Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/3ac777d8-9723-3223-9b37-799691f764af.roa
File:                     3ac777d8-9723-3223-9b37-799691f764af.roa (raw, json)
Hash identifier:          tHqhE7scwb/PhFuBW8RjWdV+tMQTi6sy99YUf/Vx1wg=
Subject key identifier:   6A:F3:7C:89:DB:56:43:F9:D1:C5:5C:4B:61:7B:2E:99:AC:CC:3C:2B
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F4328584D651518C378E8BA5236B34400
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/3ac777d8-9723-3223-9b37-799691f764af.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     22393
IP address blocks:        71.7.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:18:c3:78:e8:ba:52:36:b3:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=52096e65-157e-4794-aa9f-63601ecc8329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:05:81:0e:44:dd:f1:fe:6a:04:f7:d7:23:b2:
                    5a:03:de:44:ec:b2:a4:1a:69:a1:b8:e7:73:ce:16:
                    6f:35:2c:5c:ee:59:bc:b3:c1:ac:17:c3:98:b0:6b:
                    06:20:b5:55:80:fc:0c:c8:2f:35:8a:dd:df:27:e9:
                    b9:c6:f2:15:76:90:6a:c6:f8:d5:79:bf:7a:b7:ec:
                    86:13:3b:c9:3b:4c:8b:8e:a0:f0:da:fa:a0:b1:4b:
                    37:a4:39:cb:15:23:35:81:54:7d:2e:e2:36:4f:cf:
                    f6:52:87:c2:39:90:ca:92:c9:28:01:85:16:86:e0:
                    33:d2:17:c2:43:24:15:84:e0:56:0a:91:59:5f:66:
                    0b:38:64:da:99:58:96:67:d6:8a:78:9f:eb:cf:d0:
                    08:23:24:05:9f:ce:c5:a8:51:27:f6:29:14:b3:da:
                    6c:62:fd:43:a9:e1:b5:1f:12:c8:67:f6:2a:af:ae:
                    b4:f4:b8:37:46:6e:11:61:60:5a:b1:2a:3a:01:5a:
                    66:c0:66:86:00:af:df:53:72:f8:87:c7:a1:9a:30:
                    b3:dc:68:89:c4:e7:65:34:20:12:0e:d7:3c:56:f2:
                    0d:2f:99:06:92:39:49:e9:c8:af:5c:9d:81:7d:9d:
                    36:bf:af:9f:7c:34:a6:bf:7e:ca:f0:6d:52:60:75:
                    0b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F3:7C:89:DB:56:43:F9:D1:C5:5C:4B:61:7B:2E:99:AC:CC:3C:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/3ac777d8-9723-3223-9b37-799691f764af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.7.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:dc:be:22:e5:76:55:9c:2c:77:2e:d2:bc:16:12:be:f4:86:
         6e:de:08:6a:5a:b4:e8:1a:7b:df:ee:f0:3f:32:30:e4:c6:8c:
         c2:b3:45:d5:41:69:0f:36:0e:4f:11:ce:4a:c0:98:02:64:48:
         44:99:bf:94:53:92:88:02:02:e2:fd:52:ae:ff:21:d7:b5:b2:
         e8:94:b7:88:41:6a:52:d6:5d:99:8c:32:9b:2e:5e:aa:84:dc:
         59:5e:48:ea:8b:0a:3d:1c:16:2f:36:c5:1c:76:22:ad:25:a6:
         27:c4:01:5d:2e:e9:c2:6c:08:ed:d2:96:86:39:d0:cb:cd:4a:
         2b:35:a1:0b:03:9e:ec:bf:e3:58:a0:4b:0c:d2:33:65:bf:b3:
         a4:43:b8:50:d3:7f:c6:32:86:a3:b4:f1:f6:38:7e:3d:21:84:
         ad:e2:b3:68:77:13:8a:58:d1:d1:3f:5e:be:d8:6c:10:c8:60:
         c7:56:b2:f4:3b:09:cb:31:06:fb:1b:6a:b8:a1:ab:1b:98:82:
         17:14:3d:48:42:e8:5b:14:53:56:98:b7:a9:e4:4d:c1:a6:c3:
         10:9b:7d:6a:36:31:d4:b3:47:3f:f2:fc:b1:2e:fd:54:4a:8c:
         38:93:c0:e3:77:bc:56:70:6d:58:a3:f9:5e:aa:e3:00:68:08:
         ff:7c:f8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:06:21 2026 by rpki-client