Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/f12e8adb-5e41-3875-ac13-7e5a05c363dd.roa
File:                     f12e8adb-5e41-3875-ac13-7e5a05c363dd.roa (raw, json)
Hash identifier:          Yft3pNmcj24m+yl5P7VXM0sRr+FXv9s6lvQivBGIZ6U=
Subject key identifier:   FD:69:1F:6D:B8:D7:CF:91:CF:E0:EE:5B:43:22:EA:60:44:EE:14:20
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F4328584D571FAF80E6C87B639DD3F2C0
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/f12e8adb-5e41-3875-ac13-7e5a05c363dd.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     12129
IP address blocks:        69.39.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:af:80:e6:c8:7b:63:9d:d3:f2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=40301a7d-1e67-4aad-9815-96f48bf3367f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:23:e2:2d:8a:38:17:ac:aa:0c:3f:2a:de:04:
                    2b:10:5d:d1:af:40:46:e3:2d:7a:c8:64:b8:91:d0:
                    b6:60:f3:fa:6a:e2:22:bc:a6:e2:70:50:36:25:39:
                    0e:e6:a6:4b:8d:b8:81:85:1b:3a:4b:33:83:46:29:
                    63:71:67:75:30:93:c2:5d:53:a1:af:d6:d6:34:41:
                    c6:fb:47:f0:61:f9:17:a3:47:cf:c9:e3:d3:bc:d2:
                    fe:35:46:9f:91:aa:91:5a:a5:90:da:47:50:90:66:
                    c1:a9:06:44:13:15:ba:95:43:04:90:61:0a:1e:ad:
                    bf:de:22:96:97:bd:e6:c2:77:5e:06:fc:d3:e0:91:
                    44:93:38:fa:68:16:1d:a0:9a:bc:b3:91:c4:b8:db:
                    2a:a2:9f:0c:0d:cd:6c:19:ca:d5:c9:9e:57:f6:46:
                    37:85:4d:8e:b8:9d:9f:5c:61:3e:d7:98:2a:cc:9f:
                    89:9a:f8:04:05:42:f1:44:75:eb:20:4e:98:86:ee:
                    3d:50:1f:d6:a4:83:d6:4e:60:95:ae:9c:40:6c:80:
                    c6:34:f4:04:49:51:a1:3c:21:49:de:bb:ac:95:09:
                    af:5a:de:21:bd:9a:22:ca:b4:29:fd:90:8f:39:05:
                    d4:6e:f5:0d:84:0d:23:7e:e4:93:ab:05:18:94:0f:
                    01:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:69:1F:6D:B8:D7:CF:91:CF:E0:EE:5B:43:22:EA:60:44:EE:14:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/f12e8adb-5e41-3875-ac13-7e5a05c363dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.39.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:3d:6e:b4:82:2b:50:91:6b:ee:1d:d2:d4:67:f6:dc:6f:25:
         ae:c6:1c:43:fc:c2:a5:d8:bf:5c:b3:6e:76:48:ec:03:c9:17:
         80:fe:0f:59:72:e6:6c:00:2e:e8:fd:fe:08:f4:2d:ed:03:5c:
         51:7f:34:de:49:8d:4a:be:d8:24:50:34:d3:0f:6b:cc:07:da:
         97:25:17:ba:52:de:6f:b2:7a:5a:7b:96:d5:ee:b4:9e:76:5e:
         91:93:06:61:bd:f8:1c:43:25:5c:45:94:2e:8c:da:46:c0:cb:
         9f:57:de:41:b7:db:ba:12:4d:dc:b9:be:a1:ee:41:57:05:18:
         cb:12:92:f6:a3:6d:00:3d:6b:98:0f:9f:78:a8:a5:e6:97:1d:
         86:f7:bf:d3:c6:74:83:6e:62:58:06:43:46:0f:f2:24:19:b1:
         e0:61:8a:46:d7:c5:9e:3e:fb:2d:3f:79:ef:cd:ab:3d:3d:85:
         61:ce:e1:81:5b:02:45:67:95:61:34:df:2a:65:71:d7:cf:5b:
         79:b8:3b:2b:75:16:83:08:c2:37:95:6e:8c:64:3f:6d:2b:df:
         ba:35:0d:00:2c:18:8e:f6:8c:47:6a:a4:cf:d9:6c:64:9b:7f:
         0e:a2:31:f7:dd:13:3b:b8:19:b0:f6:84:f8:18:df:1c:18:f3:
         6c:e3:9d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:19:19 2026 by rpki-client