Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/343e0f17-2e70-3a63-9fff-0ace74e0dfd5.roa
File:                     343e0f17-2e70-3a63-9fff-0ace74e0dfd5.roa (raw, json)
Hash identifier:          Kfvaw0oLUv6RL2u96VSjv654Uo11WQLeif5P3Ppplws=
Subject key identifier:   3F:2E:C0:92:3B:CD:DF:E5:22:72:61:6C:77:A2:0B:66:B1:82:22:10
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F4328584F374D5336EC452138943BC740
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/343e0f17-2e70-3a63-9fff-0ace74e0dfd5.roa
Signing time:             Fri 18 Sep 2026 13:00:12 +0000
ROA not before:           Fri 18 Sep 2026 13:00:12 +0000
ROA not after:            Thu 17 Dec 2026 14:00:12 +0000
asID:                     31898
IP address blocks:        69.49.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:4d:53:36:ec:45:21:38:94:3b:c7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: Sep 18 13:00:12 2026 GMT
            Not After : Dec 17 14:00:12 2026 GMT
        Subject: CN=7de3731c-41a9-4b3b-8122-d0cb1ded4dd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:42:e0:bd:2f:99:d2:88:9c:7b:40:35:14:e4:
                    ff:ec:ae:6b:12:f7:00:7e:2f:d6:8a:9c:ab:dc:98:
                    1c:26:20:73:46:d6:fd:be:b2:ff:ab:08:39:40:07:
                    52:ba:bc:df:5b:6f:61:7e:57:e2:3a:b0:0a:41:96:
                    86:ef:c5:42:77:92:cb:ab:d3:54:86:dc:76:d8:b3:
                    96:c2:9c:5e:b3:4e:60:73:aa:6b:c6:0a:2e:e5:70:
                    ac:3d:97:48:5b:0b:15:bf:79:7c:1c:29:17:2e:f9:
                    80:00:8d:c1:b4:fb:8c:ba:b5:01:af:b0:a7:12:ce:
                    1c:c4:2f:12:6d:4f:0f:39:56:21:7a:00:4b:ed:d4:
                    f3:bd:a2:87:cb:6b:37:70:a3:da:06:05:19:54:5e:
                    d1:66:8a:a5:6b:8e:00:9b:8a:c3:f9:05:ec:b9:cf:
                    70:cb:9c:b7:9f:4d:94:01:ba:cb:77:02:ac:4d:c2:
                    68:59:83:6f:61:20:a3:0c:8d:e2:a1:35:b2:e5:2b:
                    58:90:85:58:c1:12:32:fa:b1:65:45:b9:ba:b8:d1:
                    ec:3d:39:7a:d6:4d:f9:73:d7:08:60:e7:2c:a3:10:
                    56:a8:bc:b0:48:c4:f6:cb:7b:be:2b:e2:bb:23:fa:
                    29:a6:69:19:3b:28:51:1d:56:fd:92:6b:cc:51:7d:
                    d1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:2E:C0:92:3B:CD:DF:E5:22:72:61:6C:77:A2:0B:66:B1:82:22:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/343e0f17-2e70-3a63-9fff-0ace74e0dfd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.49.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:30:aa:63:d2:75:ab:18:14:61:f6:05:a7:5b:01:e6:c1:82:
         a7:46:2d:0b:6a:81:62:c1:78:81:79:55:7f:a7:ed:17:c4:52:
         27:88:3e:62:93:e5:3e:5f:a3:45:b0:bf:ed:2d:a0:74:c1:e5:
         f9:c5:a1:fc:d1:ad:14:8a:1e:33:fa:96:66:2c:88:61:58:9d:
         ba:37:4c:85:84:84:52:be:76:dd:34:f7:e8:69:b1:29:c3:bd:
         6d:e9:66:1c:ac:f7:92:87:f1:51:a3:f0:6f:75:5e:05:72:66:
         d7:04:21:de:37:ea:55:82:15:be:f5:53:92:5c:f8:d7:af:e9:
         18:9a:ff:e1:18:bc:ca:02:e6:93:b2:1d:cb:db:58:b4:93:f6:
         89:00:37:f1:be:d5:54:47:7c:83:8b:1c:12:18:a0:c8:72:9d:
         98:7c:83:1d:e6:e1:b8:e2:21:b8:fb:3c:f6:25:d6:78:60:c5:
         91:35:80:56:51:2e:ec:55:ef:98:88:3c:6b:f0:e1:cd:18:b7:
         4e:e6:e1:5e:be:c9:e9:91:20:07:d7:9b:38:e2:1b:96:7e:3f:
         a6:92:eb:a3:84:9e:a3:9c:91:35:88:12:00:a7:98:88:04:a1:
         7c:05:e0:b3:97:b8:13:4f:eb:18:a7:1d:a0:88:4d:a4:42:18:
         39:69:84:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:20:26 2026 by rpki-client