Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e032ebb9-7d48-37a7-9ea8-1a0eb6e1b453.roa
File:                     e032ebb9-7d48-37a7-9ea8-1a0eb6e1b453.roa (raw, json)
Hash identifier:          itsB6CRm+7wDNbSzAx9EZN1Z664EMXzXrHmeasIOI8U=
Subject key identifier:   61:AA:88:FB:12:CD:16:45:9C:34:F7:D3:23:03:47:5A:B1:1F:9A:85
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328584F03A780D7F830CB5622749240
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e032ebb9-7d48-37a7-9ea8-1a0eb6e1b453.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     19670
IP address blocks:        69.74.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:80:d7:f8:30:cb:56:22:74:92:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=e24cb064-cb99-4f92-8479-84b2f7c66618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a8:74:4d:ce:ea:b6:89:77:d2:04:c5:91:f9:
                    80:a5:fa:63:02:da:87:b7:ed:9d:53:bd:16:90:bb:
                    f3:aa:8f:08:cf:bb:4f:61:5c:4a:6f:fd:a8:e0:c7:
                    a5:9d:4c:08:5b:86:16:e6:d0:9e:3f:4e:47:b8:14:
                    71:2a:84:94:d0:9a:ce:58:75:b6:25:ab:b9:f2:f6:
                    d1:0e:27:1e:09:e7:87:f6:d8:34:f3:1b:6e:71:fc:
                    e9:16:38:00:5d:ac:fa:31:29:04:ad:f4:a3:b5:bc:
                    9c:59:c0:60:32:62:7c:cc:52:fa:ab:31:38:62:d6:
                    f4:e6:c3:89:b4:c1:40:55:44:a1:75:25:64:9d:23:
                    bd:e1:7a:08:92:3d:c3:78:99:56:c6:56:57:5e:ec:
                    bd:00:aa:a4:b6:47:78:73:4c:82:91:b7:77:d1:25:
                    2f:74:09:ef:b0:4c:0b:af:f0:c3:11:37:d7:93:40:
                    f7:8a:3d:4a:87:99:6b:9b:a1:6d:52:8b:f8:5c:3f:
                    25:5c:3a:3d:78:c9:88:d4:bb:ed:ce:03:3c:e2:ba:
                    50:1f:03:cd:17:90:04:6e:c9:78:07:4f:b7:81:9f:
                    48:95:00:a1:79:24:cb:7c:c6:e2:69:67:37:ee:f1:
                    76:51:3c:ff:c1:49:ac:22:49:96:88:1b:4a:e3:c9:
                    42:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:AA:88:FB:12:CD:16:45:9C:34:F7:D3:23:03:47:5A:B1:1F:9A:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e032ebb9-7d48-37a7-9ea8-1a0eb6e1b453.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.74.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:9b:25:a3:ef:02:79:0b:2e:34:a5:df:52:6b:2d:33:4b:23:
         57:dd:a6:bf:9d:24:23:8e:f6:4e:d6:7d:1a:24:2f:b5:14:d7:
         f5:31:a4:bb:ec:17:1f:8e:b8:82:31:b8:e2:a5:17:71:4a:17:
         90:3e:d1:ec:51:14:72:c4:4e:a0:8a:88:2e:29:26:94:ac:52:
         15:8a:ed:f1:c0:55:59:c1:4a:36:7e:86:76:7a:b9:35:d3:ff:
         2b:d3:02:f9:6c:ce:5f:f8:ad:ae:8e:58:3b:60:0f:35:8b:14:
         78:05:8b:78:27:96:b4:8a:6e:85:18:e5:79:0a:cc:0a:bf:02:
         dc:6e:c7:d5:25:6a:20:e6:a5:11:4d:45:b0:d4:92:5c:12:83:
         35:d0:d5:21:58:9f:95:f7:00:ed:4c:8f:37:dc:9f:c9:23:11:
         20:ce:9c:d4:00:92:a9:47:3f:fb:8b:ab:31:70:c0:73:41:cd:
         e0:50:32:54:ac:f8:dd:35:43:c7:60:2e:89:d4:14:69:3c:75:
         80:b2:78:6b:37:38:96:59:03:16:03:33:1e:65:d7:72:6a:49:
         fb:de:46:05:e5:b5:ae:51:0d:1a:1f:f1:67:1d:d9:f6:b0:db:
         de:c2:c1:75:19:66:68:9f:d4:d0:80:52:5a:ee:bb:55:07:93:
         e6:11:bb:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:43:58 2026 by rpki-client