Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5babe44a-711f-3b58-95a0-19be26f1bd15.roa
File:                     5babe44a-711f-3b58-95a0-19be26f1bd15.roa (raw, json)
Hash identifier:          iI9/4wKmt/M0UAf5mdCAC8E9z57+YoXZaOWZdA81tBg=
Subject key identifier:   1F:B9:3B:89:AC:59:6F:9D:7D:F1:61:98:AE:83:AE:B3:D5:12:D7:19
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F06729E02472524D84E499400
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5babe44a-711f-3b58-95a0-19be26f1bd15.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     577
IP address blocks:        70.25.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:9e:02:47:25:24:d8:4e:49:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=f87a4260-7bd6-4467-baaf-426c028c7beb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5d:86:78:e9:c3:26:89:a3:b8:d2:e3:b4:1e:
                    ff:82:7e:df:89:02:10:9e:a6:6f:12:76:1d:bb:6b:
                    ee:33:33:4a:31:b5:6b:c9:de:fd:92:70:24:7b:b0:
                    0e:b8:5a:d6:a0:49:a7:d0:31:0e:f6:06:e9:a1:58:
                    8a:1c:fb:7a:00:df:f4:c6:ec:0b:53:e4:45:8b:55:
                    15:8f:21:76:52:18:cb:25:73:e6:ad:16:10:91:c5:
                    ad:e1:37:c3:66:94:06:07:42:bb:bf:db:07:7a:75:
                    b6:f1:5e:a6:04:f9:80:18:a7:d3:e0:b1:ce:3e:85:
                    02:b1:06:da:b9:a6:3e:ff:e4:d6:26:40:72:f8:f7:
                    6c:a0:e6:e2:21:3b:ff:43:f1:9e:66:f3:38:df:51:
                    bd:0b:53:41:e0:2a:d7:43:c7:64:d5:ac:70:6f:e7:
                    57:89:33:a8:83:b8:c0:79:d7:1a:60:e8:2a:c8:c4:
                    ee:8b:79:3d:9f:f3:91:d6:6a:33:1e:1a:26:ba:a4:
                    da:b7:6b:77:0f:36:48:cc:c1:3d:14:95:dc:be:cc:
                    87:8c:7b:43:63:03:bd:b1:c5:50:d0:b7:5c:3e:25:
                    09:0b:d5:6b:7e:b4:13:21:7d:6d:4e:c6:7d:8f:21:
                    8d:70:1e:e6:3a:b5:06:04:d1:99:20:b9:f3:68:f3:
                    93:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:B9:3B:89:AC:59:6F:9D:7D:F1:61:98:AE:83:AE:B3:D5:12:D7:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5babe44a-711f-3b58-95a0-19be26f1bd15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.25.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:ea:2b:20:30:cd:ed:15:f3:6c:02:0f:79:a8:3c:58:88:f0:
         50:fe:b1:0b:61:57:bb:fd:6a:12:55:f4:43:a2:f8:d3:80:1e:
         8b:23:4d:98:25:75:b0:e9:8a:96:b2:14:50:1f:3e:e5:41:bd:
         72:a1:c3:76:eb:fc:08:ef:40:03:35:91:ca:8d:9f:e5:9e:b2:
         fe:d3:46:19:69:6c:fd:b3:ad:c2:2b:78:8e:4f:8a:82:25:ae:
         26:2e:98:0d:80:52:08:b8:f7:09:5a:6e:58:9a:d5:a7:42:76:
         3d:e3:b6:61:78:d0:ad:5e:dd:61:d4:37:3c:00:4e:29:e9:13:
         df:41:e9:4f:fb:b4:6c:0d:7c:c3:aa:95:04:02:3d:9f:c6:bf:
         3e:d5:6c:01:c1:41:f9:fc:4f:14:2c:f1:3c:7c:d8:46:0e:c4:
         8b:aa:a3:a6:59:93:6f:1e:59:2f:46:1c:6e:8f:00:5c:a6:b3:
         1f:97:ef:fb:32:97:f3:86:06:38:a3:5e:e2:0a:32:18:d7:e7:
         a0:90:7a:2f:99:5b:a3:47:d1:aa:e5:ef:26:c5:72:45:bb:04:
         93:12:d3:a4:64:20:56:67:a2:9b:3b:28:81:7d:f2:fb:02:e0:
         bd:48:d0:3f:8e:ce:d0:ab:07:0d:c4:45:25:1b:28:4a:07:81:
         4d:df:27:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:09:38 2026 by rpki-client