Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/70e66a9e-614a-3a28-b917-34be5e9313af.roa
File:                     70e66a9e-614a-3a28-b917-34be5e9313af.roa (raw, json)
Hash identifier:          GYk3VYHczln306TMP7QlvdZ8IWpvkrP9LssJYsazRGI=
Subject key identifier:   B7:8D:75:EA:15:B9:EF:75:87:12:42:65:0C:2D:03:34:05:28:3D:74
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F06722B12A0AB5C815B2BEA1C
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/70e66a9e-614a-3a28-b917-34be5e9313af.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     30048
IP address blocks:        206.47.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:2b:12:a0:ab:5c:81:5b:2b:ea:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=d1054a58-d4fb-4211-b670-82b7e8aab7b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fb:71:88:ce:d7:de:f5:26:59:1a:25:35:13:
                    a3:91:a3:f0:0f:ed:84:2a:79:b4:4d:83:a0:74:a2:
                    3e:37:49:03:c3:7f:7c:d0:34:42:f7:a0:f7:79:a9:
                    5a:39:65:7e:43:d2:78:e8:f4:58:d9:99:48:b0:c5:
                    15:53:8e:92:6e:92:a4:07:41:93:e9:08:17:fe:de:
                    b3:29:83:5f:a0:74:47:a4:91:07:46:1b:30:1f:ee:
                    0a:7e:52:f5:9a:fe:af:a2:1c:3d:64:0e:95:0d:98:
                    1f:b3:ef:37:e2:11:f0:27:8f:40:21:fe:5a:80:a4:
                    53:01:53:ce:cc:06:7c:79:bb:c8:8d:38:37:91:81:
                    28:bb:78:c5:12:0c:e7:62:9e:b2:5b:85:61:62:e2:
                    63:41:81:41:c0:61:59:51:2b:ac:de:b3:f3:bc:5e:
                    5c:fb:98:65:ae:14:3e:f4:da:0c:5e:e6:1d:cb:d8:
                    44:83:99:c3:a0:d1:4f:5a:10:91:23:df:f8:ad:71:
                    9d:d2:6e:95:13:59:d8:88:08:bf:a5:d1:7f:d0:fa:
                    c1:61:7c:3a:05:c5:81:09:ba:18:e8:59:f6:59:49:
                    3c:aa:82:64:bd:20:df:bd:63:e1:df:87:3f:88:c6:
                    5f:cb:76:72:c6:b6:38:19:3b:ec:62:c7:25:49:03:
                    6a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:8D:75:EA:15:B9:EF:75:87:12:42:65:0C:2D:03:34:05:28:3D:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/70e66a9e-614a-3a28-b917-34be5e9313af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.47.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:27:a8:39:d0:40:a7:fb:1a:58:0a:38:7b:07:53:46:34:07:
         f6:5a:2f:4f:39:e8:e7:d5:9c:17:ff:5a:fe:48:f5:c6:f0:a0:
         5d:80:af:6a:e4:fd:c6:f5:f8:b2:ae:e7:ac:27:85:97:7b:92:
         d1:66:23:f8:39:74:b4:63:cb:da:44:6a:a4:30:0b:d6:68:1e:
         71:f6:1f:e9:09:b0:f8:ae:4c:74:00:a8:9a:73:6d:be:c6:e9:
         f4:e3:f5:b8:7b:32:fd:24:7d:68:3b:f7:84:5b:00:5e:bb:e2:
         01:2c:42:82:2e:dd:0d:f3:a1:68:6f:8e:e5:e3:31:11:a7:a4:
         59:a5:15:45:9a:f5:ea:8b:18:cf:46:c6:58:82:12:69:e4:d4:
         23:80:cf:62:6b:46:3f:bd:f8:0e:0c:37:46:42:17:62:de:90:
         24:c0:78:54:4a:e5:5c:c8:2d:6f:9a:08:77:02:ec:75:c7:d7:
         50:6f:ac:7e:de:89:2f:0c:52:ed:4d:d0:65:71:e0:7a:98:ca:
         e5:1e:bf:1a:8d:ca:f7:48:cc:66:47:5f:2e:55:75:a8:b1:ae:
         85:f5:56:83:8d:b5:6c:1b:fa:92:1f:d5:b8:90:75:20:99:75:
         a1:b7:b4:88:d8:b9:cd:3b:ec:cc:7b:83:e6:b0:ac:90:c6:97:
         03:e1:1e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:42:12 2026 by rpki-client