Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3/94cbee00-f90c-3b81-83df-909186d7a3e2.roa
File:                     94cbee00-f90c-3b81-83df-909186d7a3e2.roa (raw, json)
Hash identifier:          /aF6b6IEcs71dw2sPHoCneTx5Olw0+H7oIdsbHowbRs=
Subject key identifier:   59:E6:55:61:D8:B1:96:D0:FF:50:D7:CA:1B:50:DA:86:F6:C5:CE:36
Certificate issuer:       /CN=6b72a822-0e8f-45f9-a612-463da7164bf3
Certificate serial:       010D0C9F4328584D6EDA62919AB5D15112207000
Authority key identifier: 58:37:4A:8C:C9:BD:00:03:69:BE:CB:5C:76:25:FF:E5:C5:06:5D:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3/94cbee00-f90c-3b81-83df-909186d7a3e2.roa
Signing time:             Wed 08 Apr 2026 01:00:24 +0000
ROA not before:           Wed 08 Apr 2026 01:00:24 +0000
ROA not after:            Tue 07 Jul 2026 01:00:24 +0000
asID:                     7018
IP address blocks:        69.54.244.0/22 maxlen: 22
                          69.54.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3/6b72a822-0e8f-45f9-a612-463da7164bf3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3/6b72a822-0e8f-45f9-a612-463da7164bf3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:da:62:91:9a:b5:d1:51:12:20:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b72a822-0e8f-45f9-a612-463da7164bf3
        Validity
            Not Before: Apr  8 01:00:24 2026 GMT
            Not After : Jul  7 01:00:24 2026 GMT
        Subject: CN=f5c2c4ef-8036-43bb-a1d5-4e161de5c8e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:be:47:c8:dd:92:14:ae:c8:71:22:85:89:18:
                    7c:af:79:62:ba:df:a4:c9:4d:e8:bb:c2:45:1b:18:
                    d4:fb:48:84:b3:4a:45:cd:78:af:5d:5c:56:3d:9a:
                    7f:25:30:4e:e3:ed:bb:aa:52:b9:d2:90:46:83:b6:
                    d6:d8:bd:02:50:56:7d:43:6e:67:34:0e:ef:e1:43:
                    2a:e9:d4:c1:27:11:76:d4:23:3e:92:fe:6e:53:e9:
                    19:f1:87:f8:b5:ea:31:f1:07:c3:f8:50:2c:f1:d7:
                    99:37:6b:d8:74:10:27:90:18:21:19:68:72:2a:0b:
                    a1:a1:af:15:12:88:df:fc:84:a0:d4:93:f6:25:4c:
                    94:23:f6:39:4f:c9:29:e2:d0:48:d1:d9:5d:cd:ef:
                    96:68:e8:e9:29:d4:a3:3d:93:7b:37:9c:8a:fd:1b:
                    70:7b:de:4c:21:83:f7:ac:e6:71:7a:cd:dd:ad:33:
                    40:ab:e3:10:02:7b:e1:b4:79:b1:57:cb:1d:69:09:
                    0e:17:de:f1:25:bd:10:0d:01:cc:49:e2:64:e9:4b:
                    19:ce:eb:f1:a6:62:af:fd:94:b5:36:49:d5:a1:81:
                    cd:75:a1:93:e4:aa:2a:55:a4:ed:7a:8d:a0:79:57:
                    7b:08:8f:83:54:e3:4f:a8:b3:e1:25:b5:aa:bd:8f:
                    7e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E6:55:61:D8:B1:96:D0:FF:50:D7:CA:1B:50:DA:86:F6:C5:CE:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3/94cbee00-f90c-3b81-83df-909186d7a3e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3/6b72a822-0e8f-45f9-a612-463da7164bf3.crl

            X509v3 Authority Key Identifier:
                keyid:58:37:4A:8C:C9:BD:00:03:69:BE:CB:5C:76:25:FF:E5:C5:06:5D:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.54.244.0/22
                  69.54.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:8f:da:9b:c3:42:8d:98:56:7a:02:7c:bf:d7:34:00:80:68:
         c4:85:c0:08:fd:bc:be:b5:2a:ae:ab:e3:29:f0:fe:02:25:07:
         46:04:ac:f0:32:c7:9c:cf:9e:44:62:bc:a2:b2:8f:88:06:28:
         eb:54:e7:18:c7:53:7c:b1:b7:a9:5e:37:1e:8b:f0:4f:7d:1e:
         aa:ea:06:ce:a6:a7:ec:5b:1b:fa:1f:e8:56:04:80:5a:d0:d2:
         d6:fe:26:50:17:7d:ba:1b:0b:0d:0a:45:3a:0d:38:1f:c3:90:
         44:0b:1e:84:21:c2:c5:d3:72:aa:7e:2a:f2:0e:ff:76:45:10:
         6a:76:42:ed:ff:52:ec:d7:a9:a1:50:49:9f:b3:7a:b9:79:4d:
         94:e9:a9:c4:c3:3e:51:4b:ae:0f:d9:59:f6:69:7c:10:37:ca:
         e1:f0:02:eb:b0:98:aa:0c:54:a5:bc:17:54:56:30:8e:78:81:
         b1:0d:27:84:20:f6:06:e1:57:4c:ae:42:44:09:85:f0:b5:95:
         15:53:32:63:3a:f0:e9:98:31:71:e0:b4:93:ea:d6:18:36:a5:
         2a:bc:88:1d:00:33:f5:3f:83:76:66:f3:89:91:bf:a1:d3:2b:
         44:6a:0c:7d:01:12:be:2c:84:a3:bb:34:e4:04:54:ae:92:a7:
         e0:fb:e2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:21:25 2026 by rpki-client