Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/360a8570-a044-3855-b2da-5ae7cac1196b.roa
File:                     360a8570-a044-3855-b2da-5ae7cac1196b.roa (raw, json)
Hash identifier:          zZ9/Gh4Yrt8p2WR5KY/F0NH8OE+mG5enZ/u6L/2r+jc=
Subject key identifier:   EE:7C:ED:5F:76:B9:98:48:BA:B0:EE:C9:7C:88:77:DA:1F:0B:8D:66
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F4328584F03A7962692B21DBE47F1A000
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/360a8570-a044-3855-b2da-5ae7cac1196b.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     16839
IP address blocks:        149.96.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:96:26:92:b2:1d:be:47:f1:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=92d9acc6-ceb0-4815-8977-dcaa25969040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:71:85:fd:d9:6c:91:b1:31:bb:ad:33:ff:58:
                    7c:28:d7:bb:67:a3:e2:5c:3e:69:74:05:3f:79:1b:
                    f4:5d:74:a5:d7:9f:1c:65:3d:f2:ad:e2:10:fa:ab:
                    03:a7:5c:e2:db:66:40:4b:17:56:9c:4d:b8:5b:82:
                    3e:52:de:ef:b7:bb:9d:0d:4c:d8:cf:c1:c2:bf:69:
                    08:47:3b:7b:f2:6b:cc:80:4b:01:b8:e5:e2:4c:03:
                    c7:7d:b9:f0:a1:08:8a:2a:83:0d:ab:56:2f:6f:4e:
                    28:5b:8f:1b:4a:13:df:a3:41:9b:37:bb:d1:ed:97:
                    ad:3a:4e:b2:2f:35:45:3d:bc:41:68:00:d1:bb:98:
                    9d:57:bd:01:97:4e:2c:6c:15:25:39:5a:f3:62:c7:
                    5e:09:c8:6e:ed:5f:6b:6e:2c:30:4e:fd:dc:6b:60:
                    fb:ec:3d:2b:fc:d3:54:20:81:7e:3d:a9:82:df:38:
                    cc:31:76:55:67:43:d3:6e:43:03:bf:74:40:9f:9f:
                    fe:8e:db:e5:50:a9:f1:99:81:72:f8:35:29:9e:3d:
                    a4:2a:b5:e7:e2:ce:bd:34:b3:18:d7:76:22:cc:a2:
                    eb:25:f0:8f:f7:fb:6c:06:de:53:f9:d9:be:2b:92:
                    d5:b9:a2:60:0c:4f:d2:f5:bb:5c:5e:40:1d:68:b0:
                    a2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:7C:ED:5F:76:B9:98:48:BA:B0:EE:C9:7C:88:77:DA:1F:0B:8D:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/360a8570-a044-3855-b2da-5ae7cac1196b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.96.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:21:36:af:73:44:93:1b:f0:ef:44:c3:bb:59:22:c3:30:b4:
         e3:ca:e9:1d:3c:9f:61:b0:e5:07:62:86:d3:21:b2:ad:fa:ac:
         26:35:1b:5b:c9:de:25:5a:e9:a2:36:ac:58:84:9a:68:1d:38:
         f8:b8:2c:36:f4:7a:b8:04:a3:f0:bb:88:63:a5:e5:ec:20:4f:
         19:e9:52:da:86:57:e5:0e:c0:52:89:22:47:28:64:04:2a:6a:
         31:99:f0:38:4b:e3:a1:71:5e:f0:c4:da:84:70:d0:28:e0:88:
         00:34:06:47:55:8f:3d:ee:58:79:d5:fb:0e:7b:d3:4e:fa:57:
         9f:aa:8f:1f:e5:92:fb:05:ec:68:40:28:50:1d:91:84:01:f3:
         c1:03:ba:72:61:c2:27:25:1f:f8:67:9f:b2:58:e7:63:a1:db:
         ac:5f:33:55:3d:0e:97:e0:ac:50:2b:5f:60:a6:f3:22:52:31:
         dc:27:fa:b7:3d:84:f0:00:77:d8:19:48:64:61:12:b6:34:6b:
         12:b4:f2:cc:66:ab:c7:dc:a7:65:7c:92:85:18:dd:c3:b5:c1:
         e9:0b:01:57:22:9b:64:a8:48:41:b9:8f:d7:be:ef:d5:82:d5:
         19:da:80:e4:1d:59:d2:94:f7:e7:a0:15:84:e0:13:6d:73:b9:
         dc:b2:b4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:13:21 2026 by rpki-client