Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7e488bf9-7470-4c89-8aed-6849e5450eee/2204a64e-f9e2-341e-8255-af6a787ed75b.roa
File:                     2204a64e-f9e2-341e-8255-af6a787ed75b.roa (raw, json)
Hash identifier:          9qThet4nipYlJSp5K+NqPkYjhvE8dr5mtr6JdEgbeZQ=
Subject key identifier:   74:54:F4:23:B1:0E:28:B5:54:DC:A8:C5:40:9B:95:00:EB:FB:06:92
Certificate issuer:       /CN=7e488bf9-7470-4c89-8aed-6849e5450eee
Certificate serial:       010D0C9F4328584F63F81E34AE263D50FBCB9680
Authority key identifier: B3:0E:14:A1:6C:91:71:B9:02:0D:D8:84:78:53:4A:CB:C0:34:B9:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7e488bf9-7470-4c89-8aed-6849e5450eee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7e488bf9-7470-4c89-8aed-6849e5450eee/2204a64e-f9e2-341e-8255-af6a787ed75b.roa
Signing time:             Sun 04 Oct 2026 13:00:13 +0000
ROA not before:           Sun 04 Oct 2026 13:00:13 +0000
ROA not after:            Sat 02 Jan 2027 14:00:13 +0000
asID:                     16509
IP address blocks:        69.58.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7e488bf9-7470-4c89-8aed-6849e5450eee/7e488bf9-7470-4c89-8aed-6849e5450eee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7e488bf9-7470-4c89-8aed-6849e5450eee/7e488bf9-7470-4c89-8aed-6849e5450eee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7e488bf9-7470-4c89-8aed-6849e5450eee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:63:f8:1e:34:ae:26:3d:50:fb:cb:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e488bf9-7470-4c89-8aed-6849e5450eee
        Validity
            Not Before: Oct  4 13:00:13 2026 GMT
            Not After : Jan  2 14:00:13 2027 GMT
        Subject: CN=737d8351-0527-4ee3-9345-1acf9eced1f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:17:10:6c:b3:ad:21:7a:0b:cd:f6:6c:5f:2d:
                    30:f1:77:a3:d6:e0:a8:c7:8f:64:8f:ba:d1:7b:9f:
                    9a:fa:fa:20:37:b5:b2:e8:45:04:3a:a2:36:d9:f0:
                    37:0d:83:5a:eb:8b:11:3b:ee:fe:db:85:49:d0:8e:
                    1d:13:b0:49:61:5d:87:d6:83:f4:ce:63:a2:1d:5c:
                    84:fc:f2:fc:b7:46:cb:f0:cf:64:a6:9e:2e:fc:b1:
                    0f:76:8a:e3:94:70:8b:7f:ae:c1:f3:01:ec:8c:23:
                    2b:d5:05:3e:7b:72:fb:06:a8:d5:57:d5:27:e5:9c:
                    db:95:c0:89:f1:11:8a:e9:ba:42:79:4b:ce:2d:23:
                    b1:25:d2:ea:9f:84:75:49:60:57:22:38:40:c1:d5:
                    cc:9d:48:68:9f:d6:a3:b2:f3:e4:e1:70:5c:09:cc:
                    4b:72:6d:04:96:05:37:c2:ad:41:a8:63:bd:76:7b:
                    d2:50:09:81:83:68:5e:b1:2f:16:fe:3f:34:b6:11:
                    f6:7a:e4:a4:76:f1:21:15:5a:39:b4:88:d7:c8:85:
                    ea:e9:18:ae:4f:41:3e:bd:d2:ea:9c:83:6b:48:14:
                    f0:d1:84:4b:35:7b:15:04:b9:34:89:9c:82:59:1b:
                    41:bc:29:07:6d:08:b9:0d:a5:3e:4a:5a:86:84:ee:
                    3a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:54:F4:23:B1:0E:28:B5:54:DC:A8:C5:40:9B:95:00:EB:FB:06:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7e488bf9-7470-4c89-8aed-6849e5450eee/2204a64e-f9e2-341e-8255-af6a787ed75b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7e488bf9-7470-4c89-8aed-6849e5450eee/7e488bf9-7470-4c89-8aed-6849e5450eee.crl

            X509v3 Authority Key Identifier:
                keyid:B3:0E:14:A1:6C:91:71:B9:02:0D:D8:84:78:53:4A:CB:C0:34:B9:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7e488bf9-7470-4c89-8aed-6849e5450eee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:2c:10:d6:77:bc:29:3a:2b:3a:1e:3b:dc:64:b7:ac:59:84:
         f8:87:7f:15:04:d9:e5:c9:5e:0d:f3:49:ab:29:a1:5b:64:7c:
         71:e9:a7:05:be:4d:ae:0d:9e:05:04:82:da:45:01:7c:83:75:
         5f:e9:9a:fa:a6:e0:a4:4d:31:e8:4a:26:a3:1f:25:76:5e:9e:
         54:06:d1:4a:8f:64:16:27:7a:d1:82:36:91:9b:7f:c5:42:94:
         6c:1d:b4:a4:ad:01:e2:81:9a:29:0a:9d:53:14:a3:d1:57:27:
         36:b6:ce:72:5e:72:fc:53:fb:cf:dd:48:5a:1f:d3:e9:45:dc:
         6f:2d:a6:a3:6e:da:c0:8d:f1:6e:ad:7e:03:b9:eb:22:02:6e:
         14:72:8b:8a:bd:33:0b:4a:58:27:f2:43:81:b3:40:3f:76:bf:
         74:f2:ea:66:d7:e5:33:82:42:66:66:fd:64:82:0c:34:ea:56:
         7a:09:ba:af:d5:c4:81:80:b3:d3:ce:94:14:83:e3:54:c2:67:
         2d:c2:01:46:53:5e:df:08:a0:b9:a3:2b:59:3c:2b:de:41:b3:
         33:ed:88:e7:c1:81:da:85:d1:4d:f1:9b:77:d3:47:94:b1:6d:
         13:ad:1f:c4:1f:87:88:c0:f8:8c:47:c3:51:41:be:66:83:5a:
         69:df:b1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 13:29:13 2026 by rpki-client