Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/8a6a0c70-ebc8-368a-bd27-cf1540a4ab31.roa
File:                     8a6a0c70-ebc8-368a-bd27-cf1540a4ab31.roa (raw, json)
Hash identifier:          bQ6poQilTy5AYRoYm/s8uckrd0CaETFe4X730JZJQCs=
Subject key identifier:   8E:D1:38:B4:67:1E:72:F5:3E:C9:45:00:78:38:3E:03:C3:96:65:DB
Certificate issuer:       /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial:       010D0C9F4328584D8100A8C4E1F152596BBB7750
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/8a6a0c70-ebc8-368a-bd27-cf1540a4ab31.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     12025
IP address blocks:        69.71.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:00:a8:c4:e1:f1:52:59:6b:bb:77:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=cabae413-d758-49f4-84e2-cee288d3c4c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:59:7a:c3:53:90:8b:6a:ad:95:a5:00:3b:51:
                    ac:9f:db:1a:4a:36:c0:71:e4:c7:e9:b2:cf:0f:ca:
                    e7:2f:b5:74:e6:43:05:d7:06:5b:c2:ea:a9:74:93:
                    08:ef:af:66:9f:99:bc:1f:fa:b8:3b:c8:5c:96:a1:
                    b9:f1:bb:b5:84:91:e8:07:b0:e1:1c:c6:78:34:b8:
                    9b:07:4d:39:d2:ed:1a:54:67:3e:07:15:2b:07:d2:
                    7f:11:b3:ae:74:3f:72:b4:a6:a3:bd:f0:bb:20:4f:
                    8b:9e:ff:b4:0c:48:21:a6:2b:89:7c:3c:8e:c2:1f:
                    50:f9:dc:cc:05:5c:32:7f:ca:88:57:61:9c:72:f7:
                    70:96:53:a1:eb:a8:49:a1:d0:ff:96:ef:7f:ab:5f:
                    71:62:55:ee:31:77:5c:9d:8a:88:0a:16:c9:5d:da:
                    89:62:72:7e:d6:b3:17:d5:83:4a:a6:eb:9a:96:e1:
                    30:ca:d3:26:0d:d0:cc:ba:ee:72:31:8e:da:9f:76:
                    92:8c:b6:90:03:7f:4c:d3:d0:47:d6:e7:98:62:9e:
                    31:40:dc:91:67:3a:dc:32:38:cf:74:c2:5e:61:17:
                    1a:2d:56:9b:66:01:00:23:30:ca:a0:b2:ae:69:4e:
                    70:a0:d4:76:02:f0:87:79:06:e8:d0:42:18:06:f6:
                    ea:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:D1:38:B4:67:1E:72:F5:3E:C9:45:00:78:38:3E:03:C3:96:65:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/8a6a0c70-ebc8-368a-bd27-cf1540a4ab31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl

            X509v3 Authority Key Identifier:
                keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.71.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:41:1d:05:7d:13:76:fd:80:c3:01:14:58:64:69:9e:2e:6c:
         bb:62:fb:1b:48:7f:e6:c9:3e:4a:27:3a:f2:8e:73:cc:81:08:
         35:0c:90:55:3b:fc:79:a0:ea:d2:ed:17:8a:97:c6:d2:2a:f3:
         6d:bc:e3:70:72:75:23:66:1f:a2:ef:e1:ca:01:ac:bd:2b:5a:
         55:d5:4c:9c:54:88:52:bb:29:57:f9:bd:d9:be:58:9f:79:8e:
         08:e8:b0:c5:d2:aa:8f:0c:e0:dc:5f:c0:e1:ce:30:26:8f:9d:
         1d:78:96:88:83:31:a9:02:b1:13:84:49:8a:b6:5a:9c:f7:89:
         2f:48:09:08:20:f5:c6:5b:bf:80:54:f1:ee:08:d7:35:87:11:
         4e:15:db:40:53:c0:ad:5f:50:d2:b8:a9:f8:f7:da:f3:38:dd:
         b5:68:36:93:62:bc:db:08:6c:4a:66:c2:b7:c7:f8:b2:9e:b9:
         bb:25:25:7a:dd:bb:34:e1:cb:71:7d:5e:e7:ee:b8:82:3f:9f:
         9a:df:51:b2:8b:81:47:10:0a:6f:92:ba:ba:e9:af:c5:87:08:
         d1:b9:c3:b2:04:c9:92:de:2c:68:03:a5:be:3f:4e:ac:2c:fd:
         32:a2:7a:26:dd:42:e6:dc:52:81:d7:d6:50:14:56:06:43:f8:
         30:52:df:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:53:53 2026 by rpki-client