Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6b85a11c-3c50-3a3d-9279-e944e70b419e.roa
File:                     6b85a11c-3c50-3a3d-9279-e944e70b419e.roa (raw, json)
Hash identifier:          qJln56O/3jRGEGKroRUXgaVUiJL7aV5LO5od8IbxX9M=
Subject key identifier:   0A:98:7B:CE:AF:51:FD:E9:55:80:D9:65:91:19:BE:02:A4:92:D7:53
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584E9A7FE7684B1B48079CE223B0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6b85a11c-3c50-3a3d-9279-e944e70b419e.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     22516
IP address blocks:        69.58.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:e7:68:4b:1b:48:07:9c:e2:23:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=3954faee-9495-4119-8e91-24257bee862b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:28:35:04:05:62:ce:25:98:84:f9:93:a0:bf:
                    89:b6:0a:c9:fe:f7:19:4e:42:bb:68:1c:83:b5:eb:
                    61:75:5b:ec:2d:af:df:32:05:12:2b:bf:17:0e:a2:
                    17:6d:75:a2:3d:44:62:eb:99:f8:d3:0e:c2:3e:bb:
                    b5:a9:b4:ba:91:f4:86:85:12:d5:7f:89:59:9d:d3:
                    35:5e:37:13:b5:8d:5e:84:1e:6f:3c:26:5d:10:02:
                    65:bb:44:37:d6:88:89:7b:28:af:f4:2a:cd:a5:15:
                    02:7b:d0:b3:bf:67:9d:16:16:bb:08:dd:fb:e5:37:
                    47:5f:78:8d:72:72:5b:9f:08:aa:ac:7b:03:85:a7:
                    70:50:f2:db:d4:af:e3:e1:18:dc:fd:f5:c8:9d:a7:
                    af:f7:ac:4e:3a:c5:3c:2c:b5:ff:cb:18:0d:06:94:
                    0b:73:2b:76:be:3d:62:e2:8d:3e:df:0b:a9:b3:fe:
                    00:ce:33:6b:65:ce:95:5f:ad:ea:fc:e7:07:61:f1:
                    bf:e5:77:c7:fd:f0:81:84:1c:5a:59:98:68:ff:17:
                    21:ef:a3:dd:e8:7e:6f:c6:bf:c7:0e:11:32:ec:32:
                    8b:5e:85:dd:cd:7e:88:ae:3e:ac:f7:1e:b4:de:f7:
                    65:fe:dd:c2:bc:69:51:6d:4b:a8:56:d2:68:a0:62:
                    02:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:98:7B:CE:AF:51:FD:E9:55:80:D9:65:91:19:BE:02:A4:92:D7:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6b85a11c-3c50-3a3d-9279-e944e70b419e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:74:cf:c2:c7:93:2a:db:aa:92:97:35:a0:7a:d4:fb:66:1d:
         f0:6f:09:33:02:25:86:6e:89:7c:a2:b2:34:6a:c3:00:46:3f:
         95:01:0b:47:4a:d9:1a:47:82:87:3d:92:48:b2:b4:6d:cd:35:
         43:a1:c5:0e:99:d5:db:9a:a5:a4:e3:e4:54:39:66:f2:85:6b:
         90:d9:10:2b:22:c9:04:70:23:00:12:87:7d:6c:a3:f1:b0:f9:
         fc:00:1f:9a:b9:2d:98:69:e6:d9:59:85:43:15:32:de:22:59:
         0d:da:b2:f1:06:41:fa:41:ad:d6:85:13:40:e9:fd:f0:ab:85:
         15:a3:47:03:38:40:f5:b4:d4:eb:80:63:ac:58:90:49:bc:9c:
         f3:c5:e9:f8:cf:72:c0:79:9e:97:75:72:1f:b3:77:ae:b6:18:
         c0:a5:9b:d2:73:77:34:63:1e:6a:71:03:09:dd:a3:8d:78:5f:
         1e:38:43:c0:50:dc:63:e5:14:da:f7:a3:ef:7c:96:5c:5d:b4:
         52:86:22:97:d7:e3:43:5d:3f:f1:a4:bb:8c:ae:de:ad:fe:7a:
         a3:e5:16:66:76:5e:6d:f2:49:e7:cc:d8:ba:17:28:aa:60:0b:
         36:a8:ff:79:19:83:b4:5f:fd:27:98:9c:42:e2:95:6c:88:e9:
         6b:39:9b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:44:30 2026 by rpki-client