Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/28f67fb9-a109-3d0a-b346-3cc535a7d06d.roa
File:                     28f67fb9-a109-3d0a-b346-3cc535a7d06d.roa (raw, json)
Hash identifier:          km/rLbcnMPrTyn6uB8rBJjRmET86/Ypuin+kuRltzZo=
Subject key identifier:   2B:DB:B1:89:F1:44:A6:8C:B4:79:58:97:AA:E3:CA:83:1A:68:C0:1A
Certificate issuer:       /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial:       010D0C9F4328584E9E5AD2618FEA02D07CDAB520
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/28f67fb9-a109-3d0a-b346-3cc535a7d06d.roa
Signing time:             Sat 25 Jul 2026 18:09:14 +0000
ROA not before:           Sat 25 Jul 2026 18:09:14 +0000
ROA not after:            Fri 23 Oct 2026 18:09:14 +0000
asID:                     834
IP address blocks:        69.176.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9e:5a:d2:61:8f:ea:02:d0:7c:da:b5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
        Validity
            Not Before: Jul 25 18:09:14 2026 GMT
            Not After : Oct 23 18:09:14 2026 GMT
        Subject: CN=d5e998ec-92c5-42b4-bd94-b640715cde77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e5:25:19:75:9b:a0:e5:41:9c:f3:cb:9e:12:
                    f1:bf:82:13:66:f9:70:10:8a:c8:a0:73:48:99:ef:
                    ef:5f:cd:3a:75:2b:66:8e:15:2e:41:be:78:4f:e0:
                    82:5e:83:89:6d:88:db:92:d7:2c:ca:07:05:1d:bb:
                    ef:cf:af:a7:61:a4:f7:1c:cd:25:b6:17:4a:fb:f3:
                    fb:c9:ad:0a:52:02:29:bc:d1:29:96:68:be:ca:4d:
                    17:8c:46:b9:a8:a7:31:a9:df:ee:19:5c:5d:22:cb:
                    3a:31:5a:4c:d0:86:ad:84:7e:8c:d5:89:fe:eb:3f:
                    73:c1:de:2c:2d:25:75:2b:db:89:1e:fd:af:6e:82:
                    f0:ec:db:ab:09:66:72:ff:7c:c2:12:30:1f:4d:58:
                    2b:83:43:96:fb:f6:42:8d:b1:a5:62:f5:1d:77:ff:
                    d3:37:89:8e:f5:44:e3:d6:3f:a9:89:6a:5b:c7:c7:
                    51:a8:f6:7a:e0:f9:41:97:d9:66:21:36:78:8f:2e:
                    22:69:b3:38:d8:51:c6:4c:18:51:17:da:12:24:17:
                    a0:eb:c7:c0:7c:94:00:f3:7a:21:ae:12:46:a2:e2:
                    16:cf:69:13:02:00:42:2c:5d:95:04:34:4e:ba:a2:
                    cc:ca:31:1e:d6:ff:e4:59:46:c1:f2:fc:3c:01:8c:
                    11:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:DB:B1:89:F1:44:A6:8C:B4:79:58:97:AA:E3:CA:83:1A:68:C0:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/28f67fb9-a109-3d0a-b346-3cc535a7d06d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl

            X509v3 Authority Key Identifier:
                keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.176.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:7f:dc:47:3c:ad:dc:9d:29:79:a6:a9:ba:0d:37:ad:67:cc:
         2e:8a:08:ed:d0:81:9f:f4:2c:31:2a:3e:7a:a0:42:00:1b:ff:
         50:19:09:09:9d:16:31:a3:ca:09:fa:1d:51:3f:63:52:41:0b:
         c1:33:d7:2a:9e:5f:fa:75:11:80:e0:77:29:c6:13:64:4d:69:
         80:22:ed:25:95:42:33:76:c9:77:a1:57:9b:6f:46:2c:37:11:
         59:c4:70:08:1f:14:91:47:09:ef:7c:72:14:5a:3b:e9:b7:ef:
         84:e4:42:7d:c4:ae:dc:fe:a2:d1:a3:03:cd:04:5a:80:80:17:
         7f:37:59:5e:13:d3:4d:e0:84:60:a0:7f:e3:2c:6e:30:91:da:
         db:3b:7e:6d:76:9c:d8:df:5d:d0:4f:63:95:b8:1a:26:a3:a7:
         70:f5:dd:18:aa:55:20:ac:e3:49:cf:ec:6f:68:9b:47:ef:fd:
         18:c8:1f:0f:11:b8:2d:a1:c2:2a:c0:0f:3a:75:74:f2:25:1b:
         cc:7c:36:47:b7:a6:93:0f:05:29:75:2a:15:83:e4:f7:8d:8c:
         16:e9:b0:bd:ef:3c:7f:f4:68:cb:25:a5:9d:2c:08:6a:98:8c:
         8b:63:97:a8:e5:3f:e6:92:1b:0c:88:27:34:fa:b8:af:e4:bf:
         bc:6f:c5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:47:48 2026 by rpki-client