Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/684a9134-a16d-336c-8191-a5944e08412f.roa
File:                     684a9134-a16d-336c-8191-a5944e08412f.roa (raw, json)
Hash identifier:          wpKOGPei2oIxV9OGsgP38F3OgCjYnfqRfUJA0G1mCNc=
Subject key identifier:   76:24:81:82:B2:13:1E:5D:E2:2F:18:E9:9D:E7:9C:81:D1:C7:A8:C5
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584CDDCD06BB3917867F8D943B80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/684a9134-a16d-336c-8191-a5944e08412f.roa
Signing time:             Sun 15 Feb 2026 02:00:32 +0000
ROA not before:           Sun 15 Feb 2026 02:00:32 +0000
ROA not after:            Sat 16 May 2026 01:00:32 +0000
asID:                     21859
IP address blocks:        69.17.5.0/24 maxlen: 24
                          69.17.11.0/24 maxlen: 24
                          69.17.12.0/24 maxlen: 24
                          69.17.13.0/24 maxlen: 24
                          69.17.14.0/24 maxlen: 24
                          69.17.15.0/24 maxlen: 24
                          69.17.69.0/24 maxlen: 24
                          69.17.70.0/24 maxlen: 24
                          69.17.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dd:cd:06:bb:39:17:86:7f:8d:94:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Feb 15 02:00:32 2026 GMT
            Not After : May 16 01:00:32 2026 GMT
        Subject: CN=298f1b5d-e972-4db7-ab1c-70df50ffdb71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c0:a2:aa:7d:9b:fa:2f:dc:3f:e3:c3:f3:55:
                    17:8a:41:0a:08:0f:0d:5e:06:39:6c:bb:ba:d2:f4:
                    f8:c4:98:ea:39:41:3a:0e:5b:4a:af:4c:4c:e0:8c:
                    4d:c3:b1:a7:39:51:e8:f8:05:06:b9:31:6c:ba:f2:
                    b8:4b:cc:a3:af:f8:25:cd:e8:0e:f3:17:d0:71:2d:
                    c2:a7:5f:10:7f:1b:6a:0c:c6:96:8e:77:7f:6a:29:
                    51:d4:99:d3:27:e2:d0:f6:20:c0:e1:7b:73:63:5a:
                    fa:e9:cb:bd:6b:22:e9:0c:de:1f:cd:46:a3:be:e7:
                    e4:41:e9:05:be:f7:a8:6f:0f:da:2a:d2:b5:b4:b5:
                    79:8f:69:0b:ac:57:2b:20:6c:eb:07:69:da:cd:a5:
                    8e:c1:cf:ff:e2:51:28:fc:f0:5d:49:05:92:1c:ee:
                    c1:2f:b4:54:2f:ef:16:1f:43:d0:6a:c4:3a:60:b6:
                    18:ff:21:49:fa:6a:3f:00:a7:c7:1c:60:8a:72:e7:
                    87:86:8f:37:a1:46:96:b4:56:37:30:fa:93:26:09:
                    d5:52:ed:a0:64:12:4d:74:64:b2:f6:3c:9b:2f:22:
                    a1:0d:d0:60:64:c8:a6:e8:ea:7c:fe:8b:a6:01:f8:
                    7f:e6:4d:73:83:fe:b3:13:01:e3:59:8b:3e:3f:be:
                    73:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:24:81:82:B2:13:1E:5D:E2:2F:18:E9:9D:E7:9C:81:D1:C7:A8:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/684a9134-a16d-336c-8191-a5944e08412f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.17.5.0/24
                  69.17.11.0-69.17.15.255
                  69.17.69.0-69.17.71.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:cd:e6:74:d1:1a:6f:8f:be:ae:17:e9:d0:4d:09:7d:65:94:
         da:3b:59:f8:c1:cb:41:be:d7:9e:eb:af:08:fa:90:2d:b7:c7:
         38:ea:b8:f9:bb:a5:55:75:af:5f:33:9c:26:ad:35:89:d2:41:
         70:09:eb:4b:13:29:04:f8:b8:ab:c3:0a:36:53:45:9d:d8:39:
         91:d2:ac:28:53:4f:08:47:e5:8e:a6:67:9a:b0:b5:a9:ce:a7:
         b0:af:22:ae:e4:67:64:79:2f:fe:2e:49:06:5a:ae:cd:7e:bf:
         a1:fa:02:35:50:51:48:03:8b:af:79:b6:e3:ac:62:2d:42:8c:
         35:21:78:5c:c3:07:6c:38:7a:a8:ea:98:9e:18:13:93:4a:af:
         a5:5d:be:50:65:3d:7d:bd:ba:ab:c3:b7:49:77:91:77:6d:fb:
         f5:b5:c9:17:c5:bf:1b:20:19:28:8c:d5:72:33:8e:92:61:ce:
         a8:c4:24:e5:1b:a3:ca:0e:3e:70:29:ef:01:6a:76:9f:76:7a:
         c2:fd:7d:37:c4:72:07:84:d9:dd:9c:a3:eb:ee:cb:4d:da:72:
         d9:d8:80:ed:c4:4f:d6:56:73:5c:df:fe:e1:fa:f9:3a:4a:a9:
         7f:56:03:07:fb:87:4d:e1:51:9c:5a:b0:59:53:4a:a2:83:46:
         3e:b2:95:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:47:54 2026 by rpki-client