Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/9f21e91b-99c7-35d8-a24a-8f54dd8d743f.roa
File:                     9f21e91b-99c7-35d8-a24a-8f54dd8d743f.roa (raw, json)
Hash identifier:          BVD1GxK6FTM6/IMGVQOYtolAnxo7gZtoxfquHFn7vKM=
Subject key identifier:   8C:26:DE:AB:A8:48:E8:A3:03:2F:CA:36:94:C8:31:E2:87:D6:32:A5
Certificate issuer:       /CN=5294026e-22fb-4d13-b040-a0d74302e57e
Certificate serial:       010D0C9F4328584F0D6CF5A7196222651DE4C280
Authority key identifier: 01:9A:82:A4:B4:AB:DC:DA:9E:35:9F:5A:72:BB:1A:93:59:97:7B:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/9f21e91b-99c7-35d8-a24a-8f54dd8d743f.roa
Signing time:             Thu 03 Sep 2026 13:00:12 +0000
ROA not before:           Thu 03 Sep 2026 13:00:12 +0000
ROA not after:            Wed 02 Dec 2026 14:00:12 +0000
asID:                     10361
IP address blocks:        69.191.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/5294026e-22fb-4d13-b040-a0d74302e57e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/5294026e-22fb-4d13-b040-a0d74302e57e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:6c:f5:a7:19:62:22:65:1d:e4:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5294026e-22fb-4d13-b040-a0d74302e57e
        Validity
            Not Before: Sep  3 13:00:12 2026 GMT
            Not After : Dec  2 14:00:12 2026 GMT
        Subject: CN=67a5c334-f824-4db7-8917-6c51ecfb34ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e4:6f:77:27:b9:5f:11:ec:35:af:18:cc:24:
                    92:0c:c1:73:d1:23:ec:49:39:7b:70:72:ca:19:8a:
                    04:2a:d2:cb:7a:9f:e6:52:be:d0:03:37:9d:52:2b:
                    99:12:77:03:ad:9f:91:0f:de:b7:a2:be:81:85:03:
                    2f:8c:6f:ef:fd:9a:18:d0:e9:12:4b:52:5c:46:c2:
                    73:c7:6c:59:f7:9d:0e:80:35:05:6d:d7:3c:28:bd:
                    96:cd:85:17:21:0b:87:57:9f:e2:5f:91:13:4b:17:
                    b6:f3:a0:e8:70:74:27:60:85:21:e1:2c:07:4e:5a:
                    5f:81:41:8a:c4:fd:f4:55:43:45:55:eb:16:21:77:
                    db:85:50:62:ac:0d:45:d1:ed:26:e3:c6:ba:90:94:
                    b6:eb:6e:16:bb:1f:ca:8c:2e:31:da:98:cf:bb:b5:
                    22:1d:2a:68:c1:d7:bf:4d:8d:fe:06:97:3b:1e:5d:
                    ae:fd:d8:d0:5e:47:4d:b7:b7:52:f0:4f:64:6f:e6:
                    1d:2e:d1:32:49:48:ad:27:c7:0b:34:c0:37:fb:c1:
                    1e:d5:b9:e1:4a:15:09:f7:91:b3:eb:91:41:7a:39:
                    74:91:6c:53:81:14:9e:4b:0f:96:9e:cd:08:e0:af:
                    73:f5:8c:81:03:c3:9f:af:90:8f:bb:e5:8a:06:33:
                    b7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:26:DE:AB:A8:48:E8:A3:03:2F:CA:36:94:C8:31:E2:87:D6:32:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/9f21e91b-99c7-35d8-a24a-8f54dd8d743f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/5294026e-22fb-4d13-b040-a0d74302e57e.crl

            X509v3 Authority Key Identifier:
                keyid:01:9A:82:A4:B4:AB:DC:DA:9E:35:9F:5A:72:BB:1A:93:59:97:7B:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.191.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:33:e3:44:f0:cf:a5:21:02:29:2f:c4:4b:10:06:c4:16:20:
         36:61:28:30:aa:96:e7:b4:9d:62:4b:70:84:84:8b:98:2b:51:
         a7:14:f0:ba:9c:8f:11:1f:c8:47:09:c7:f5:11:f0:89:6b:ec:
         33:7e:f9:8c:bf:1a:a9:a0:28:56:db:c1:64:d7:77:49:a3:77:
         6a:87:ce:ea:dc:96:7c:d9:42:5e:9d:6b:85:5a:46:6d:98:10:
         d3:ad:17:1c:a4:3b:bc:32:40:8a:93:88:36:43:a2:06:5d:a4:
         51:f3:f6:8f:7b:65:e2:11:c6:77:2d:ce:96:d8:0f:2e:85:8a:
         44:10:84:17:d1:ec:d9:22:43:cb:04:ec:5d:74:cb:b4:5f:71:
         15:43:72:0e:16:ad:ef:91:11:57:b2:ee:bb:c1:d6:a2:e6:11:
         88:93:71:ab:54:14:3e:f7:7b:6c:a8:d8:99:af:3b:39:1b:8e:
         cb:8e:a8:ef:1e:05:af:12:b4:f5:a3:ac:c6:67:43:a4:40:68:
         6a:ae:d5:27:16:e4:16:8d:19:db:1d:e8:8a:4d:c3:74:87:ff:
         3c:fc:19:a7:8c:a6:77:51:be:8f:80:59:12:9e:2d:ed:67:ff:
         09:62:a6:22:8b:55:dc:28:a6:28:14:c8:17:4a:b1:ca:13:2f:
         7f:b5:52:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:24:21 2026 by rpki-client