Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a6a0d9b-43c3-4b62-be66-8371865622a2/e77a01c2-9d6e-3189-8da5-e84f8d299bd9.roa
File:                     e77a01c2-9d6e-3189-8da5-e84f8d299bd9.roa (raw, json)
Hash identifier:          dRInKrjzjNCB4Gl8ItdiUzwOK/xP7jb4LmlHGN0lkVI=
Subject key identifier:   8C:A5:02:93:69:1D:1A:A5:A1:44:73:8C:1C:1C:F2:B7:88:78:2D:F6
Certificate issuer:       /CN=5a6a0d9b-43c3-4b62-be66-8371865622a2
Certificate serial:       010D0C9F4328584D7F9A83F16902F1E1B5B2A200
Authority key identifier: 76:0B:4A:3F:E4:1A:8F:F1:22:77:CD:CC:39:1E:0E:7B:5F:AA:F1:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a6a0d9b-43c3-4b62-be66-8371865622a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a6a0d9b-43c3-4b62-be66-8371865622a2/e77a01c2-9d6e-3189-8da5-e84f8d299bd9.roa
Signing time:             Tue 14 Apr 2026 01:00:24 +0000
ROA not before:           Tue 14 Apr 2026 01:00:24 +0000
ROA not after:            Mon 13 Jul 2026 01:00:24 +0000
asID:                     46410
IP address blocks:        206.168.69.0/24 maxlen: 24
                          209.71.0.0/19 maxlen: 24
                          2607:3940::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a6a0d9b-43c3-4b62-be66-8371865622a2/5a6a0d9b-43c3-4b62-be66-8371865622a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a6a0d9b-43c3-4b62-be66-8371865622a2/5a6a0d9b-43c3-4b62-be66-8371865622a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a6a0d9b-43c3-4b62-be66-8371865622a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7f:9a:83:f1:69:02:f1:e1:b5:b2:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a6a0d9b-43c3-4b62-be66-8371865622a2
        Validity
            Not Before: Apr 14 01:00:24 2026 GMT
            Not After : Jul 13 01:00:24 2026 GMT
        Subject: CN=f90c0b7a-0d0d-4665-8f16-b15bd90c7fac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:54:1b:41:fd:5d:95:ef:e8:fe:68:5c:6c:19:
                    ad:be:d7:d5:f3:8e:27:66:78:63:ef:54:0e:20:5d:
                    a1:b2:f1:98:e7:e6:67:bd:1b:26:9d:84:35:f9:ed:
                    3d:c6:6c:06:68:23:cf:62:0a:82:df:df:b1:14:1d:
                    2a:f4:dc:1d:b8:35:70:2e:73:ce:58:44:51:d1:2e:
                    66:21:b2:20:89:2e:62:bd:92:ca:95:76:c1:99:42:
                    35:c7:01:91:db:da:83:f3:13:a3:f4:c0:70:a1:ce:
                    e8:27:9b:0e:5e:8f:0d:4a:9c:f1:ba:55:a6:70:0e:
                    b6:6e:db:60:1d:9e:0c:a2:fe:c8:1e:d0:5e:f6:6b:
                    51:3c:6c:a1:ce:21:72:42:cc:2b:91:8f:e6:16:99:
                    ee:b7:5b:f2:80:e6:e8:65:d9:35:ec:b8:45:f8:3e:
                    fe:41:2e:04:fb:e4:e5:7c:cc:7e:9c:80:88:20:c6:
                    00:6c:f0:33:22:03:91:0b:cd:36:30:e1:b0:3e:ef:
                    e3:30:ef:f9:e9:53:b0:fd:26:3d:c4:89:05:80:cb:
                    74:1f:58:34:fe:da:31:cf:6e:ad:dd:17:cb:6d:fd:
                    90:ce:14:9c:a8:99:c8:67:b8:51:90:2c:38:9a:e8:
                    6b:a7:af:91:dd:d5:4f:37:0e:b5:a0:b4:60:00:ce:
                    e2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A5:02:93:69:1D:1A:A5:A1:44:73:8C:1C:1C:F2:B7:88:78:2D:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a6a0d9b-43c3-4b62-be66-8371865622a2/e77a01c2-9d6e-3189-8da5-e84f8d299bd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a6a0d9b-43c3-4b62-be66-8371865622a2/5a6a0d9b-43c3-4b62-be66-8371865622a2.crl

            X509v3 Authority Key Identifier:
                keyid:76:0B:4A:3F:E4:1A:8F:F1:22:77:CD:CC:39:1E:0E:7B:5F:AA:F1:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a6a0d9b-43c3-4b62-be66-8371865622a2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.69.0/24
                  209.71.0.0/19
                IPv6:
                  2607:3940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:45:56:43:e8:80:b0:b9:0f:87:4c:57:52:e2:e0:18:b4:0b:
         37:08:ef:75:f5:48:fd:9f:b3:47:b0:96:60:46:c9:7d:64:3e:
         fa:32:7f:a5:71:88:28:05:bf:0b:0f:4a:de:c3:fd:bd:a5:7e:
         04:55:d7:7e:ca:71:14:1f:74:7c:05:18:cf:12:58:c3:5f:e9:
         df:b2:59:44:a7:c7:e1:27:c5:f8:a5:63:f9:be:fe:3f:1a:7c:
         47:5f:53:19:d9:dc:76:36:da:4e:d2:77:41:81:00:e1:1e:4e:
         23:a7:9b:9c:be:71:71:6a:90:18:5d:12:df:c1:21:3a:c1:db:
         df:f1:86:10:06:16:fa:46:38:c8:05:bc:6b:0a:2d:3b:45:18:
         5e:b9:ed:83:aa:12:e3:e6:e2:63:96:e5:d0:ee:36:5a:d1:bf:
         5c:4c:f8:34:79:fb:7e:ba:48:2f:71:cf:d5:94:44:c0:8d:63:
         25:e2:b8:4c:a1:73:a8:6c:6b:cb:4e:63:93:6b:1d:d1:8a:d9:
         40:11:a1:af:21:a8:0a:c1:6b:4f:55:3b:38:35:26:6b:43:ca:
         f4:61:a6:15:fa:93:3c:9d:7f:0e:b3:05:93:c5:4c:ff:d5:26:
         82:c3:89:fe:33:3f:58:87:ad:a1:25:59:4b:61:f0:8e:26:bf:
         49:e9:89:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:14:01 2026 by rpki-client