Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/1b6237bc-9b6e-3b50-a111-b2a2d71fd444.roa
File:                     1b6237bc-9b6e-3b50-a111-b2a2d71fd444.roa (raw, json)
Hash identifier:          9aMnNn44PF8eEouwHKVgk+Y4fA0ifYyTJO4xlG+rHgk=
Subject key identifier:   3F:E4:8B:15:12:DC:8A:F7:50:14:98:90:64:DE:D1:0F:3C:DB:DD:22
Certificate issuer:       /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial:       010D0C9F4328584BB88D114F8E8510A958B94880
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/1b6237bc-9b6e-3b50-a111-b2a2d71fd444.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     23059
IP address blocks:        69.28.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:11:4f:8e:85:10:a9:58:b9:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=c21529e8-314c-46e7-8027-fd4d0ae87663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:66:31:a5:d7:29:b7:6f:db:19:24:b2:1f:5d:
                    a7:ec:30:99:7b:28:e1:06:62:f3:36:41:08:8d:04:
                    3d:94:7a:b8:d0:b9:57:67:3e:55:cd:77:15:62:00:
                    80:0d:42:9e:63:fa:d0:c4:49:e2:8b:60:f6:6e:b5:
                    02:d5:be:d9:b0:82:f0:cf:9a:d3:6a:69:ae:88:10:
                    4c:00:26:2d:dd:13:aa:f6:47:a4:82:ec:f2:54:2e:
                    8b:8c:83:15:8e:4b:64:f7:4e:86:e6:2e:c2:ec:5b:
                    d4:89:9a:af:d5:8d:7d:3a:7c:3e:3e:ff:3b:83:84:
                    d3:fd:a6:79:88:fb:37:51:87:d7:83:e9:50:df:66:
                    2d:59:e7:25:1d:9c:12:4d:75:cd:90:bd:69:67:2b:
                    73:c8:35:44:aa:c3:fd:05:ec:29:9b:05:a1:65:4f:
                    a4:b4:82:4a:b6:0d:6a:64:f0:f8:40:ce:75:5e:a5:
                    cc:1a:b2:f3:08:e8:22:cc:07:8e:39:78:a9:0a:ec:
                    e7:e3:0f:0c:34:c0:19:d3:ca:d0:26:a6:16:36:75:
                    c8:32:63:31:a9:85:14:33:24:f9:c1:52:e7:59:73:
                    9e:48:ee:51:f6:f9:8c:13:38:d1:fa:d0:b4:f5:ca:
                    42:40:bf:23:7d:f4:d1:60:15:32:bf:cd:00:c8:4b:
                    d5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:E4:8B:15:12:DC:8A:F7:50:14:98:90:64:DE:D1:0F:3C:DB:DD:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/1b6237bc-9b6e-3b50-a111-b2a2d71fd444.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl

            X509v3 Authority Key Identifier:
                keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.28.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:12:9e:22:77:63:fe:35:fb:0e:46:ae:8f:a3:23:ed:14:d0:
         b8:79:da:7e:d0:34:f4:82:e4:15:7c:df:1c:f3:f3:24:db:55:
         37:ed:b9:c3:4f:2d:4e:14:82:17:7e:11:83:cf:43:b6:7c:fe:
         69:56:1f:dd:1e:e3:90:7f:c8:5d:9b:9e:c7:24:d2:e8:a9:8f:
         49:b4:89:2c:76:53:4a:0f:67:cb:eb:ae:49:b9:70:4d:5e:58:
         cc:41:c8:50:f8:ff:38:95:75:c1:8b:80:85:1f:d8:53:1d:49:
         dc:5f:1e:10:dd:e5:f8:05:47:86:ae:77:bd:86:7c:c5:f4:53:
         05:4f:17:c3:e5:f4:b4:1a:01:98:05:bc:0f:18:26:9b:8f:71:
         44:3a:a4:9b:7d:9c:a7:67:f9:11:18:1c:c5:b8:26:06:e7:00:
         f6:c6:22:2b:c2:e5:48:41:65:bf:f7:ed:90:5a:65:a2:77:7e:
         15:9a:2a:54:a6:ea:09:1d:01:69:a0:b5:f8:38:ab:f3:6f:6d:
         81:15:20:09:af:ed:7d:df:c1:64:18:2b:16:f9:02:37:37:c5:
         39:1d:32:53:16:9c:0c:69:bd:20:21:87:ee:08:54:b8:68:22:
         b0:49:7f:9a:59:ea:21:62:75:4f:9e:a7:b5:e2:e7:68:35:ac:
         dd:ca:a9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:22:29 2025 by rpki-client