Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/a91da2ff-48f4-3dfb-8de7-8a14d706856b.roa
File:                     a91da2ff-48f4-3dfb-8de7-8a14d706856b.roa (raw, json)
Hash identifier:          OjRRrz++4ry9xyaFOI+GGWoGbDQJa7+FO0m40y22uxY=
Subject key identifier:   8E:3B:6E:D6:46:0F:77:6E:D9:11:CC:DE:41:2A:0D:13:8A:00:C6:B8
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F4328584D651518AA01E0D172AC81C480
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/a91da2ff-48f4-3dfb-8de7-8a14d706856b.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     11260
IP address blocks:        24.142.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:18:aa:01:e0:d1:72:ac:81:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=49fbc790-5d62-4a81-8ab1-9c116550768c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:dd:b4:18:35:33:25:0e:0b:37:ef:89:13:56:
                    f9:69:9e:eb:23:15:b0:fb:1a:12:0b:bb:cb:cc:6f:
                    74:5d:f4:f3:f8:26:70:85:42:3b:02:0e:0c:af:09:
                    c8:64:c1:d2:e4:02:c8:95:f4:49:cf:62:4d:47:4a:
                    5b:6c:41:a4:0c:4f:ce:f2:a2:45:9b:b9:b8:db:cb:
                    82:ae:2d:55:93:91:a4:13:43:b1:64:c4:57:19:e2:
                    a8:d3:09:2d:3d:f2:cc:9a:f3:e1:fa:f5:c4:5d:65:
                    94:86:9d:a9:d3:60:78:b1:65:f7:7d:5b:8e:99:5b:
                    d9:ab:d3:56:c7:85:d1:09:de:16:14:1e:78:61:0e:
                    5e:5e:10:ae:91:9a:26:37:58:70:0a:fa:05:33:48:
                    ba:63:de:8a:72:62:4b:49:47:6c:6c:4e:61:86:d0:
                    52:79:45:9e:db:d3:79:3c:8c:3e:f7:1b:ce:a9:87:
                    b6:81:8e:f0:1a:ae:e1:0c:44:1e:c3:7b:17:c3:07:
                    59:e4:11:e8:83:6e:1b:b4:cc:13:df:b6:13:d7:9e:
                    26:4b:2e:1e:d4:73:43:ef:35:b1:90:e3:a0:98:0e:
                    66:5f:88:31:42:c8:15:27:56:4b:00:cb:f4:aa:1f:
                    fb:e1:dd:f6:0d:49:64:30:bd:ef:37:de:30:d2:be:
                    9b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:3B:6E:D6:46:0F:77:6E:D9:11:CC:DE:41:2A:0D:13:8A:00:C6:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/a91da2ff-48f4-3dfb-8de7-8a14d706856b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.142.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:48:1c:a0:e0:84:9b:8e:46:53:b9:39:41:86:47:70:ca:c6:
         05:88:06:fd:c8:30:13:fe:85:24:ff:32:2e:59:c9:10:45:b9:
         8b:b3:0f:00:9c:5d:51:ad:ce:64:19:a5:cc:68:dd:62:6f:6a:
         81:cf:04:47:b7:89:0a:8e:4c:1c:d6:36:19:37:ff:da:b6:bd:
         42:42:28:00:f0:d8:d3:6b:4f:b4:96:ba:78:a9:34:93:60:75:
         c3:9f:53:6b:19:fc:2d:de:1c:6f:04:5f:6b:40:e5:a3:66:d3:
         9c:58:8a:22:3d:d8:bb:f5:e7:8e:b9:69:50:9b:02:4a:24:d3:
         0e:43:44:71:f0:21:70:ca:2d:6f:25:c5:17:cf:af:b8:e4:4c:
         f9:a6:fc:58:27:47:6f:0d:cd:15:43:18:14:ae:7d:86:da:f1:
         51:c1:0f:c3:06:6f:d3:ce:b2:81:1f:96:b7:7c:8d:38:3c:19:
         f2:39:7b:95:4b:b3:98:d8:48:db:d6:b1:b8:8b:8a:da:c8:45:
         34:d4:4c:08:5b:84:18:45:f7:13:6c:6b:26:aa:2e:3d:58:2c:
         6e:2f:7b:f7:25:6e:1f:55:d7:48:45:91:fb:93:c0:41:38:47:
         05:1f:78:97:13:b1:a4:7a:59:ab:03:ed:62:8e:61:90:b3:e0:
         15:2f:ed:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:36:47 2026 by rpki-client