Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/343e0f17-2e70-3a63-9fff-0ace74e0dfd5.roa
File:                     343e0f17-2e70-3a63-9fff-0ace74e0dfd5.roa (raw, json)
Hash identifier:          wJ4IRFys7LdgFSNJOtlDMDoa3zSqCSlLufqekjIIjBQ=
Subject key identifier:   6B:2A:DE:C5:94:66:4F:29:8D:9D:AB:85:A5:5C:F6:88:20:86:92:DA
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F4328584E94EA8346D920C61D03A02BC0
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/343e0f17-2e70-3a63-9fff-0ace74e0dfd5.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     31898
IP address blocks:        69.49.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:83:46:d9:20:c6:1d:03:a0:2b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=52c7c458-f83f-47bc-9f31-35627d8d29d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:62:75:3f:2f:7b:a1:08:91:77:a0:b3:fa:9d:
                    e3:df:19:eb:3d:85:f0:6e:42:bf:f5:02:64:2a:27:
                    45:c5:d9:4b:fe:b0:39:07:e0:62:bd:25:54:1b:d8:
                    ff:1d:0e:81:a3:8f:93:15:79:9a:91:ff:30:53:a8:
                    53:1c:0a:16:bb:8c:0c:62:c4:e9:11:87:9d:58:38:
                    6c:ba:9b:ff:53:39:c6:a6:d4:3d:08:fa:70:50:1d:
                    e3:35:b1:2c:61:47:ee:7b:02:21:72:e2:57:04:67:
                    8c:13:ff:fc:95:38:79:3b:3b:e1:c0:97:13:3c:e6:
                    7f:60:54:eb:ba:a7:91:bc:86:78:c5:26:15:66:ce:
                    51:d4:cb:76:07:1b:71:31:ce:c1:14:04:6d:93:8c:
                    39:aa:80:0f:9c:bf:db:74:b0:63:65:b4:3d:f1:01:
                    1e:d2:02:4d:f7:26:60:16:e4:8e:84:7f:79:49:a3:
                    f1:d5:33:26:94:8e:3c:94:79:fe:cf:8f:f2:72:c0:
                    1b:71:2f:3b:c5:1b:3c:8b:59:24:f9:32:47:4a:b9:
                    df:01:28:f4:a3:67:15:ea:a7:e0:ef:7b:68:65:c6:
                    b7:82:85:5c:a0:13:f6:16:8c:4c:89:06:78:b5:ab:
                    6f:06:11:3b:86:f0:fd:e0:b2:7d:78:cc:8c:36:6a:
                    d1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:2A:DE:C5:94:66:4F:29:8D:9D:AB:85:A5:5C:F6:88:20:86:92:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/343e0f17-2e70-3a63-9fff-0ace74e0dfd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.49.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:d3:9e:ec:e3:9e:42:58:f3:50:85:4f:60:b7:46:c3:ba:7c:
         51:ad:6e:cf:3e:b4:35:27:71:ea:5f:72:e8:34:50:b7:36:f7:
         aa:4e:4c:b6:b1:6d:4f:c0:b1:15:16:01:a0:1e:8a:9e:28:5b:
         a0:a1:c1:95:d1:4a:c4:8a:bb:02:dd:fb:81:af:fa:fd:2a:cb:
         84:a9:d2:4d:6b:1d:b8:87:9b:b8:c5:67:55:e3:87:41:79:30:
         3a:95:7a:4e:a1:57:71:61:3a:43:ff:fe:ed:85:21:2b:9d:03:
         02:82:e3:6c:ac:9a:dd:60:e4:4d:d7:29:50:c3:81:a2:f9:f4:
         75:ac:4f:27:f3:4c:f3:4c:0a:22:82:42:3b:a4:fb:f5:40:f5:
         9e:41:b1:c9:07:25:3e:b6:af:b4:35:23:16:3c:bb:76:dc:5a:
         3c:e1:b4:29:9f:c0:49:31:1f:cb:49:e9:22:c2:27:df:d8:31:
         c3:5b:73:f3:06:f7:29:9d:9d:d4:96:25:7d:3d:ba:c8:71:74:
         c5:50:3d:dc:e4:b6:3d:1c:87:c7:eb:bb:5c:3e:83:e6:a0:dd:
         26:ea:78:82:49:87:82:5f:c4:7b:52:19:2f:59:1d:43:69:eb:
         3c:ea:f1:2d:cc:ed:e8:f9:2e:57:65:97:8e:1f:8e:93:f1:a0:
         08:7e:e5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:14:52 2026 by rpki-client