Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/55cea90a-508f-36a4-8b91-9053d99a58f4.roa
File:                     55cea90a-508f-36a4-8b91-9053d99a58f4.roa (raw, json)
Hash identifier:          6lmNrSoWd0EzrtIlKlWUNhTJutcTmUaxjz/9Bhdr7jg=
Subject key identifier:   19:A1:27:23:F1:5B:1E:25:A0:95:07:2E:AA:B7:07:9E:5C:8C:CD:E0
Certificate issuer:       /CN=9f9f5021-d780-4759-ac0f-1865ab8d5a61
Certificate serial:       010D0C9F4328584D703FDD982863B3EE05A2DD00
Authority key identifier: A7:F5:60:C1:80:EC:25:8A:8F:F9:A2:A8:4D:ED:D1:BB:D5:C7:07:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/55cea90a-508f-36a4-8b91-9053d99a58f4.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     6954
IP address blocks:        69.4.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:dd:98:28:63:b3:ee:05:a2:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f9f5021-d780-4759-ac0f-1865ab8d5a61
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=74312858-4caf-48e0-aab2-d226245da19c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ad:2f:8e:c4:f9:16:59:5d:4c:32:63:22:7e:
                    91:b4:21:87:ff:fd:7f:19:d3:87:11:e6:7c:8c:3c:
                    32:34:f5:8b:a8:f8:81:48:8e:6e:7c:7a:d6:aa:f9:
                    47:16:f0:1e:54:ff:e0:71:cd:8f:d3:f9:9d:cd:78:
                    ff:8c:f6:48:62:e9:45:62:67:0b:92:17:07:85:b0:
                    62:e9:46:8c:0d:5d:2a:9a:cb:30:e0:18:75:bd:00:
                    82:71:e5:1b:77:27:df:eb:96:97:be:1e:58:21:e4:
                    d4:ca:69:78:f9:ef:45:a5:47:10:e6:60:63:16:15:
                    ca:25:09:c2:e3:9d:0e:29:b4:e1:ac:1d:50:94:f6:
                    ff:7e:a4:dd:0a:8f:88:e9:2d:7c:48:b0:3d:bc:5a:
                    07:a1:1b:1b:a3:18:57:f4:9e:ef:d2:c6:c9:67:d5:
                    c9:04:93:5a:b4:b4:5c:04:99:6a:59:1b:7b:27:f0:
                    eb:eb:16:e0:e9:bc:b6:f2:60:03:fd:d6:43:ed:cb:
                    4b:84:e3:2b:e5:a4:e6:46:4f:f4:e2:4f:39:99:fe:
                    e8:17:9a:f5:19:5b:db:bb:25:5b:15:70:f4:c0:26:
                    27:1f:3f:b5:5c:b1:db:27:e5:94:1f:40:ee:41:04:
                    7a:68:71:20:52:d6:44:c7:58:1c:7f:26:c3:99:66:
                    9c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:A1:27:23:F1:5B:1E:25:A0:95:07:2E:AA:B7:07:9E:5C:8C:CD:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/55cea90a-508f-36a4-8b91-9053d99a58f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.crl

            X509v3 Authority Key Identifier:
                keyid:A7:F5:60:C1:80:EC:25:8A:8F:F9:A2:A8:4D:ED:D1:BB:D5:C7:07:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.4.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:33:6a:5a:6c:d6:c9:f0:92:de:d8:f3:b9:6c:25:d6:b8:b0:
         88:31:11:68:80:00:04:c4:ba:66:8e:fb:e3:e0:d1:c5:b5:c1:
         c7:02:ed:91:a0:ce:bf:81:4c:49:e8:b3:46:98:df:c1:32:21:
         02:79:51:43:bc:d2:93:c0:47:c3:7a:a0:5e:37:56:40:cc:5f:
         fa:99:62:cf:f7:07:ea:13:04:e1:b5:bc:c3:8c:10:03:75:1d:
         2c:6a:e1:4e:dc:1b:03:68:3f:a1:a4:7a:ef:b5:2e:a0:5f:bf:
         8b:1a:5a:82:93:fa:0b:ed:fa:31:c0:cf:ae:20:55:93:88:bc:
         1d:4c:2c:23:3c:a4:01:bb:ff:5c:82:ac:b9:94:f6:cd:8e:92:
         f2:6b:a7:58:9f:6c:ca:c7:6c:40:56:15:36:8b:0c:25:fa:b0:
         f0:08:21:67:fa:cb:1f:f8:a7:86:36:05:c3:22:a8:28:ff:85:
         e5:73:ac:26:37:63:46:a0:f7:5d:a3:a9:fe:bd:d1:6f:c1:a4:
         42:8c:88:88:6c:b3:2f:cf:17:f7:d7:c0:95:43:77:08:d2:0d:
         a8:71:9d:cf:0a:13:24:4f:62:8c:d8:7f:41:05:ea:af:7d:c9:
         3d:c2:ac:a3:6d:65:e2:f6:26:01:61:24:33:00:c0:59:ee:05:
         ad:40:33:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:08:53 2026 by rpki-client