Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/069fc880-e6d9-31b0-bf9a-8ef2432d6d03.roa
File:                     069fc880-e6d9-31b0-bf9a-8ef2432d6d03.roa (raw, json)
Hash identifier:          nY0ycUzHbM6y30PtdEujC9pGPeGCuHE2RWjTEi2Yu4o=
Subject key identifier:   C7:6F:7E:44:36:43:B3:B8:18:CA:81:0C:B9:DC:5D:B7:75:D9:FD:BA
Certificate issuer:       /CN=7dd560d4-77c9-4ab6-b22b-9771aa3b67c2
Certificate serial:       010D0C9F4328584DF4DB5F268872E246E7D4A180
Authority key identifier: 68:7D:B7:23:4A:D5:EA:C0:22:CF:AA:80:D5:4C:DE:8E:F5:B1:1C:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/069fc880-e6d9-31b0-bf9a-8ef2432d6d03.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     7132
IP address blocks:        204.128.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:5f:26:88:72:e2:46:e7:d4:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dd560d4-77c9-4ab6-b22b-9771aa3b67c2
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=bea3d56d-4f6d-4d9e-bb61-3f0fddb5ab13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a9:e6:90:eb:f5:45:3e:47:65:f2:d1:06:69:
                    dc:55:73:29:f9:e3:16:dd:7c:c8:27:b4:f8:81:46:
                    19:b7:d8:b2:ef:8a:c1:2d:3a:39:c2:49:c6:d8:61:
                    3b:42:ac:89:74:3e:9f:70:e2:77:05:9a:b3:47:56:
                    25:b7:5b:ca:ba:9c:45:3f:e8:01:5a:bf:76:c1:f9:
                    94:20:6a:81:c6:e4:dc:78:97:c3:87:49:9c:f5:6e:
                    d3:a0:03:4d:dd:eb:51:fc:f9:7b:79:a8:58:e8:f8:
                    ba:b9:e8:bf:5a:f9:af:51:10:b8:dc:ff:f2:90:d2:
                    37:d4:1e:0c:ec:9a:14:63:c2:bb:62:0b:0b:99:d5:
                    f7:fa:db:20:47:c4:e7:cc:ea:bc:67:d6:78:23:ad:
                    84:61:27:9a:8b:d1:dc:81:22:9f:30:dc:b7:2d:22:
                    8d:4e:1e:20:96:44:29:29:db:67:72:d6:eb:e7:d8:
                    26:9f:c8:e9:28:7f:d1:28:de:21:cb:c7:6b:71:3f:
                    40:95:ac:d1:b8:0b:9a:e9:7b:7d:f8:b8:b5:6c:d6:
                    f3:38:d4:07:8e:4b:ec:83:2e:ff:ae:fb:42:a7:14:
                    0d:9d:35:78:3b:c2:c7:4f:85:05:77:01:e8:5b:85:
                    ee:c5:34:76:0f:36:80:b1:d0:f9:74:51:db:e9:cf:
                    72:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:6F:7E:44:36:43:B3:B8:18:CA:81:0C:B9:DC:5D:B7:75:D9:FD:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/069fc880-e6d9-31b0-bf9a-8ef2432d6d03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.crl

            X509v3 Authority Key Identifier:
                keyid:68:7D:B7:23:4A:D5:EA:C0:22:CF:AA:80:D5:4C:DE:8E:F5:B1:1C:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.128.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:b1:f5:a3:7f:3b:fa:69:b7:28:9f:ee:9d:f8:5f:97:0f:eb:
         7b:48:b7:f2:0f:0b:44:cb:dd:12:c5:51:9b:1b:af:bf:25:f1:
         cd:0c:0d:ad:9c:01:60:ef:30:a8:1d:7b:12:b2:c0:73:66:5a:
         ff:d2:09:9c:7a:2a:b2:78:a1:d0:f9:c8:9b:ce:ca:f6:64:87:
         5b:e7:8e:f7:e5:6a:22:70:38:07:34:12:f6:71:fd:b9:1a:42:
         a8:32:d7:53:1d:e2:c8:21:2d:a1:d4:99:cb:a9:29:23:82:9b:
         a0:69:29:cb:26:1d:f1:92:d2:8c:30:62:db:b7:84:d0:e3:94:
         e5:f7:75:3d:ee:e4:87:3d:7c:9a:af:4b:6d:af:30:0a:31:e6:
         2c:b6:26:cb:6c:76:fc:66:cd:26:b4:7a:46:95:da:4b:be:06:
         38:cf:2a:2d:c4:89:e2:f2:8e:9b:cc:c3:a3:8e:7d:ba:63:b2:
         2d:1e:dc:20:a0:8f:39:78:5d:a7:14:d8:de:1f:2d:11:a2:28:
         9c:6e:64:2a:90:61:1f:83:7f:bc:5d:f3:33:57:cb:e1:eb:80:
         3c:43:75:f5:2c:d0:b2:21:02:2c:ae:f2:12:62:4e:f2:9c:42:
         41:61:25:24:7a:bf:bb:47:0c:f5:a2:d0:5f:6f:33:d3:5b:ce:
         45:ef:b6:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:47:56 2026 by rpki-client