Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/91a62e00-d720-3a83-a14d-be5c5b4ce1f9.roa
File:                     91a62e00-d720-3a83-a14d-be5c5b4ce1f9.roa (raw, json)
Hash identifier:          WoUhKbNQ6soL4AtRAOsE++fi6wlmkv64dTRS7ZDeVXk=
Subject key identifier:   46:B9:B6:6A:3B:48:71:28:60:F9:99:25:9B:7C:4C:B1:A3:F2:3C:0C
Certificate issuer:       /CN=e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0
Certificate serial:       010D0C9F4328584ED001F3F1B24CC25D2EF63440
Authority key identifier: 0D:39:5C:E3:0D:1F:BD:B6:79:8A:1D:50:60:EC:FC:62:57:43:80:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/91a62e00-d720-3a83-a14d-be5c5b4ce1f9.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     19471
IP address blocks:        199.68.160.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:f3:f1:b2:4c:c2:5d:2e:f6:34:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=8ea91d35-4dab-4aee-ba1e-38aa037c7afd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f6:04:e8:bd:7a:60:1e:7a:fd:a2:ce:33:c3:
                    78:86:3f:2c:6a:d3:2f:28:fc:cc:08:ed:c3:1c:6a:
                    27:4a:f0:45:83:97:9d:fc:70:d1:a5:71:72:16:2e:
                    5a:4d:58:2b:0e:cf:11:ce:43:b5:b6:f0:fd:ed:99:
                    28:be:5e:ef:ad:04:e9:9b:78:00:07:c1:5b:46:7e:
                    e1:fd:d7:8f:12:43:90:d4:34:d3:68:b3:4c:1f:55:
                    6b:81:af:ec:76:69:cd:4c:76:77:1c:cb:05:c9:ee:
                    d2:35:6e:e0:50:d9:1a:db:7f:5c:4f:13:83:d6:78:
                    80:61:fc:25:4d:5b:c6:92:73:02:72:0b:ea:af:4d:
                    a5:a4:4a:37:ca:46:f4:53:f1:1c:a3:5b:f3:07:f5:
                    38:04:37:bd:76:e8:52:09:8d:fa:2c:be:15:7f:31:
                    75:78:9f:0c:a0:b9:92:d1:04:5e:64:d9:83:44:f3:
                    79:56:d0:40:02:85:fe:45:68:21:b5:11:35:24:b5:
                    dd:c4:46:d4:94:a9:7a:a5:9c:fa:20:23:23:75:8c:
                    93:32:a0:81:5b:0d:4f:c0:1f:5d:0d:df:b1:ec:b4:
                    df:bf:dc:58:9d:af:5b:6d:78:6b:48:29:f2:0f:0d:
                    11:e2:e2:f5:87:cb:55:54:8d:f5:88:63:6c:a0:dd:
                    b3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:B9:B6:6A:3B:48:71:28:60:F9:99:25:9B:7C:4C:B1:A3:F2:3C:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/91a62e00-d720-3a83-a14d-be5c5b4ce1f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.crl

            X509v3 Authority Key Identifier:
                keyid:0D:39:5C:E3:0D:1F:BD:B6:79:8A:1D:50:60:EC:FC:62:57:43:80:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.68.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:31:b3:ea:56:03:df:a0:a7:4e:31:6a:27:ab:f0:fb:0d:d1:
         93:40:26:be:da:e5:c6:00:74:9d:48:5f:4e:41:11:c8:37:4e:
         85:fd:82:75:07:05:58:64:dd:ba:f8:09:b9:8e:0e:60:c8:19:
         d2:59:82:72:f2:c2:4a:a0:ca:d2:f1:2b:88:0f:66:a4:96:36:
         05:29:5d:21:e0:af:31:18:d8:f7:12:87:82:6f:19:9f:37:44:
         91:e3:d4:9d:7a:20:44:07:85:4e:b3:42:69:95:e2:87:17:ae:
         0d:7e:97:e8:d3:4b:74:81:99:b5:fa:e4:58:2e:b5:44:e0:3f:
         22:d1:f5:55:61:30:4c:06:6d:f6:94:f7:90:41:61:1e:c4:bb:
         9f:6b:ba:5b:f3:3e:4f:da:76:d7:98:a4:fc:0e:6a:60:72:d0:
         e5:5f:99:c5:76:34:e5:5e:1a:4d:be:60:d1:c8:3f:b5:45:0f:
         e4:35:87:dc:21:c2:fa:a2:fd:47:96:6a:f9:9a:ef:e1:3c:b0:
         f0:0a:c3:ce:b0:47:b3:d9:3a:87:8e:ce:4a:f3:f7:1f:73:a0:
         c1:e0:8d:21:d8:0f:e3:73:35:00:9b:6f:32:6b:50:2f:c2:63:
         26:0e:76:e4:f0:11:ea:01:f9:02:78:64:d0:3b:b1:ef:ba:7e:
         7e:f6:29:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 13:57:44 2026 by rpki-client