Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a9769645-4348-32ba-875d-e039bead9cc8.roa
File:                     a9769645-4348-32ba-875d-e039bead9cc8.roa (raw, json)
Hash identifier:          q/GGsEZTyJ7Cn1sjphF9b4qkwilh/9KfZAgdnmziC3A=
Subject key identifier:   18:C2:15:88:86:E9:81:4F:00:81:59:E1:FD:DD:74:BD:B4:75:61:56
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F4328584F4988D5A9F66212045DE9828C
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a9769645-4348-32ba-875d-e039bead9cc8.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7015
IP address blocks:        69.91.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:d5:a9:f6:62:12:04:5d:e9:82:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=7aa8f447-dc46-464c-9633-995eed7f962f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:09:b3:cc:db:c0:cf:7f:0a:c2:18:a5:aa:5d:
                    83:e4:62:e5:12:58:f6:93:f8:6e:0c:80:5c:45:46:
                    b5:83:79:51:14:8b:f6:ec:ad:16:0f:6b:4c:57:76:
                    45:75:d5:25:08:69:e5:fb:2c:bf:dc:12:f2:8b:2d:
                    ad:01:b5:ce:e3:68:95:8a:f0:d5:28:a8:21:83:d2:
                    64:e9:5d:31:f1:24:a7:60:cd:7d:6b:bf:62:c8:b4:
                    3e:74:fc:32:72:dd:6b:3f:c8:c0:9c:88:43:f9:2c:
                    83:58:3c:69:06:d5:7a:3d:eb:d4:9f:3f:c6:b5:f5:
                    a8:b5:a5:de:cb:8f:68:8a:19:ec:9c:dd:f2:24:7c:
                    49:8a:64:c0:8e:54:12:19:bc:4f:32:e6:f8:50:1e:
                    e3:35:06:d0:64:05:5d:46:6d:47:df:6c:46:22:38:
                    66:ce:04:fa:26:a6:f4:94:ef:10:6d:a2:77:9f:5d:
                    fa:61:41:85:4f:3d:a5:0e:b2:3d:30:2d:42:ba:83:
                    8c:97:e1:18:f6:c0:a8:69:85:9e:6f:af:48:bd:f7:
                    f2:99:4d:bb:b1:89:81:86:5b:5c:be:ba:e5:34:ec:
                    b8:e8:0e:fc:97:7d:4c:e4:e9:76:8e:b7:dd:14:3e:
                    44:0c:bd:c4:d7:e4:c0:7e:93:93:20:48:16:b4:bd:
                    f3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C2:15:88:86:E9:81:4F:00:81:59:E1:FD:DD:74:BD:B4:75:61:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a9769645-4348-32ba-875d-e039bead9cc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.91.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:cf:7d:4c:6b:69:a9:ba:21:bc:61:18:81:43:ad:3f:d4:32:
         37:6e:e1:64:a3:7f:34:6a:01:f1:b2:a6:0f:88:27:88:37:da:
         b8:05:ae:e3:0b:a9:b6:52:f1:8f:cc:81:77:7e:a9:50:9c:f0:
         a7:55:8b:4e:13:09:3f:5b:fc:f9:df:de:28:03:75:68:95:b7:
         94:60:08:0a:e4:85:59:e4:ac:00:55:b9:5c:09:c7:08:f9:0e:
         3b:6b:e5:9d:81:8b:42:73:76:9a:07:2c:43:76:c4:b2:15:0a:
         f7:d2:bb:d6:a0:14:d7:7a:47:fe:6c:fe:f0:01:a9:1e:9e:96:
         c5:5b:6b:e5:eb:3a:cf:96:8b:f6:e2:a9:53:05:3f:ed:77:2b:
         e8:c9:78:05:1c:0e:85:77:1a:37:3c:bf:4d:d9:56:9a:7f:fe:
         e8:11:8a:f6:9a:49:dc:84:90:0d:a1:93:d0:68:5a:43:d6:74:
         92:71:a0:de:18:4b:1c:9e:91:e6:7d:3b:a2:34:a3:cb:a8:a2:
         d7:d6:8b:f0:10:5b:9c:70:ed:5b:59:10:9c:f3:87:1f:ef:e7:
         ab:7c:c4:44:9b:f5:8f:ec:57:57:e2:47:57:c7:95:0c:03:12:
         b0:40:46:b3:e5:94:ce:b4:8a:0b:8e:3e:fb:61:19:74:76:1f:
         e6:63:7a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:56:23 2026 by rpki-client