Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/3dc16fb1-8fcf-3b9c-8f3a-ef0006abbc06.roa
File:                     3dc16fb1-8fcf-3b9c-8f3a-ef0006abbc06.roa (raw, json)
Hash identifier:          Vag2jSrGwgcBx3MtSW8pq9KRa8hwTB/8LVFnDZew6uE=
Subject key identifier:   EB:5F:A4:76:ED:5D:6B:AC:0B:84:EB:B5:80:04:CB:5B:DE:3C:46:03
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F4328584CA491AAB912A05D1E390BAE00
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/3dc16fb1-8fcf-3b9c-8f3a-ef0006abbc06.roa
Signing time:             Sun 25 Jan 2026 14:00:40 +0000
ROA not before:           Sun 25 Jan 2026 14:00:40 +0000
ROA not after:            Sat 25 Apr 2026 13:00:40 +0000
asID:                     7015
IP address blocks:        69.91.188.0/24 maxlen: 24
                          69.91.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a4:91:aa:b9:12:a0:5d:1e:39:0b:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Jan 25 14:00:40 2026 GMT
            Not After : Apr 25 13:00:40 2026 GMT
        Subject: CN=b1cd54da-7e04-4d55-987c-597866db9b5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f8:63:ec:34:0b:36:e5:12:47:f4:81:85:c8:
                    4f:a9:c8:39:b5:62:4f:9b:54:b3:f3:c1:64:5a:98:
                    0d:e7:20:ae:59:fd:f6:9e:f1:3d:80:dd:ee:c6:5b:
                    ce:3f:4c:a1:8b:ac:2a:f7:04:59:12:d7:03:10:a8:
                    8e:e6:7b:bd:c5:db:2c:c2:5b:5b:94:9d:40:20:46:
                    dd:d1:5f:07:e5:6c:45:8b:9f:7d:84:9e:9b:5b:bc:
                    6d:86:68:27:a4:5c:39:db:f2:37:ca:56:5d:d1:4f:
                    9f:d4:45:a7:12:57:d2:86:cc:97:3f:d4:24:d2:74:
                    c5:59:cd:b0:89:94:18:5e:f7:3b:cb:bf:61:11:c3:
                    7c:94:ee:95:a2:8f:42:e6:0a:35:b3:b7:22:3d:8c:
                    32:8e:09:d7:51:e5:a9:73:44:0d:65:41:c3:3e:fb:
                    fd:77:92:ad:0c:4d:f7:34:f4:7b:ed:39:df:4a:f9:
                    df:5d:67:92:f1:fc:13:6a:67:ff:0f:fc:df:06:3a:
                    e5:08:f7:a8:3e:74:f6:38:ba:80:46:04:7c:3e:18:
                    ba:5e:73:e2:68:0c:b4:c3:48:f9:31:19:1a:e9:88:
                    03:a9:3f:5b:38:14:98:8d:32:bf:79:78:1b:5c:5b:
                    57:df:44:1b:d1:fe:c8:50:35:f9:18:67:7b:98:39:
                    3d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:5F:A4:76:ED:5D:6B:AC:0B:84:EB:B5:80:04:CB:5B:DE:3C:46:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/3dc16fb1-8fcf-3b9c-8f3a-ef0006abbc06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.91.188.0/24
                  69.91.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:ac:5a:30:33:45:f8:16:02:df:8c:09:61:8b:cf:54:6d:a6:
         4b:f8:30:0e:f9:03:39:54:d5:b3:87:1f:31:3f:16:b8:22:50:
         42:86:ae:35:06:14:9a:38:3d:b4:1a:6b:18:aa:14:3a:d2:17:
         ff:81:4c:5c:b8:a5:34:18:1d:e4:9e:5f:82:46:f4:03:61:e6:
         5d:5f:5d:d0:3b:4c:11:a9:83:52:5d:2a:7c:64:fd:11:64:00:
         62:bc:cc:41:a6:6c:43:cc:ec:f8:85:fe:21:f6:36:71:e0:bf:
         07:88:2c:46:54:1b:0e:f3:29:09:a4:79:bf:35:ca:b4:e7:48:
         d2:61:33:b9:36:e6:d0:c8:b5:0d:dd:e9:ad:72:af:16:c9:cf:
         75:ab:72:19:34:0d:a7:a9:2e:b2:ac:57:f1:bb:87:19:08:12:
         51:53:48:70:e0:0e:ec:6e:bb:8e:76:01:b7:dc:0b:43:3b:f0:
         1d:ee:ad:33:f3:7c:b7:38:39:3e:4e:42:f9:5e:b6:02:de:6e:
         84:d2:94:76:4c:2c:b6:5f:e3:bf:ee:5f:d0:4c:3f:0d:7e:f8:
         b5:76:aa:9d:02:14:0f:71:26:52:7d:fb:fa:67:35:ea:c8:09:
         ab:57:d6:99:81:d7:f1:44:34:47:2f:dc:f9:97:f4:20:26:dc:
         59:17:cd:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:52:04 2026 by rpki-client