7a:e2:81:2c:f9:a4:37:32:42:ee:90:f1:2b:c3:a0:
         8b:50:71:e6:73:a1:b9:a9:88:fa:fb:c8:7d:2d:5f:8e:e7:1d:
         8b:65:f3:9d:72:86:24:e0:7d:15:63:c7:0b:ae:c3:b5:da:12:
         2c:65:5b:79:b0:ba:e6:5b:5c:8a:65:80:c3:3a:cd:ce:41:e1:
         1c:46:89:17:20:4d:95:8e:14:ed:cd:33:72:72:4d:df:36:e4:
         f1:b6:dc:3b:f1:6b:88:dd:48:8a:4f:63:e7:13:30:6c:78:71:
         26:70:e3:0e:3d:57:af:a7:2c:68:ea:bb:68:1a:c5:e9:98:ff:
         19:18:2a:0b:46:5f:d2:85:dc:f3:97:c4:43:3a:b2:a5:48:86:
         e1:1c:7d:79:9a:87:94:fd:a3:6e:d2:5f:9f:62:40:a6:98:4e:
         29:e2:cc:56:8b:13:7f:e9:e6:3d:9f:23:09:2b:a2:bb:8b:84:
         6b:18:de:1a:de:41:83:e3:7b:e5:c6:e1:27:53:9a:17:30:5c:
         45:1d:55:de:1f:1e:81:98:85:d1:c1:4b:4b:fe:ce:0e:25:aa:
         92:00:ef:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:09:14 2026 by rpki-client