Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/894f1c41-1b5a-34b8-b687-921a5c8a47f9.roa
File:                     894f1c41-1b5a-34b8-b687-921a5c8a47f9.roa (raw, json)
Hash identifier:          MuJNldRU4WKitcDhxN8g5PjeHc/tPNPmUlf0Rkxk2r0=
Subject key identifier:   4B:E4:12:91:D3:0F:DF:7A:87:19:CE:CC:D9:62:80:BA:8D:A1:FC:4F
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584D83CB13A477F94EAC0DC8AF00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/894f1c41-1b5a-34b8-b687-921a5c8a47f9.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     577
IP address blocks:        69.159.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:cb:13:a4:77:f9:4e:ac:0d:c8:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=599b4cc8-3e4b-4042-851b-cab8b346536e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:fd:16:4d:62:bf:60:bd:c4:cc:4f:5e:4b:1f:
                    6d:83:3a:4e:a8:76:ff:dc:df:5d:ee:65:4d:8e:a9:
                    00:fa:3a:39:df:3d:a8:bf:c3:19:36:5d:63:09:43:
                    3e:e4:3b:23:82:4c:1d:c3:55:2e:b7:60:c4:a0:8a:
                    94:96:f6:f9:b6:44:5c:c5:7c:63:57:d1:cb:78:70:
                    6d:22:ee:1a:27:31:8f:9e:ab:32:4f:8c:73:98:bb:
                    24:af:3a:fa:40:ac:9a:eb:f2:bd:3c:fc:13:a9:01:
                    eb:cb:e5:a2:0c:02:ad:0a:20:a1:66:be:92:d2:5f:
                    0c:3a:9b:dc:bb:1e:84:12:72:32:41:f6:4d:fd:4c:
                    d1:73:d2:a1:44:6a:c3:f4:cf:49:5f:67:29:f5:5b:
                    11:c2:4c:ba:2b:08:4e:23:80:16:0c:d7:c8:f4:63:
                    80:26:27:1f:de:46:e3:d0:8d:61:9a:e5:b4:0a:34:
                    c3:ff:c6:4e:c3:df:38:50:30:f2:a7:9f:bb:49:00:
                    54:2f:ae:f9:57:83:ee:97:fc:60:1b:f8:b8:30:93:
                    c0:f8:a2:a5:2b:27:be:8c:e7:46:90:83:42:62:2d:
                    64:9f:90:f6:75:c2:fd:bc:3c:c2:15:bf:1a:be:ea:
                    82:8d:8b:c3:56:f6:55:e5:1c:b1:4c:af:9b:5c:7c:
                    38:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E4:12:91:D3:0F:DF:7A:87:19:CE:CC:D9:62:80:BA:8D:A1:FC:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/894f1c41-1b5a-34b8-b687-921a5c8a47f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.159.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:fc:ef:13:0d:b9:cf:e4:fb:a9:57:68:99:4a:73:0b:86:fb:
         5b:23:94:cc:fe:88:fc:70:c4:fa:98:d1:42:f8:1a:25:5e:b0:
         e0:cd:27:9d:65:14:51:73:6d:13:47:5c:3d:5d:55:a0:b4:c0:
         cc:2a:08:63:c8:7d:b6:f1:c8:a6:15:9f:7c:70:ac:1a:38:a6:
         a5:a3:03:05:c2:d8:69:ba:f3:33:14:ae:ca:47:05:7f:65:32:
         93:fc:18:d9:b9:17:bc:55:d0:1c:6a:f4:27:18:90:7e:75:f5:
         07:9a:40:ae:b5:89:7b:00:fe:52:06:c7:9b:28:c2:22:91:49:
         bf:fe:1d:86:34:31:35:7e:fc:b7:66:14:0f:0b:6e:0c:2d:24:
         73:60:99:46:d1:22:b4:9e:c1:55:fe:ca:8e:f6:6d:42:a6:34:
         c4:c7:b7:11:72:d5:c4:1c:1d:35:22:f8:e0:dc:74:1e:89:44:
         f7:f0:4d:9d:35:ac:27:a0:19:b3:39:a8:7c:26:e4:22:4d:eb:
         35:d2:ab:52:1a:ab:70:12:7f:f9:b8:da:0e:83:dd:68:52:4f:
         ea:38:9e:8b:4b:80:fe:0b:60:ab:d2:26:9c:5a:b3:22:99:2a:
         e3:0e:cc:01:63:d5:58:f5:2d:1c:f6:2b:df:ea:37:04:a2:8b:
         c1:47:26:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:48:30 2026 by rpki-client