Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a1b14a5-1c26-4b85-aa48-11d083fbc23c/432494fa-c310-30c2-a053-738e9c3cdd00.roa
File:                     432494fa-c310-30c2-a053-738e9c3cdd00.roa (raw, json)
Hash identifier:          0I47hcFWAkARfL1GP2lN3BwtLAW6ICnBB2ZL9KjV+wY=
Subject key identifier:   FA:4C:24:28:C8:E6:57:86:FC:AA:4A:16:17:50:19:20:CC:98:C4:16
Certificate issuer:       /CN=4a1b14a5-1c26-4b85-aa48-11d083fbc23c
Certificate serial:       010D0C9F4328584F27F251E6A9A27186539FA080
Authority key identifier: 3E:86:E0:30:0B:73:16:A3:E1:2A:8E:6E:FB:2D:08:BD:E4:59:E0:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a1b14a5-1c26-4b85-aa48-11d083fbc23c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a1b14a5-1c26-4b85-aa48-11d083fbc23c/432494fa-c310-30c2-a053-738e9c3cdd00.roa
Signing time:             Sun 13 Sep 2026 01:00:12 +0000
ROA not before:           Sun 13 Sep 2026 01:00:12 +0000
ROA not after:            Sat 12 Dec 2026 02:00:12 +0000
asID:                     398780
IP address blocks:        69.59.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a1b14a5-1c26-4b85-aa48-11d083fbc23c/4a1b14a5-1c26-4b85-aa48-11d083fbc23c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a1b14a5-1c26-4b85-aa48-11d083fbc23c/4a1b14a5-1c26-4b85-aa48-11d083fbc23c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a1b14a5-1c26-4b85-aa48-11d083fbc23c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:27:f2:51:e6:a9:a2:71:86:53:9f:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a1b14a5-1c26-4b85-aa48-11d083fbc23c
        Validity
            Not Before: Sep 13 01:00:12 2026 GMT
            Not After : Dec 12 02:00:12 2026 GMT
        Subject: CN=abdbb48c-e972-4300-88a0-3589c0afee91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f0:a3:80:2a:14:51:63:0d:33:41:87:94:18:
                    3b:a2:29:05:28:15:78:ab:c2:09:0a:39:2c:5a:79:
                    0d:01:4f:57:97:6d:31:4f:15:04:ce:65:11:02:5b:
                    d1:bd:ac:9a:66:dc:24:96:f9:4d:fa:c2:51:16:f9:
                    07:cd:25:73:cd:70:c7:e1:88:c1:20:fe:81:42:65:
                    7a:26:b3:50:d3:dc:d4:97:9c:0c:15:93:4b:5f:0d:
                    bc:89:67:bd:38:35:7f:df:1f:4e:f8:62:ff:99:d5:
                    bc:2d:2a:17:35:05:bb:a3:32:ca:87:62:5f:ee:f8:
                    4c:3e:ea:1b:48:d1:ee:77:52:23:9c:39:65:17:5d:
                    e7:1d:87:f0:16:67:0d:96:f7:ae:b7:6d:86:51:70:
                    97:3b:c7:a9:b5:52:93:b1:20:7e:9f:f5:6f:f9:83:
                    9d:dc:8e:d1:d4:20:5c:07:df:b0:df:ff:02:f2:b8:
                    28:0b:e6:c5:75:75:aa:26:f5:ce:6c:34:35:c6:1f:
                    65:3f:7c:c1:dd:5f:b2:3a:c8:9a:c2:5b:65:b8:20:
                    74:aa:7e:0a:1f:9d:96:0a:41:3c:b8:61:74:70:f1:
                    b8:62:b2:d2:9d:4e:95:5f:4a:d9:ed:d3:21:79:3f:
                    c9:5d:eb:6d:cb:d6:1c:8b:79:4d:8e:51:c3:bd:a4:
                    45:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:4C:24:28:C8:E6:57:86:FC:AA:4A:16:17:50:19:20:CC:98:C4:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a1b14a5-1c26-4b85-aa48-11d083fbc23c/432494fa-c310-30c2-a053-738e9c3cdd00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a1b14a5-1c26-4b85-aa48-11d083fbc23c/4a1b14a5-1c26-4b85-aa48-11d083fbc23c.crl

            X509v3 Authority Key Identifier:
                keyid:3E:86:E0:30:0B:73:16:A3:E1:2A:8E:6E:FB:2D:08:BD:E4:59:E0:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a1b14a5-1c26-4b85-aa48-11d083fbc23c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.59.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:88:af:0f:01:d3:0a:75:38:c3:8c:3c:b6:74:e6:b7:0d:c8:
         24:66:bf:97:ce:c7:59:9d:fe:d9:31:df:5e:f4:09:08:2e:fe:
         f1:29:bd:1c:97:2d:c9:b0:92:9f:ee:80:39:db:a5:8b:f4:09:
         b4:08:90:c7:f3:80:d2:14:19:2a:e8:d8:f2:d6:a8:74:07:8f:
         a0:ea:99:7b:a2:21:9b:29:8b:9b:77:1b:ea:29:48:6e:b2:f9:
         3c:98:b7:7d:80:9a:29:a4:c2:6f:1a:c6:d4:6d:03:6a:ef:1a:
         f9:e9:f2:33:4f:84:b3:9a:3d:f4:c4:f4:7e:c5:88:ed:e4:4c:
         a3:da:07:13:9f:a6:3b:ea:39:2a:f9:1f:f1:b9:b6:37:44:99:
         f6:4a:b1:be:b9:36:8f:df:86:a2:fc:04:e7:4e:fe:f5:8e:29:
         63:29:c8:46:3f:b1:4b:26:69:02:ff:ad:46:99:0c:59:66:dc:
         30:fb:68:eb:ab:3d:b3:59:92:d3:48:01:fd:33:31:7f:d6:a0:
         c1:87:f9:c9:8b:d2:a8:6e:f2:96:0e:2c:9a:e2:0c:79:14:14:
         68:d3:3d:f7:40:60:6c:e1:ef:c1:31:6a:07:94:8c:78:01:f3:
         90:ad:70:c9:39:39:41:c3:93:f6:02:1d:be:3d:27:cf:6a:79:
         e6:2d:f6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 20:06:58 2026 by rpki-client