Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6/5a0595b2-494f-3a14-a5c1-dae22ac4af46.roa
File:                     5a0595b2-494f-3a14-a5c1-dae22ac4af46.roa (raw, json)
Hash identifier:          MxcXZQPDZji1u/dSfLMpqD7cH3JGniNIfsDhE62Ydnk=
Subject key identifier:   75:96:13:56:01:86:46:0C:E3:BD:B9:D2:5E:3C:89:7F:0A:D7:BB:25
Certificate issuer:       /CN=ba639547-69d9-4284-b9b1-ef6cd6542aa6
Certificate serial:       010D0C9F4328584F4988B86DBB848B7EF8C6B940
Authority key identifier: 9D:AA:D8:AB:28:D7:C6:59:C5:AA:58:E4:D7:88:95:96:3F:B5:59:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6/5a0595b2-494f-3a14-a5c1-dae22ac4af46.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     15329
IP address blocks:        69.67.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6/ba639547-69d9-4284-b9b1-ef6cd6542aa6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6/ba639547-69d9-4284-b9b1-ef6cd6542aa6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:b8:6d:bb:84:8b:7e:f8:c6:b9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba639547-69d9-4284-b9b1-ef6cd6542aa6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f59618e4-64db-4810-9252-4e965718c712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:be:28:f1:fb:a9:14:ae:56:0a:b9:3b:3d:42:
                    67:68:c2:6c:13:18:01:2f:2d:71:bb:f5:b3:5b:37:
                    b3:90:08:0f:1c:35:57:f3:68:e6:8c:1a:d1:46:65:
                    3a:0c:17:77:64:89:a0:51:88:30:8e:ae:71:8b:cd:
                    28:e1:61:d6:2c:48:d3:a0:9b:bc:8b:3f:79:81:2a:
                    3a:7e:4e:83:54:60:c8:52:b7:29:54:03:51:03:4b:
                    63:7c:c4:42:05:74:52:8a:26:b9:cc:ce:77:77:39:
                    c1:60:92:f2:75:70:90:2e:a7:78:14:24:01:50:22:
                    1c:cb:88:07:af:c6:99:0d:ca:c4:91:6b:9c:45:39:
                    b5:70:e5:e9:4d:71:51:dc:23:b7:15:f3:8b:d3:e6:
                    1d:97:22:90:80:62:69:46:bd:31:07:0b:3b:01:0d:
                    1b:5a:a3:34:d5:a2:63:51:6f:80:4f:b8:bd:ae:36:
                    13:20:37:44:07:55:3e:7a:9e:10:fa:86:e3:02:76:
                    90:32:4f:a8:61:35:ef:9b:65:33:4c:fa:67:d6:a4:
                    33:18:f7:36:6b:6b:3d:dd:9d:1b:58:70:61:5c:03:
                    9f:90:31:21:35:fc:8c:2f:7b:1c:1d:f2:bd:da:a9:
                    b3:4a:2d:da:c6:47:bb:65:f1:2b:54:75:6b:13:a2:
                    4f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:96:13:56:01:86:46:0C:E3:BD:B9:D2:5E:3C:89:7F:0A:D7:BB:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6/5a0595b2-494f-3a14-a5c1-dae22ac4af46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6/ba639547-69d9-4284-b9b1-ef6cd6542aa6.crl

            X509v3 Authority Key Identifier:
                keyid:9D:AA:D8:AB:28:D7:C6:59:C5:AA:58:E4:D7:88:95:96:3F:B5:59:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.67.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:82:85:d5:ba:2f:14:0d:2f:53:fe:18:b7:97:0a:24:68:20:
         15:bc:10:9b:55:7b:81:22:65:66:8a:4c:d7:70:cd:95:bd:24:
         07:41:fd:a4:ef:81:74:99:d8:69:d4:9f:35:77:88:75:9d:57:
         7d:59:fc:5f:73:26:0e:a8:bd:21:24:2c:86:bc:23:e1:b4:a9:
         5e:23:4c:2b:f2:00:41:31:52:e9:0d:e0:2f:55:41:5e:69:c5:
         d3:60:80:db:e9:12:3c:a8:10:62:46:45:05:e8:d5:85:78:3f:
         89:e0:28:cc:c4:95:e9:b9:c0:88:b0:56:61:dc:4f:84:ae:5f:
         7f:0f:9a:8f:d7:0f:79:ae:54:c6:9d:ca:e8:fc:9e:e9:f5:1a:
         ee:b4:2d:36:fe:02:9d:ff:06:ad:ab:00:af:ab:59:09:9a:6d:
         c5:7b:68:96:eb:02:dc:cb:56:fc:f0:5e:1e:4d:7f:14:8f:4b:
         d5:5d:5e:a1:db:5f:de:48:d2:86:36:89:1c:d8:c5:d0:66:db:
         5f:f7:63:80:01:7b:fe:8d:bb:76:08:68:14:82:74:a4:7d:c7:
         6c:d8:32:1e:93:06:12:d7:5e:bc:45:5c:37:d5:b2:70:ce:61:
         0d:82:db:d4:42:cb:cc:0c:0b:13:fc:07:6f:9b:10:1c:7f:bc:
         81:ee:fc:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:30:28 2026 by rpki-client