Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/72f38f26-3d9f-31fa-afdc-35c64c5c1b6d.roa
File:                     72f38f26-3d9f-31fa-afdc-35c64c5c1b6d.roa (raw, json)
Hash identifier:          S++aeTti5gHJHsaaSyKzTSnpfjXDfTCfCTiUqybZy7M=
Subject key identifier:   0B:84:D6:60:01:0F:D0:43:B3:A7:EB:FA:FD:36:60:02:6A:29:64:5C
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F4328584CCBA75315A4650887A0F0EB00
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/72f38f26-3d9f-31fa-afdc-35c64c5c1b6d.roa
Signing time:             Sun 08 Feb 2026 14:00:41 +0000
ROA not before:           Sun 08 Feb 2026 14:00:41 +0000
ROA not after:            Sat 09 May 2026 13:00:41 +0000
asID:                     13414
IP address blocks:        209.237.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cb:a7:53:15:a4:65:08:87:a0:f0:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Feb  8 14:00:41 2026 GMT
            Not After : May  9 13:00:41 2026 GMT
        Subject: CN=07c34110-e6bb-449f-9a75-ec579a5b7259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b2:fb:1e:0b:65:37:f7:1f:cb:60:1b:99:88:
                    e7:0c:1c:24:a4:42:5e:5b:5a:78:1d:48:36:89:bf:
                    a4:19:e6:49:a8:fe:93:69:51:cc:9a:03:f2:1f:db:
                    21:e7:73:14:90:0c:2e:fd:b1:e8:cb:89:b1:b2:8f:
                    db:7a:46:a5:a5:b6:57:b5:37:28:61:00:68:98:c0:
                    cc:7e:42:3e:fd:8c:36:8a:54:0f:fc:db:1f:5d:e8:
                    3d:8d:15:3d:16:2d:8a:16:f1:1b:45:47:bb:a3:fe:
                    37:19:e1:ec:0d:06:7b:dc:a4:2a:93:09:22:db:3e:
                    83:ad:cd:c7:09:ab:99:1b:bb:6f:c1:5c:b5:8a:3c:
                    7b:63:82:dd:52:90:85:16:63:63:bb:84:b2:76:b5:
                    17:55:87:18:5d:d4:31:06:67:69:85:0b:98:73:bb:
                    52:b1:a8:10:45:49:62:e3:aa:dd:ea:3a:df:dc:d3:
                    ea:7a:1c:1e:fa:6a:5a:46:aa:77:3d:ab:45:1c:d8:
                    c5:25:30:21:41:36:9b:c5:1f:e3:c8:2c:fa:8e:29:
                    d5:45:bc:3e:ee:74:cf:b6:6a:ec:c6:6b:89:21:d1:
                    e3:d9:3a:65:40:7f:e7:d5:c9:e8:a4:47:a0:3b:12:
                    33:40:bd:52:46:b2:a3:8f:90:f8:52:fd:f8:95:e6:
                    65:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:84:D6:60:01:0F:D0:43:B3:A7:EB:FA:FD:36:60:02:6A:29:64:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/72f38f26-3d9f-31fa-afdc-35c64c5c1b6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:29:e7:cf:ca:1c:e9:60:ad:02:b0:3c:61:99:63:33:94:74:
         1a:b8:e1:a6:4d:a9:3a:2c:58:c4:81:60:ee:23:16:e3:27:86:
         a5:15:b1:34:6b:c2:00:34:18:1e:d6:86:63:7e:8a:09:12:51:
         6c:e6:b5:36:bc:14:06:48:0a:0a:29:93:c3:85:98:a7:cb:60:
         85:2d:1e:70:74:85:f8:59:11:51:0f:f4:c2:55:ea:73:2f:27:
         c8:d7:14:44:2c:a8:47:da:82:ca:60:48:4f:8b:04:66:5b:f1:
         82:39:4f:92:d0:5e:a5:5d:33:51:75:85:bd:53:c8:c6:29:36:
         25:00:8f:fe:86:b0:9e:2d:51:af:80:a6:e5:9d:3e:2c:b3:f9:
         50:5e:d7:7b:f8:91:66:2f:6f:93:24:20:c7:bb:2c:09:91:80:
         be:8a:af:e6:80:d6:cf:c3:98:aa:5d:a0:eb:b0:90:e4:b7:5f:
         d2:3c:f7:fe:f6:57:35:c1:0e:cb:ac:93:f6:17:f8:01:4b:91:
         72:9d:5d:8a:c4:92:ac:e2:b6:9b:27:e2:4d:6f:68:f3:ec:69:
         59:16:54:5b:49:1f:7f:ec:c5:16:73:74:9d:31:95:f3:09:74:
         74:4a:46:00:92:a1:50:72:09:48:0e:03:d4:23:ea:80:60:76:
         61:65:f5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:47:33 2026 by rpki-client