Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8bc653ae-5456-33fc-a44d-1b735de4d4b8.roa
File:                     8bc653ae-5456-33fc-a44d-1b735de4d4b8.roa (raw, json)
Hash identifier:          79/QcFj9fSVmtjHAujobcm06XJjruDz8ebwyB0hCZuA=
Subject key identifier:   CD:12:4C:7C:30:47:D8:C5:8F:96:BA:08:25:F4:F1:6F:39:1B:98:F6
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F1CC7C1BEBFF93D261DE7A100
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8bc653ae-5456-33fc-a44d-1b735de4d4b8.roa
Signing time:             Wed 09 Sep 2026 01:00:11 +0000
ROA not before:           Wed 09 Sep 2026 01:00:11 +0000
ROA not after:            Tue 08 Dec 2026 02:00:11 +0000
asID:                     4917
IP address blocks:        69.158.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:c7:c1:be:bf:f9:3d:26:1d:e7:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 01:00:11 2026 GMT
            Not After : Dec  8 02:00:11 2026 GMT
        Subject: CN=0ef35662-b84c-4dbc-b651-ecf37b6b9483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0b:a7:c7:dc:33:de:a3:64:57:54:03:47:d3:
                    d3:26:f8:d0:37:7d:66:7b:62:a2:88:d6:34:c5:17:
                    ac:0a:f0:2c:7a:8b:3e:83:36:6b:85:fc:98:41:53:
                    64:86:a6:68:fd:4e:84:83:4c:6c:2b:51:31:8d:1a:
                    14:cb:94:7d:23:58:77:8d:a2:b2:a4:e7:37:93:46:
                    99:ab:99:93:0e:1d:46:e7:b0:f8:a7:1e:e8:e0:54:
                    7d:d0:bd:c9:17:18:ac:ae:18:db:e8:d9:99:46:26:
                    69:a3:cd:6e:a9:36:ab:b0:9e:a6:7a:02:d4:dd:b9:
                    82:8f:2d:36:6d:e7:9e:33:e1:7d:e3:a9:40:ee:8a:
                    07:36:27:7c:f5:14:26:fa:06:1f:fd:c7:1d:ca:68:
                    8d:0b:c1:ea:8b:32:b3:e2:c9:eb:3c:56:b6:63:c1:
                    bb:19:c4:66:95:52:4b:bc:c5:f1:2f:35:8f:91:14:
                    e3:17:c9:7c:79:34:11:2a:aa:e1:6a:dd:56:27:77:
                    f0:fe:a6:d2:2f:9c:7a:1f:77:3f:5f:e0:51:23:b8:
                    fa:da:be:8d:52:41:43:fb:64:8a:f8:94:5b:2b:1f:
                    07:e8:3f:7f:40:ec:d4:a2:07:84:ea:7b:68:5f:bf:
                    c2:0b:d1:b8:ea:0c:81:e3:71:6d:77:3d:eb:b6:79:
                    b3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:12:4C:7C:30:47:D8:C5:8F:96:BA:08:25:F4:F1:6F:39:1B:98:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8bc653ae-5456-33fc-a44d-1b735de4d4b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.158.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:49:0f:d0:96:30:cb:73:8b:4a:13:6b:01:5e:a6:eb:85:76:
         72:c8:36:8e:1d:17:34:32:e0:f5:70:ac:69:cd:24:b1:e0:eb:
         59:95:8b:83:c1:a7:9d:cc:28:11:4f:f4:d3:e0:13:31:6c:5c:
         f9:62:c0:92:c3:1a:c7:16:40:5f:fe:bb:4e:ff:bb:41:17:74:
         2f:1e:13:c5:33:9d:ba:42:bb:29:78:e5:93:0a:10:9b:15:87:
         3b:80:c1:db:24:47:91:e4:4d:45:f2:83:cd:25:d0:64:45:f8:
         d0:55:2f:9c:46:0d:da:aa:34:83:33:27:49:1b:57:f8:2c:7b:
         5d:0a:f2:f3:17:2b:46:c7:04:c3:c6:0f:59:01:e7:63:bc:5e:
         cd:e4:fa:0a:58:78:f9:1b:1c:01:e3:d9:3b:b8:70:73:f2:ed:
         70:79:a3:fc:df:8b:37:85:5b:39:27:eb:e4:c6:f6:21:9d:35:
         d2:45:68:1f:e8:78:a4:0f:29:ca:75:32:39:17:d6:d0:ab:f0:
         ea:2b:30:ab:b4:65:4a:7f:db:fa:de:c1:00:75:78:f3:b6:1e:
         ac:36:c2:51:46:be:57:de:02:f2:f8:aa:27:a6:63:44:9f:6d:
         c9:82:87:60:b9:ec:7f:f0:76:1f:88:e1:cf:19:e7:17:45:48:
         44:61:d1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:25:47 2026 by rpki-client