Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/6b76d2e9-3d6d-3d57-b88c-489d023c2129.roa
File:                     6b76d2e9-3d6d-3d57-b88c-489d023c2129.roa (raw, json)
Hash identifier:          68lTeX9+Ahe7KtjzloAbg9kqFS5y2lVvspsPdrecoFQ=
Subject key identifier:   4D:83:0E:ED:FB:08:1A:1E:4A:F6:E3:C0:3D:17:F5:9E:76:9C:D3:16
Certificate issuer:       /CN=5294026e-22fb-4d13-b040-a0d74302e57e
Certificate serial:       010D0C9F4328584BA1A7860BA94DA85180481A40
Authority key identifier: 01:9A:82:A4:B4:AB:DC:DA:9E:35:9F:5A:72:BB:1A:93:59:97:7B:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/6b76d2e9-3d6d-3d57-b88c-489d023c2129.roa
Signing time:             Fri 24 Oct 2025 20:10:23 +0000
ROA not before:           Fri 24 Oct 2025 20:10:23 +0000
ROA not after:            Thu 22 Jan 2026 21:10:23 +0000
asID:                     10361
IP address blocks:        69.189.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/5294026e-22fb-4d13-b040-a0d74302e57e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/5294026e-22fb-4d13-b040-a0d74302e57e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a1:a7:86:0b:a9:4d:a8:51:80:48:1a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5294026e-22fb-4d13-b040-a0d74302e57e
        Validity
            Not Before: Oct 24 20:10:23 2025 GMT
            Not After : Jan 22 21:10:23 2026 GMT
        Subject: CN=625e01f9-1f43-47d4-829a-24c39c05b91a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:87:18:bd:b5:ee:62:13:1b:35:d7:cc:75:bf:
                    f5:54:be:8e:7d:a3:31:42:94:12:cc:c1:f7:0f:e6:
                    13:93:3d:55:fa:88:15:0c:e7:d4:63:9e:bb:d1:a7:
                    9b:95:0f:3c:dd:58:97:3b:32:15:2b:0e:d0:c1:86:
                    35:52:52:3b:94:7c:e0:c4:f1:ce:ce:ac:1a:56:6f:
                    52:66:c6:9a:3a:7e:c0:1f:e9:0d:0d:80:3d:bf:63:
                    25:71:26:f5:c2:69:28:e5:89:01:73:7f:80:7c:84:
                    39:43:05:b7:84:ec:67:56:03:e2:a9:4d:83:66:12:
                    fb:b1:87:32:85:50:57:98:1b:1b:97:cf:2e:d7:4c:
                    47:c2:b9:01:7f:6d:a2:91:59:ac:34:de:c8:1b:ac:
                    b0:f7:56:ed:0c:69:87:5f:fb:0d:5f:1c:86:05:db:
                    bd:20:72:f9:f3:1d:22:db:01:61:2f:2d:e4:08:55:
                    aa:80:6f:75:e3:30:3b:72:a3:5e:66:38:af:e3:02:
                    cd:42:70:67:46:f2:7e:9c:b2:12:59:92:16:09:05:
                    da:c8:37:73:54:cf:28:85:88:0c:df:5c:86:b9:1c:
                    5a:22:c4:ce:8d:fb:37:9d:67:4c:48:b4:a1:e1:83:
                    45:e1:a4:3f:af:8a:cd:b6:9f:4a:b8:28:a7:60:7b:
                    5f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:83:0E:ED:FB:08:1A:1E:4A:F6:E3:C0:3D:17:F5:9E:76:9C:D3:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/6b76d2e9-3d6d-3d57-b88c-489d023c2129.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/5294026e-22fb-4d13-b040-a0d74302e57e.crl

            X509v3 Authority Key Identifier:
                keyid:01:9A:82:A4:B4:AB:DC:DA:9E:35:9F:5A:72:BB:1A:93:59:97:7B:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.189.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:9b:70:9f:56:3e:f4:fb:00:14:2d:0d:96:0d:ab:cf:5d:8f:
         10:7f:8e:73:3f:84:86:79:dd:2c:3d:80:76:16:84:f0:dd:b0:
         0e:ee:87:36:1d:da:fe:5d:68:96:e7:50:a9:e0:b0:bc:a1:fe:
         d8:79:df:52:29:bd:dd:21:ad:7f:f0:14:d1:43:f9:fd:5d:7f:
         98:8a:b8:4a:a3:16:23:65:6c:8e:f4:fe:59:c1:95:fc:19:b2:
         0a:d1:c6:59:f7:8e:0a:39:71:f7:2b:f4:70:a4:a5:83:8e:89:
         4b:0b:af:8b:b6:73:fa:68:00:15:a2:51:e0:29:34:be:3c:21:
         df:16:c0:50:6d:70:a5:ce:92:0c:95:86:81:e5:39:5f:00:97:
         92:5f:97:6a:76:b4:59:6b:4b:aa:2b:6f:a7:11:e9:a9:a6:d7:
         f6:8a:08:ea:e9:42:77:1a:6c:2c:23:4c:14:5a:32:4b:c9:e7:
         5c:53:96:4c:ba:1e:cf:a6:fa:88:e7:01:7b:8f:63:c7:a8:49:
         0d:24:ee:02:88:40:bf:69:76:7b:3e:e6:d3:5e:6f:0d:33:b0:
         51:bc:2d:7c:fb:6b:a7:65:c0:cd:5d:10:70:df:8d:1a:2f:42:
         bf:11:f4:d6:9b:af:e8:a3:21:df:36:46:f1:4e:1d:e5:6f:3d:
         9c:df:bf:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:19:46 2025 by rpki-client