Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/684a9134-a16d-336c-8191-a5944e08412f.roa
File:                     684a9134-a16d-336c-8191-a5944e08412f.roa (raw, json)
Hash identifier:          iOx6A95oNa8MuvXWrleGXjHsa/GLDNJ6lvrhFIedtLY=
Subject key identifier:   3A:B7:0C:E6:5C:5A:4A:EB:77:0D:F0:D2:C3:5B:7D:19:CF:E3:37:B8
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E9EAFF64EA280C5D565F68080
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/684a9134-a16d-336c-8191-a5944e08412f.roa
Signing time:             Sat 25 Jul 2026 21:00:12 +0000
ROA not before:           Sat 25 Jul 2026 21:00:12 +0000
ROA not after:            Fri 23 Oct 2026 21:00:12 +0000
asID:                     21859
IP address blocks:        69.17.5.0/24 maxlen: 24
                          69.17.11.0/24 maxlen: 24
                          69.17.12.0/24 maxlen: 24
                          69.17.13.0/24 maxlen: 24
                          69.17.14.0/24 maxlen: 24
                          69.17.15.0/24 maxlen: 24
                          69.17.69.0/24 maxlen: 24
                          69.17.70.0/24 maxlen: 24
                          69.17.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9e:af:f6:4e:a2:80:c5:d5:65:f6:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 25 21:00:12 2026 GMT
            Not After : Oct 23 21:00:12 2026 GMT
        Subject: CN=d642d71d-8d80-4899-ac35-472fdb566225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f8:cd:b8:1c:f1:fc:a9:14:b9:78:34:83:82:
                    ce:f4:f1:7d:c8:b3:ba:26:f2:01:d6:b8:00:01:cf:
                    3a:90:90:63:1b:99:d4:58:97:2b:aa:87:b1:a8:ca:
                    19:4d:ff:40:c9:4d:c9:b8:95:ce:36:df:e9:87:4f:
                    f3:71:31:df:98:be:46:6a:8e:8a:36:66:5c:20:65:
                    7a:bb:25:cb:91:3e:81:8a:02:2a:85:87:8f:ae:c9:
                    6b:25:fb:fa:0b:41:6e:13:46:32:0a:d7:14:56:dc:
                    97:2f:58:31:b1:ec:05:7d:93:96:2e:8c:2f:97:6f:
                    fc:c5:68:3d:ec:fe:b4:5c:f3:e4:60:db:72:d4:15:
                    a3:63:09:02:4a:eb:36:25:d1:46:2f:07:5c:06:70:
                    6c:43:9f:4c:96:d8:a1:39:16:5a:fe:2a:90:92:f7:
                    2a:dc:9c:bd:48:fd:64:8d:31:2c:b9:3f:e8:5b:78:
                    d1:ad:b2:30:da:45:9b:d8:ac:6a:4c:08:14:e2:10:
                    66:c5:aa:eb:d8:29:e0:60:b4:c6:fb:2e:8c:12:ee:
                    89:1a:0d:ee:d8:fe:fd:9f:5c:99:1a:0f:37:76:c0:
                    e6:d7:62:de:26:82:5c:40:31:64:0d:e4:70:01:17:
                    ff:56:75:0d:34:dc:63:2a:94:fa:7d:a9:60:81:a9:
                    22:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:B7:0C:E6:5C:5A:4A:EB:77:0D:F0:D2:C3:5B:7D:19:CF:E3:37:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/684a9134-a16d-336c-8191-a5944e08412f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.17.5.0/24
                  69.17.11.0-69.17.15.255
                  69.17.69.0-69.17.71.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:62:fc:cd:be:e4:58:5d:1f:e4:a2:5e:c4:17:c6:1d:a2:d2:
         69:3f:c7:01:be:36:60:11:02:b2:a6:42:2f:a0:e7:21:1b:85:
         af:f3:23:c3:18:f7:b7:78:47:62:30:6a:a1:7c:67:85:4b:42:
         d7:fa:49:4a:07:7e:7c:c4:d8:60:c9:91:2e:10:d8:fd:ed:79:
         45:80:e7:69:0a:bd:86:53:0e:b7:2b:49:b3:7e:4d:33:9a:3c:
         e7:a4:12:da:d1:2a:42:e5:81:61:c3:09:13:7f:c0:f5:6e:0d:
         1d:35:c2:14:99:ca:2b:11:e2:4f:03:b5:8a:66:72:53:55:6a:
         95:03:8f:0d:13:e9:50:33:51:2c:40:98:10:6e:0e:43:47:99:
         4f:6d:7b:b2:8b:7e:6e:11:13:56:1a:34:83:4c:f4:dd:a1:85:
         32:6d:86:26:2a:d7:66:4b:24:87:5f:ba:4e:57:bb:92:31:ba:
         73:3e:58:94:7c:34:39:f6:0e:1d:2f:3b:b3:0b:9e:db:26:5c:
         50:45:33:4f:19:a2:16:27:44:1a:fa:f7:95:c0:11:ef:bd:7a:
         3a:8d:18:60:6b:73:9a:ec:42:78:c4:87:22:48:1b:7e:b3:91:
         34:e4:c7:62:81:c9:ab:ac:a7:1d:5b:10:91:ee:9d:9a:8c:fb:
         26:e6:2c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 19:45:57 2026 by rpki-client