Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/9e5ae962-28ac-33d5-83b1-38894ac0a0d4.roa
File:                     9e5ae962-28ac-33d5-83b1-38894ac0a0d4.roa (raw, json)
Hash identifier:          BuualR3E3mcBOZ4YnObM0Ld86XSM89/JntpELMoafFw=
Subject key identifier:   DD:39:9F:B3:56:DA:6D:8A:A5:17:43:7E:D4:A2:2B:D2:6A:84:6E:85
Certificate issuer:       /CN=b8624cbb-ba19-47a6-b5ac-d0747149714c
Certificate serial:       010D0C9F4328584D65151A7A921EDBB8C22FF9C0
Authority key identifier: 71:6A:5A:21:EE:66:2B:9C:10:67:F0:E2:38:07:78:CB:12:8C:8C:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/9e5ae962-28ac-33d5-83b1-38894ac0a0d4.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     11269
IP address blocks:        69.17.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:1a:7a:92:1e:db:b8:c2:2f:f9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8624cbb-ba19-47a6-b5ac-d0747149714c
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=cfb5a692-ee53-499e-9bd2-856bd24537d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:37:7f:bf:32:1e:48:b9:67:4d:02:04:ac:61:
                    77:b7:22:08:cd:68:3d:47:aa:7d:3a:89:35:d4:b4:
                    ba:fa:79:b1:19:77:4b:e3:2d:3b:83:3f:f7:37:48:
                    79:81:25:16:aa:a4:f8:4d:d0:83:cf:2c:bc:7e:76:
                    d9:f1:28:d7:b0:73:45:83:43:ad:a7:ac:5d:76:7a:
                    e0:1e:58:d7:3a:09:cf:43:d5:10:96:85:23:e4:7c:
                    4f:60:99:ad:46:df:5a:b5:4c:67:bb:1e:46:4e:a2:
                    88:8e:20:3d:56:53:da:a3:1c:5b:b3:e2:67:41:d2:
                    71:ac:a0:15:da:44:97:53:4b:b2:54:68:60:41:78:
                    69:74:a5:fd:f5:75:56:c0:5a:89:e9:36:aa:cf:f0:
                    7a:55:1e:18:7f:8a:3d:e2:d5:52:ef:38:46:87:13:
                    07:87:a4:aa:9e:95:75:b1:29:17:d0:61:09:94:17:
                    66:4d:31:6d:d0:11:52:f8:cf:5e:64:8c:58:7e:7c:
                    ea:8b:44:34:16:c6:23:73:2d:b8:b4:31:6e:3b:df:
                    b0:96:28:09:b3:ae:fe:bc:f2:d0:d0:43:c1:f5:12:
                    22:42:0c:bf:8d:7a:12:bb:c6:24:fe:63:14:a7:06:
                    71:fa:ba:f4:ea:04:b6:74:6e:50:8a:8f:e3:b6:a8:
                    1a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:39:9F:B3:56:DA:6D:8A:A5:17:43:7E:D4:A2:2B:D2:6A:84:6E:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/9e5ae962-28ac-33d5-83b1-38894ac0a0d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.crl

            X509v3 Authority Key Identifier:
                keyid:71:6A:5A:21:EE:66:2B:9C:10:67:F0:E2:38:07:78:CB:12:8C:8C:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.17.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:34:34:32:df:73:40:78:7e:e2:18:52:f1:86:f3:71:17:8f:
         8e:c3:b8:10:e6:11:9a:d5:61:67:37:b4:07:9d:b4:a2:59:60:
         50:2e:de:81:f8:2c:a5:59:82:a5:11:9f:63:a2:6f:a3:04:69:
         70:de:37:7a:27:7e:45:1b:81:35:2c:52:c8:26:a9:56:6a:e3:
         86:1d:59:1c:4f:3b:c1:b7:40:b7:f9:1e:1f:a1:0e:de:39:46:
         08:79:39:9e:97:d0:47:3c:21:fa:ed:6e:53:e0:6d:b8:70:c1:
         d2:65:ee:9e:ad:c7:01:a3:38:e2:dd:0c:22:0e:7f:e1:c7:06:
         0e:be:20:52:bf:7e:5d:73:25:d0:62:4a:73:e3:c9:0f:99:02:
         83:e4:73:94:12:40:91:19:d7:68:48:ad:03:2b:62:89:41:1b:
         5d:ac:2a:f0:26:50:9e:7d:75:b0:b4:ab:28:b5:27:23:4e:06:
         17:7c:52:18:2e:07:97:fe:35:d2:1b:11:c1:a6:71:20:ca:8d:
         b6:f7:cd:86:78:af:a0:16:81:6b:2a:e7:bf:58:b2:12:76:08:
         c2:cf:3a:2d:85:f8:41:77:80:1e:bc:76:55:aa:0f:57:97:c2:
         ef:ce:65:34:d2:30:9d:a2:90:c1:4b:92:39:7b:5e:a0:73:22:
         92:94:b0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:06:06 2026 by rpki-client