Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/2836314e-41d1-350f-9141-4df4bf027667.roa
File:                     2836314e-41d1-350f-9141-4df4bf027667.roa (raw, json)
Hash identifier:          TuJbZZ+Go8ay11IqBQLrvjM9Ol3kbSM8jQhbM+6t6bM=
Subject key identifier:   FE:4B:D1:D0:20:3F:76:E5:2A:C7:BD:99:D3:A9:36:86:26:32:7F:7A
Certificate issuer:       /CN=5f6f7623-0788-410a-b9dd-8040879aa924
Certificate serial:       010D0C9F4328584D4D5A5059D992EF8393254640
Authority key identifier: 6C:F1:38:A9:DC:91:8A:D7:97:D6:E0:2C:FD:36:EA:97:60:B3:CF:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/2836314e-41d1-350f-9141-4df4bf027667.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     19197
IP address blocks:        69.41.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:50:59:d9:92:ef:83:93:25:46:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f6f7623-0788-410a-b9dd-8040879aa924
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=74f96129-bfc3-4051-8cf1-e5e5e486d7c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:71:f3:f4:f8:17:e5:e3:b7:65:64:72:ab:82:
                    c0:48:dd:bb:63:7d:10:94:f8:71:b0:97:59:a2:f6:
                    53:82:36:ac:fa:68:d9:29:f1:e1:10:cf:18:f0:c7:
                    8e:4c:a6:c6:8b:19:f3:5e:22:9d:63:e7:66:54:56:
                    e8:8b:17:22:a0:34:13:b0:05:bd:50:53:7f:b8:a5:
                    20:fa:28:3f:82:01:98:81:55:54:c9:9f:dd:1d:2c:
                    08:2f:78:0c:04:ff:47:1b:4a:28:20:6a:a9:b7:f9:
                    8f:8d:98:11:a4:ec:df:51:56:d3:85:6c:aa:44:01:
                    0c:39:0f:a5:e8:8f:ce:98:a5:0e:b0:72:83:c3:98:
                    92:31:95:38:6d:36:50:d9:52:00:bb:43:5b:5c:64:
                    f6:b3:d5:00:ab:24:b5:02:7e:72:f0:04:be:60:d2:
                    16:dc:67:4a:2d:42:9e:b3:0c:63:ae:63:88:61:5d:
                    9d:49:46:b1:12:0f:dd:ca:29:a0:49:3c:00:50:4d:
                    74:05:df:67:20:c2:2c:d1:50:e9:9a:33:79:8d:63:
                    21:bb:77:0b:56:8d:d5:ff:a6:6a:8d:1a:03:22:0a:
                    16:9c:a5:e5:16:6e:76:ec:b4:45:51:b1:23:e8:c2:
                    70:ee:36:75:5e:4e:59:42:0c:fc:f6:e5:21:b8:c2:
                    6e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:4B:D1:D0:20:3F:76:E5:2A:C7:BD:99:D3:A9:36:86:26:32:7F:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/2836314e-41d1-350f-9141-4df4bf027667.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.crl

            X509v3 Authority Key Identifier:
                keyid:6C:F1:38:A9:DC:91:8A:D7:97:D6:E0:2C:FD:36:EA:97:60:B3:CF:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.41.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:27:74:25:f6:9d:bf:43:ee:81:d8:d1:92:78:7a:47:01:92:
         3a:9d:55:10:d7:63:91:98:7e:36:3b:40:87:9e:3b:28:af:25:
         23:1f:59:9e:79:63:b6:d1:16:2b:86:18:c7:7b:e7:22:06:41:
         f2:33:8c:49:22:67:cc:86:40:bb:70:5a:46:97:f4:e1:39:6f:
         bf:b3:d8:74:31:af:09:88:11:19:6d:6a:f0:92:ba:bb:b6:81:
         74:74:91:60:5d:2e:79:94:1c:87:9c:c4:0b:27:07:74:2a:ff:
         dc:4d:0b:4f:53:6f:b5:1c:ba:72:5f:0d:1d:0f:91:e2:e5:25:
         f4:8c:c8:88:35:0b:ef:60:79:af:6e:d4:b3:34:b8:f0:59:22:
         1e:1f:d8:e0:c6:99:26:0c:8f:ca:62:3e:f8:ff:90:3e:68:cd:
         3c:51:2c:21:34:7c:36:09:dd:13:37:07:7b:a4:91:b1:0d:42:
         56:ae:56:67:4c:03:65:f6:d7:23:1e:d7:3d:69:83:74:83:65:
         07:d2:85:92:b7:9e:5e:8a:db:d2:88:83:6a:42:b7:5c:60:7f:
         02:f6:e9:d8:75:92:b7:cf:c9:fd:4c:d1:f8:58:c1:c5:5c:51:
         02:28:ca:82:ea:4d:6b:9a:8d:fa:a9:ea:09:7b:f7:d9:69:fd:
         de:dd:dd:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:06:10 2026 by rpki-client