Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/a91f6701-0585-395e-ad18-03c9b663d0f6.roa
File:                     a91f6701-0585-395e-ad18-03c9b663d0f6.roa (raw, json)
Hash identifier:          7kiXUhJ/obsr4805fsRhtNaCT+0jRgiA6njxZAHkqz4=
Subject key identifier:   0B:79:89:00:8D:A9:36:29:07:29:D5:49:66:E7:9D:D4:FC:CA:5F:CC
Certificate issuer:       /CN=8e433c1f-a072-4dfd-8096-c6c8634a49f8
Certificate serial:       010D0C9F4328584F225D0900A6DD9D185CF83780
Authority key identifier: 7F:94:5F:DC:7D:33:71:29:D4:44:7E:1C:27:46:6F:58:6A:D4:E2:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/a91f6701-0585-395e-ad18-03c9b663d0f6.roa
Signing time:             Fri 11 Sep 2026 01:00:12 +0000
ROA not before:           Fri 11 Sep 2026 01:00:12 +0000
ROA not after:            Thu 10 Dec 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        69.89.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:22:5d:09:00:a6:dd:9d:18:5c:f8:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e433c1f-a072-4dfd-8096-c6c8634a49f8
        Validity
            Not Before: Sep 11 01:00:12 2026 GMT
            Not After : Dec 10 02:00:12 2026 GMT
        Subject: CN=e1363acf-c6cf-4acb-918f-2294a851e68d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:52:87:19:c2:bc:e7:fb:e7:15:3d:2a:60:41:
                    50:20:d6:a7:68:fd:da:52:4a:e3:da:11:74:b8:f1:
                    7a:07:11:7d:01:f9:08:3a:48:e9:97:6a:fa:ae:5e:
                    af:26:4a:aa:ee:58:ff:03:a5:e7:1c:e3:f6:84:69:
                    61:3f:a6:03:dd:9f:28:cc:20:69:f5:3c:2f:d0:da:
                    1a:4f:d9:46:6d:8c:65:00:79:b4:4e:06:16:10:6e:
                    bd:81:1b:7e:6c:b4:b2:1e:c5:cb:23:68:ab:3a:c9:
                    3a:19:1b:69:bf:1d:12:9b:53:6e:d1:fb:e0:c1:52:
                    69:34:1d:c7:69:db:f4:c6:c8:0c:e7:6d:e2:b5:4a:
                    01:1e:ff:ef:78:d8:8b:14:0e:2c:91:af:96:73:4b:
                    14:38:6f:ae:d3:88:12:8c:7d:c5:03:00:47:ee:f4:
                    ee:ec:56:c9:51:b4:b8:b2:74:e5:8d:da:25:78:a7:
                    d5:e0:22:59:81:cf:bf:57:6b:18:a3:82:f2:76:73:
                    10:9f:c0:8e:10:c2:be:82:96:29:a4:61:a5:fa:e7:
                    b8:15:9c:df:31:6a:ab:72:31:5d:22:48:48:23:7d:
                    31:42:7c:82:aa:7a:57:a0:46:de:ee:50:26:f7:71:
                    05:e6:aa:54:35:a2:29:c2:e3:6b:8a:6e:5c:01:54:
                    3d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:79:89:00:8D:A9:36:29:07:29:D5:49:66:E7:9D:D4:FC:CA:5F:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/a91f6701-0585-395e-ad18-03c9b663d0f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.crl

            X509v3 Authority Key Identifier:
                keyid:7F:94:5F:DC:7D:33:71:29:D4:44:7E:1C:27:46:6F:58:6A:D4:E2:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.89.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:9a:f6:82:14:cd:4b:0e:70:dc:e8:59:78:6e:c9:ba:ef:84:
         d1:f8:4d:a0:3c:73:7d:ba:d2:24:e7:9c:03:4c:76:ef:ba:59:
         0f:7e:23:76:a3:43:22:3c:ec:bc:3f:49:ea:9a:5d:9d:10:b6:
         1d:c0:6e:50:1d:e9:60:51:b3:c0:63:ae:e5:68:bd:09:ab:2c:
         dd:70:f8:79:cb:a5:d9:d1:4f:14:4c:73:33:bf:45:c8:17:7d:
         eb:83:ff:9f:3a:04:7d:fd:b9:62:cc:29:63:44:7f:89:db:e7:
         a7:ad:e8:6c:67:01:a4:16:38:a1:ad:47:21:96:0b:e7:1b:e3:
         da:16:12:6b:d4:22:66:85:55:fd:f5:7d:4d:be:c3:31:41:b5:
         fe:7e:07:92:ff:e0:8e:ff:13:9b:7a:a7:24:6d:95:6a:95:d4:
         d1:92:bb:0d:6c:21:6e:92:1a:56:b1:08:55:f0:0b:78:9e:6f:
         c4:e8:01:46:bf:5e:80:c3:cb:9b:c5:a6:8f:f5:ff:44:70:39:
         e5:57:b4:f0:1a:a2:14:ab:be:02:6b:33:88:36:51:8d:a5:c3:
         e6:d5:54:df:de:a7:a2:30:30:cf:d6:8e:43:7d:86:d9:06:dc:
         80:46:0b:d2:fa:05:af:9a:10:3f:28:92:a5:fa:61:aa:05:ee:
         72:62:11:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:58:58 2026 by rpki-client