Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6fa4de6b-4cc0-359a-bbf4-87c60f791ffb.roa
File:                     6fa4de6b-4cc0-359a-bbf4-87c60f791ffb.roa (raw, json)
Hash identifier:          mppSx6xHN9QSq88+JQmqxjWVXX6XvepCC4A9dWWh1Mg=
Subject key identifier:   0A:3F:EE:5E:DC:22:96:25:08:F0:41:62:E2:89:28:80:6A:18:C2:B0
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F06729A54182101E9D1374840
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6fa4de6b-4cc0-359a-bbf4-87c60f791ffb.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     36522
IP address blocks:        69.158.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:9a:54:18:21:01:e9:d1:37:48:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=e39d52f5-867a-4d74-bdb7-cd0fafe1af90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:de:3d:41:82:ba:1e:a6:c3:bb:f5:d3:a8:69:
                    19:3b:99:ae:41:c7:9c:b3:9b:ff:e0:51:c6:20:44:
                    6b:8a:39:b0:b8:c7:2f:61:73:60:83:d8:fb:40:bb:
                    c7:64:39:78:11:51:bc:83:1b:2d:99:65:86:ad:99:
                    99:de:f5:ee:86:98:54:1c:76:57:94:2a:2b:d2:fc:
                    d3:08:9a:e0:78:4f:f9:2f:68:6a:25:fc:6b:a6:e8:
                    7f:4c:7e:71:72:63:18:a1:cc:c6:6b:67:cc:92:a5:
                    89:8b:eb:6e:ed:32:c1:e7:fa:ab:74:75:f9:33:93:
                    47:3e:06:83:57:e3:27:4b:07:d1:96:aa:65:cd:bd:
                    db:68:7c:70:c7:cf:0a:82:f1:7a:b6:1d:4c:98:05:
                    8c:cc:df:bc:f0:a1:12:4b:fc:ae:f6:b3:27:32:e1:
                    dd:6c:44:35:b8:01:e3:86:fe:9a:3c:c0:79:f3:8c:
                    81:ef:c9:49:cf:c4:c2:6d:e8:e7:f2:39:6c:04:2d:
                    8f:83:f3:47:dc:92:57:77:58:47:0c:41:d3:e7:94:
                    00:ef:0b:5e:1c:b9:78:d8:8b:09:4e:fd:f0:d2:a3:
                    e6:a4:aa:8a:44:d4:ca:93:1c:15:4a:68:00:b5:68:
                    05:74:38:c3:7e:a2:3a:56:9c:ce:bf:19:24:2f:6b:
                    96:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:3F:EE:5E:DC:22:96:25:08:F0:41:62:E2:89:28:80:6A:18:C2:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6fa4de6b-4cc0-359a-bbf4-87c60f791ffb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.158.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:44:7e:80:41:05:0d:47:82:18:91:d8:5f:f8:63:ed:d2:ba:
         5f:3d:a4:84:be:c2:c9:9a:c2:8d:00:36:61:e8:06:e1:13:ec:
         9d:b0:5b:ef:cc:46:53:25:67:8e:f2:61:1a:f0:5b:e3:9c:55:
         1c:83:60:b5:52:29:4f:f3:aa:e0:71:b3:52:4f:f7:2d:05:05:
         96:5e:9c:d5:ed:09:4e:a0:56:b0:ee:56:4f:f5:af:c5:46:fb:
         ad:c7:2f:97:36:df:1c:0f:a3:40:20:20:91:c0:de:f2:ef:33:
         04:e4:4d:26:d8:c0:5f:a8:0b:2f:4d:89:19:0e:4f:ac:f5:62:
         9d:0d:7d:88:61:8b:86:79:63:8b:f4:b6:90:8c:56:5a:ba:e1:
         2a:5b:9c:e4:89:4e:6d:c7:39:78:49:2d:ff:04:41:1c:40:42:
         39:17:d9:5b:87:54:eb:f8:a4:07:57:75:f1:52:47:aa:22:28:
         02:62:29:f5:6b:5b:61:c8:ac:ca:97:78:47:a3:06:12:09:b2:
         0b:a1:9d:1b:d1:a5:7b:e2:94:80:0f:c5:77:c5:5b:39:8b:9d:
         b2:d8:08:fa:57:7b:ce:1f:d6:a8:3b:2b:59:66:36:f0:b0:b8:
         b6:bd:8b:1b:90:53:6c:fb:73:b3:ec:6b:07:3f:3d:5a:c7:8b:
         a9:c7:e5:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 19:08:44 2026 by rpki-client