Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/2489eab1-fab2-357f-aeb8-08dc32897f54.roa
File:                     2489eab1-fab2-357f-aeb8-08dc32897f54.roa (raw, json)
Hash identifier:          EH6n9CbrZa5k9n7IrGvZRvC77vdFBCouWE0lsB0uoaQ=
Subject key identifier:   2B:76:F7:8F:DE:DE:92:DF:6A:E7:CB:C6:EF:DE:43:48:9A:9F:A2:8D
Certificate issuer:       /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00
Certificate serial:       010D0C9F4328584E0A6FED54F4BF74FF1E964880
Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/2489eab1-fab2-357f-aeb8-08dc32897f54.roa
Signing time:             Tue 02 Jun 2026 18:32:03 +0000
ROA not before:           Tue 02 Jun 2026 18:32:03 +0000
ROA not after:            Mon 31 Aug 2026 18:32:03 +0000
asID:                     20419
IP address blocks:        69.28.108.0/24 maxlen: 24
                          69.28.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0a:6f:ed:54:f4:bf:74:ff:1e:96:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00
        Validity
            Not Before: Jun  2 18:32:03 2026 GMT
            Not After : Aug 31 18:32:03 2026 GMT
        Subject: CN=32e05036-f52f-4e26-b8ba-76f5d9706f10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a7:e0:6d:b0:7a:7c:d6:77:35:44:c4:35:80:
                    47:e7:8c:51:06:75:22:3c:66:9c:5a:69:7a:89:6c:
                    5e:d5:a5:d0:3c:a8:38:95:34:61:f0:33:f2:96:18:
                    a0:6c:e0:f7:f3:5f:74:76:87:b8:e8:45:06:21:24:
                    1d:23:ba:79:14:16:c0:5c:9c:38:72:e0:a1:2f:9e:
                    2a:b3:14:3c:32:0d:77:1d:70:a8:ac:59:6a:4c:95:
                    7b:1d:53:7a:35:e4:ee:ae:02:a2:fc:1c:15:2d:30:
                    b8:19:0f:57:73:4f:e4:55:2a:18:50:60:96:8c:9d:
                    8b:ea:69:88:c6:04:4f:4b:3f:67:64:c9:e8:b8:de:
                    67:db:2f:ba:d3:3a:14:e6:1c:82:0c:4d:68:65:56:
                    4a:da:e9:8a:f9:4d:a5:76:3a:f5:06:7c:d6:61:dd:
                    1d:7a:e2:41:bb:d6:e8:61:7f:7e:77:2a:2c:e9:63:
                    5e:a3:32:59:be:36:2d:93:b7:3d:b6:0e:54:2b:21:
                    55:7c:a1:3e:c2:5e:b1:a5:91:f0:c1:78:8b:10:01:
                    fa:8a:32:e9:11:b2:1d:73:e8:0a:c7:ca:30:21:45:
                    17:11:7c:88:ce:98:2a:7b:54:d3:8b:81:f8:91:ea:
                    0f:b2:b3:6b:71:fa:b9:43:50:f0:d1:1e:a1:bb:f1:
                    31:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:76:F7:8F:DE:DE:92:DF:6A:E7:CB:C6:EF:DE:43:48:9A:9F:A2:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/2489eab1-fab2-357f-aeb8-08dc32897f54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl

            X509v3 Authority Key Identifier:
                keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.28.108.0/24
                  69.28.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:76:cc:c8:11:71:75:c9:75:98:55:fb:48:90:51:ac:e9:a8:
         dd:76:0c:15:9c:ab:df:b2:33:ef:fd:f3:42:0f:4b:80:b5:b4:
         5a:06:61:1e:70:44:69:dd:60:e8:b8:56:f5:d7:4a:62:24:0e:
         c3:42:5c:51:6b:8c:5d:f3:9e:35:77:e5:a7:d4:02:d6:d6:d5:
         56:fa:23:e0:ae:0f:c8:b9:46:dc:19:a8:8c:e2:21:7c:81:b7:
         52:a0:a3:77:bf:3a:5e:b2:df:5e:c4:e4:14:be:96:8d:44:c0:
         be:bc:eb:dc:42:bd:0c:4a:20:b6:35:db:cb:cf:93:01:a4:4b:
         9f:d8:01:68:08:cc:02:3f:41:bd:61:c0:87:fa:02:e0:53:98:
         c1:7d:c6:e5:82:94:cf:ab:74:98:7f:c8:17:6e:37:68:87:63:
         55:fd:c6:8c:40:bb:24:6d:e1:7c:1a:c4:fa:8b:40:26:42:c2:
         d7:b8:d9:ab:2a:ce:bb:8c:59:49:fd:f0:ae:36:f9:63:fd:3e:
         12:bc:54:26:a6:cd:ed:6a:21:39:d5:cc:93:02:d6:27:98:8c:
         57:44:cb:31:2d:0f:15:69:2e:3c:15:97:18:32:c8:f8:bc:60:
         f7:26:1e:a3:14:aa:bb:72:f5:19:27:61:e3:44:99:15:53:be:
         60:49:e9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:26:21 2026 by rpki-client