Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/94916b64-4c0a-3fc1-83e7-d5592a3cb5d3.roa
File:                     94916b64-4c0a-3fc1-83e7-d5592a3cb5d3.roa (raw, json)
Hash identifier:          2D451vIdtQmormySpot1vpU3kZw+ACZoSZArXYsfBQI=
Subject key identifier:   7B:28:4B:12:E6:4F:65:9A:CF:4E:11:F6:74:48:21:A8:F8:F9:B8:C3
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F4328584F0DEC39035E56289CFFDED780
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/94916b64-4c0a-3fc1-83e7-d5592a3cb5d3.roa
Signing time:             Thu 03 Sep 2026 17:16:55 +0000
ROA not before:           Thu 03 Sep 2026 17:16:55 +0000
ROA not after:            Wed 02 Dec 2026 18:16:55 +0000
asID:                     22773
IP address blocks:        69.91.133.0/24 maxlen: 24
                          69.91.137.0/24 maxlen: 24
                          69.91.141.0/24 maxlen: 24
                          69.91.145.0/24 maxlen: 24
                          69.91.149.0/24 maxlen: 24
                          69.91.153.0/24 maxlen: 24
                          69.91.157.0/24 maxlen: 24
                          69.91.161.0/24 maxlen: 24
                          69.91.165.0/24 maxlen: 24
                          69.91.169.0/24 maxlen: 24
                          69.91.173.0/24 maxlen: 24
                          69.91.177.0/24 maxlen: 24
                          69.91.181.0/24 maxlen: 24
                          69.91.185.0/24 maxlen: 24
                          69.91.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:ec:39:03:5e:56:28:9c:ff:de:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Sep  3 17:16:55 2026 GMT
            Not After : Dec  2 18:16:55 2026 GMT
        Subject: CN=a8f8545a-2b99-43ba-8356-e51769676c1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0f:29:f7:4a:c2:cf:bb:56:4c:ad:2a:20:13:
                    64:ff:89:d3:e9:84:e9:f9:d4:44:d2:e0:c4:56:46:
                    53:89:80:dc:c2:fe:70:dc:57:e1:8d:19:47:02:83:
                    e7:a5:ba:b1:a4:1e:8a:e2:c7:d3:ef:ee:63:a6:78:
                    ae:b3:60:79:69:ed:72:95:c8:d1:88:da:8f:a3:ad:
                    f9:33:fb:5c:2d:05:ee:8d:23:54:1d:5b:d9:b6:07:
                    b4:14:94:0d:30:02:f2:37:16:0c:00:45:ec:00:5a:
                    2f:aa:76:d4:88:8e:5a:fb:fc:e6:ca:c6:6d:53:43:
                    74:b3:26:7a:32:d0:90:b0:95:a7:78:86:0b:93:45:
                    39:36:f1:46:a0:f0:be:b1:ce:db:bb:e4:48:d2:28:
                    e1:a7:a5:56:96:94:31:48:6b:b1:ad:31:e6:c3:e9:
                    48:da:9f:62:0f:3d:fa:37:2d:d1:55:64:38:57:e0:
                    b1:e7:4d:b1:e5:16:c0:b8:2f:90:33:cf:b9:46:54:
                    b7:d4:c4:6b:6e:81:44:a1:38:aa:75:d1:ab:23:48:
                    37:50:84:81:44:0f:3e:bb:1c:09:da:4b:8b:58:d1:
                    8e:0a:18:16:1f:98:c4:57:73:9b:f9:55:5e:10:e9:
                    7f:11:7e:b0:7a:45:13:80:ec:0a:eb:98:35:28:f7:
                    ac:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:28:4B:12:E6:4F:65:9A:CF:4E:11:F6:74:48:21:A8:F8:F9:B8:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/94916b64-4c0a-3fc1-83e7-d5592a3cb5d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.91.133.0/24
                  69.91.137.0/24
                  69.91.141.0/24
                  69.91.145.0/24
                  69.91.149.0/24
                  69.91.153.0/24
                  69.91.157.0/24
                  69.91.161.0/24
                  69.91.165.0/24
                  69.91.169.0/24
                  69.91.173.0/24
                  69.91.177.0/24
                  69.91.181.0/24
                  69.91.185.0/24
                  69.91.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:ca:b3:b9:af:72:84:7a:83:0f:8e:ae:e5:cf:d2:97:a4:6a:
         30:51:1d:23:13:fa:e6:38:e6:c7:e4:dc:c9:2f:9c:d9:56:02:
         46:9b:7c:38:dc:7c:49:75:1e:ba:b8:f5:2d:7b:3b:46:16:0c:
         a5:44:00:24:d1:5e:64:e0:5e:54:3c:a2:6a:1f:90:b4:cc:0a:
         67:b5:e0:b1:4d:d0:5b:bd:0b:a4:2f:4d:22:ff:f0:9f:bd:8b:
         18:66:55:78:59:a8:be:ef:18:82:58:26:69:49:3c:2a:e0:54:
         83:e1:2e:0f:2c:fc:e3:cb:01:d1:63:ec:a1:b9:f9:61:80:65:
         e3:58:26:7d:af:d1:b2:ff:2a:09:95:63:db:04:a1:d9:ec:b5:
         83:ef:30:09:58:f5:11:0e:c9:2c:72:81:61:36:0e:1c:cf:d6:
         c9:5c:ff:cd:33:c3:a2:0e:3a:e0:f2:78:5b:9e:4f:9f:2f:0f:
         63:32:ff:87:18:9b:78:93:b2:6b:de:bb:b5:7f:f5:eb:b5:2b:
         9c:2c:2f:da:6b:92:1b:ab:64:33:58:dd:6e:28:b3:95:41:e8:
         0d:6e:b4:21:33:f3:89:6d:9c:9f:cb:86:08:04:c3:47:a6:53:
         eb:b6:26:0d:65:50:78:86:c8:40:b0:0b:a9:4d:7b:49:eb:ce:
         c3:7d:a9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:00:07 2026 by rpki-client