Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/8baa5710-3903-3a6d-8148-fec2d5a33c00.roa
File:                     8baa5710-3903-3a6d-8148-fec2d5a33c00.roa (raw, json)
Hash identifier:          kyOzJmkceS0UzCoAnZTR80O2k/sw0DG5ZD582X1aDQw=
Subject key identifier:   63:92:31:09:BB:0B:4A:97:13:37:90:67:4D:95:AA:FF:32:22:13:16
Certificate issuer:       /CN=5f6f7623-0788-410a-b9dd-8040879aa924
Certificate serial:       010D0C9F4328584D4D5A5037B5FB682FDE41EF80
Authority key identifier: 6C:F1:38:A9:DC:91:8A:D7:97:D6:E0:2C:FD:36:EA:97:60:B3:CF:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/8baa5710-3903-3a6d-8148-fec2d5a33c00.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     19197
IP address blocks:        69.41.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:50:37:b5:fb:68:2f:de:41:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f6f7623-0788-410a-b9dd-8040879aa924
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=50c615aa-1c89-47ba-972f-f304b02c9675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2f:af:94:ef:9c:82:ac:c0:48:8c:12:46:c4:
                    9c:72:fc:c3:5c:bd:75:a5:37:a3:84:5d:9f:21:97:
                    2d:f0:64:69:f2:34:c3:0a:87:92:d2:59:6b:c9:2e:
                    b2:e3:ae:e7:97:6d:f9:7b:48:7d:c6:ef:75:a8:cd:
                    0c:f5:1c:ab:1d:ec:86:56:a7:bb:db:86:ca:30:45:
                    49:0c:7a:5d:44:1f:7e:d1:67:e8:67:02:87:e8:eb:
                    50:5c:3d:ee:a1:f2:eb:6d:42:12:c9:c2:cc:36:1b:
                    71:9b:8c:28:17:19:5c:fc:98:59:3c:51:f6:b4:60:
                    cf:6e:e0:0e:72:b1:d7:4c:aa:34:4b:f2:57:a1:a6:
                    60:63:63:96:1c:53:11:62:44:41:66:35:1c:03:7c:
                    00:b4:1a:c1:87:75:62:38:49:73:b0:f1:92:f0:0f:
                    93:c7:01:8b:19:22:fd:69:ad:e5:e5:b1:f4:5d:88:
                    d2:cf:5c:c9:e1:ad:96:60:6e:24:de:13:1f:4e:e0:
                    62:05:83:7d:bb:6f:d3:50:88:68:5e:9d:45:8f:0f:
                    0f:7b:eb:a0:89:23:f5:d6:30:cd:56:aa:c4:d4:eb:
                    bc:30:e4:bc:fd:87:22:71:20:36:e6:9a:98:83:09:
                    b5:09:da:34:56:23:af:81:4e:47:39:36:f6:ae:a8:
                    67:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:92:31:09:BB:0B:4A:97:13:37:90:67:4D:95:AA:FF:32:22:13:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/8baa5710-3903-3a6d-8148-fec2d5a33c00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.crl

            X509v3 Authority Key Identifier:
                keyid:6C:F1:38:A9:DC:91:8A:D7:97:D6:E0:2C:FD:36:EA:97:60:B3:CF:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.41.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:87:36:d6:b0:1d:9b:a4:f6:92:59:1e:76:b3:57:1d:84:ff:
         68:25:4e:4d:66:d6:bc:2c:a4:7d:f0:df:8a:1d:55:a7:4e:df:
         ec:b0:8e:4e:3c:be:cf:4a:2c:bb:b0:0f:77:07:85:35:7c:e8:
         2b:fa:ea:03:56:27:9a:9c:3c:a0:43:30:04:dc:3b:7f:53:e2:
         51:4b:4f:be:0e:7d:78:99:93:8c:20:70:1b:c9:28:12:6d:ea:
         e4:23:c8:9e:45:c4:ed:24:c3:7b:5c:28:46:81:f3:ac:f6:9c:
         0a:26:c0:51:4b:e9:c6:55:8a:11:e8:68:f5:38:18:89:fe:ce:
         30:1d:32:a0:e1:32:74:43:d1:79:b3:39:36:22:54:61:e8:02:
         44:63:4a:fc:5f:d3:d2:9a:a0:70:83:ee:54:de:46:a5:2f:4f:
         e4:ff:ca:67:01:6a:da:53:4b:45:bb:1f:3e:ab:e9:5a:c6:0c:
         ef:23:0f:c1:74:c3:ba:89:90:d9:80:64:30:0d:d6:71:b1:99:
         5d:91:f3:20:5c:aa:78:62:10:0e:7c:ce:d3:7c:43:35:34:47:
         a8:15:32:4f:b3:86:62:d5:fc:42:27:33:08:04:10:02:43:7e:
         fd:0f:ee:ee:33:dd:c6:59:5f:ad:2d:77:66:db:60:6e:ec:6c:
         f6:5c:b0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:03:36 2026 by rpki-client