Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/1f78bdeb-5a10-31cb-804c-7afa2ec0fc0f.roa
File:                     1f78bdeb-5a10-31cb-804c-7afa2ec0fc0f.roa (raw, json)
Hash identifier:          LZGJ88k8WIhB7EGeBYCnLoAwEe9lU4LjZxqK6OHYI4Y=
Subject key identifier:   24:47:4F:48:07:AA:61:47:9F:6B:63:ED:BB:DB:70:59:87:B7:15:1A
Certificate issuer:       /CN=e2213668-8973-4471-a19a-d7e8374ada63
Certificate serial:       010D0C9F4328584D59EA6CE02A1007A11975C080
Authority key identifier: C4:C2:67:04:36:13:3B:67:5F:A5:F5:02:A2:60:55:11:8F:84:E7:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/1f78bdeb-5a10-31cb-804c-7afa2ec0fc0f.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     14618
IP address blocks:        69.64.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/e2213668-8973-4471-a19a-d7e8374ada63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/e2213668-8973-4471-a19a-d7e8374ada63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:6c:e0:2a:10:07:a1:19:75:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2213668-8973-4471-a19a-d7e8374ada63
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=bb623fc0-a2fc-4637-8c00-19a5ee4f2b7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ed:37:02:04:db:f2:48:66:cb:b7:fa:e4:ba:
                    84:0c:04:a7:1a:f4:e7:3a:ca:c9:dd:8e:e0:b0:9c:
                    3a:85:7d:04:71:e9:a2:89:2c:b1:4e:33:60:00:69:
                    25:fd:c0:3f:bf:cc:b6:ff:dc:44:15:04:a0:6f:a8:
                    2f:c2:0b:4f:d1:36:2e:09:8e:51:14:51:a9:9b:44:
                    35:f7:13:9a:f5:c3:7b:89:07:ec:ee:22:cb:26:ba:
                    97:8c:0a:25:3d:65:bf:91:f8:97:4f:29:b2:02:73:
                    ba:34:70:4e:ed:8e:55:ad:42:96:7f:fb:bd:ae:59:
                    86:8c:17:a1:c9:93:5d:5b:f3:f7:2d:65:ca:60:76:
                    26:12:b9:75:da:98:c9:e8:e4:2c:90:06:b1:ac:aa:
                    95:3a:c2:61:1f:b2:32:0f:b8:1f:4c:2e:bf:15:ce:
                    9e:36:a0:82:bb:35:e4:dc:1d:16:8e:de:93:89:db:
                    a3:c2:cb:69:8a:0f:69:09:dc:f9:6f:8c:02:00:b1:
                    5e:45:11:77:a7:d3:04:dc:90:e2:c7:af:47:0f:42:
                    6b:cf:17:9f:90:ce:8f:17:6b:44:dc:cd:6e:dc:47:
                    3e:0f:0a:3b:45:9b:fd:f9:e4:dc:6c:75:0f:1e:22:
                    34:4f:99:2b:49:dd:fd:47:0d:53:40:c5:9a:b4:14:
                    57:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:47:4F:48:07:AA:61:47:9F:6B:63:ED:BB:DB:70:59:87:B7:15:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/1f78bdeb-5a10-31cb-804c-7afa2ec0fc0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/e2213668-8973-4471-a19a-d7e8374ada63.crl

            X509v3 Authority Key Identifier:
                keyid:C4:C2:67:04:36:13:3B:67:5F:A5:F5:02:A2:60:55:11:8F:84:E7:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.64.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:69:8f:fc:2f:bc:ef:c8:d9:29:31:1c:34:68:34:b6:1b:54:
         f3:f8:db:95:01:ba:bd:f5:9f:06:f7:e7:c7:8b:03:4a:1a:12:
         cb:f3:e7:49:db:e2:d1:c9:8f:60:73:8d:cf:a7:d1:8a:57:bd:
         e1:dc:3f:b8:17:72:bb:51:c1:33:6b:f4:e7:fe:b7:98:0d:f0:
         af:ba:4e:21:36:1f:3d:b3:63:fc:bc:6c:7f:ee:e4:c3:5c:a2:
         da:9a:23:27:63:3e:2b:3c:10:c8:15:54:99:bb:07:93:57:e3:
         5b:a2:7c:08:59:54:61:9b:b8:01:78:2e:2f:66:28:3c:42:98:
         82:73:52:15:53:34:74:b5:4f:56:f9:83:93:66:4d:86:c9:dc:
         76:ed:02:75:94:15:48:40:9f:4d:42:4b:6c:3f:3b:7c:22:cd:
         61:80:c4:8b:cd:d5:9b:90:84:6d:6d:b2:d5:8b:c2:9e:82:7d:
         6a:1e:ad:9b:90:ec:af:31:67:14:04:c2:5f:d8:cd:d8:bf:a3:
         29:aa:7c:d4:f2:74:bb:2f:ae:49:f8:e0:58:9a:0c:e8:58:1f:
         c1:83:cd:ad:fc:38:df:6c:ef:46:49:0e:32:51:0d:7d:89:8a:
         ca:55:23:bc:d8:46:10:a3:3b:70:15:e3:b6:61:51:c2:8d:73:
         5f:e2:58:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:36:54 2026 by rpki-client