Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e2aa4bdb-c15c-3e4a-ad5c-fa548bd2e9ea.roa
File:                     e2aa4bdb-c15c-3e4a-ad5c-fa548bd2e9ea.roa (raw, json)
Hash identifier:          6zsqo2Mx36KQHcQCUHOne5g7e80JBLdFgotuAp55cXs=
Subject key identifier:   F2:CA:E8:12:9A:F8:12:AB:13:C3:34:7A:90:44:A4:F0:42:E5:B9:B3
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F06722729E9E666C70408B970
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e2aa4bdb-c15c-3e4a-ad5c-fa548bd2e9ea.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     577
IP address blocks:        69.157.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:27:29:e9:e6:66:c7:04:08:b9:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=4595d791-60a4-4a1f-8773-c7f3c16ee2ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f5:f6:1f:ba:b0:cb:a1:8b:47:c8:b9:fa:fb:
                    2c:fb:8f:fe:d2:7a:08:22:8d:31:0b:a7:d3:c5:8f:
                    ba:07:7f:66:51:49:37:47:f8:8d:ca:db:e6:61:55:
                    7d:6b:04:21:0c:54:52:9a:1c:a4:28:1b:e1:65:8d:
                    6c:c3:3f:67:c6:c2:92:13:73:40:9b:3b:3f:99:be:
                    df:0a:08:78:23:06:b4:9d:99:dc:d3:85:5e:27:f2:
                    ac:ef:36:17:b4:41:34:56:12:55:0b:39:90:89:4f:
                    39:ce:e1:f5:67:0b:24:2f:23:e5:3e:df:eb:a3:56:
                    61:60:97:50:2e:59:73:f7:55:36:eb:0f:31:63:40:
                    14:fb:9a:68:e7:b3:2c:e5:a8:c5:fd:7c:b2:a4:4e:
                    65:2c:96:53:e6:03:c1:40:e7:65:4a:b9:d3:48:20:
                    16:2d:45:b0:61:8e:20:d5:4d:b0:0b:c3:af:7d:ba:
                    1c:2e:ed:29:8d:0f:fb:d2:84:07:12:04:d5:a5:17:
                    6b:12:44:ef:ae:23:ec:2a:53:57:9a:eb:1c:7e:de:
                    4a:e3:97:5c:f9:8a:30:88:b3:43:09:c5:ab:ed:35:
                    98:50:c5:ad:1a:bf:2b:8f:89:68:7b:98:1f:24:f9:
                    ad:db:dc:0f:37:90:0d:98:d1:c9:8a:6d:f8:3d:7f:
                    3a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:CA:E8:12:9A:F8:12:AB:13:C3:34:7A:90:44:A4:F0:42:E5:B9:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e2aa4bdb-c15c-3e4a-ad5c-fa548bd2e9ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.157.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:00:05:57:25:4b:f0:e0:05:a2:f1:4b:ac:b8:34:cc:59:56:
         1b:9a:8a:39:af:a8:18:94:f1:92:0c:a6:fb:f2:46:be:d2:b2:
         bb:df:3a:69:b3:d3:75:0a:37:a4:b7:89:77:66:60:45:82:ff:
         09:44:bc:1d:64:a3:62:ff:a6:88:1d:3f:d8:31:ce:3b:d6:eb:
         f4:6d:c4:5d:95:e3:58:0d:4a:62:08:dc:8c:8f:55:40:90:ad:
         28:be:c7:bb:64:21:14:89:08:36:38:af:c1:ae:92:4a:7d:98:
         d4:0a:e6:1c:2f:9e:e2:bb:79:57:e5:f5:0c:f1:57:02:e8:ea:
         d4:be:c0:b3:1e:9a:c5:a1:92:23:13:c5:4e:52:ac:43:6f:a3:
         8b:dd:46:99:16:d8:c0:8d:d0:91:1b:3c:bd:31:48:ac:5d:96:
         c2:9e:05:b0:61:e1:a2:8e:ea:cc:8a:8c:3d:3c:5f:46:86:4c:
         7d:9f:a4:8f:34:c8:52:41:e3:b8:3b:12:6b:c8:7b:4e:7b:27:
         31:ad:da:be:35:20:4c:85:fc:b7:96:09:e9:6f:b7:ab:b8:58:
         35:c2:b8:07:f3:6f:ff:de:d3:dc:22:95:80:1e:c3:c2:4b:7e:
         cf:fb:66:92:0d:aa:c4:f6:07:04:cb:13:d2:87:24:6c:5f:fa:
         ce:9e:e1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:23:03 2026 by rpki-client