Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/8ba30d48-e7bd-3d73-8480-c2a633b769bb.roa
File:                     8ba30d48-e7bd-3d73-8480-c2a633b769bb.roa (raw, json)
Hash identifier:          0lsRiZt+hOD8QLPwbv2XlA7exx2EfOxEEev2JRcES/s=
Subject key identifier:   A7:93:7C:E8:19:5A:0E:91:53:F7:B9:62:06:F6:09:60:FF:A3:A4:1A
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584F305264AEB23E0E72684E7F00
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/8ba30d48-e7bd-3d73-8480-c2a633b769bb.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     54858
IP address blocks:        69.42.0.0/19 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:64:ae:b2:3e:0e:72:68:4e:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=4410ab58-6458-45a4-a681-3f4e4628408d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:71:8c:a8:47:c6:19:e6:c6:be:b8:e5:09:08:
                    aa:24:1f:07:af:f1:09:81:94:be:8e:6a:28:89:01:
                    ac:ec:a2:d1:1a:44:7c:18:ff:55:75:42:b1:ea:1e:
                    f2:30:6f:51:e8:f2:68:e0:39:68:c0:5c:98:29:64:
                    e3:ae:df:b0:e6:83:c0:1b:ca:f6:ec:ec:c7:78:d5:
                    be:ae:c1:ff:ff:76:9f:81:63:be:85:e3:0b:2a:e8:
                    88:12:c6:fd:c8:77:bf:df:39:fa:9f:94:79:bb:f4:
                    84:61:49:8a:f4:ad:12:5d:b9:9b:cc:90:55:1d:43:
                    ff:e8:dd:82:c2:50:76:a5:9a:a9:18:3a:6f:6a:59:
                    e1:a6:a7:bd:71:54:a0:62:1e:94:b5:f2:68:49:f9:
                    f0:11:1a:14:57:49:4e:7d:b1:72:73:ac:3b:47:09:
                    a7:d4:6d:88:ce:8e:01:a1:60:41:2a:fb:b6:4c:e8:
                    3e:fa:ae:44:b6:37:c8:53:bb:f8:1d:96:c8:3e:46:
                    e1:c4:d5:b0:db:51:d2:a3:9c:41:8f:c6:4d:6d:7d:
                    55:0f:59:f6:d0:3a:17:3e:2a:cc:27:1f:aa:6b:60:
                    b0:e1:38:ad:aa:0b:67:fa:d9:b5:fc:de:9b:dd:03:
                    eb:64:e8:f7:0e:04:2b:66:ab:65:a3:16:32:ba:2e:
                    ab:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:93:7C:E8:19:5A:0E:91:53:F7:B9:62:06:F6:09:60:FF:A3:A4:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/8ba30d48-e7bd-3d73-8480-c2a633b769bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.42.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:e5:54:12:9b:93:f0:e6:de:0b:63:95:47:b4:12:c3:6b:8e:
         fe:87:fe:26:4e:fa:61:6e:c0:d4:e9:60:7a:9b:6c:0c:b0:18:
         e8:7a:ae:5c:8a:c4:a5:a3:10:88:86:e8:e0:a3:6f:7e:04:8e:
         b3:c9:d4:ce:8d:9b:7a:58:0a:be:5f:94:2e:dd:8c:c1:1d:c2:
         80:a6:cb:cf:a6:e6:80:1d:62:82:44:af:f4:47:4d:47:09:cc:
         81:4d:ad:d7:d6:0f:3b:04:51:4e:41:39:d4:f3:16:f8:30:6d:
         d3:03:15:38:bc:fe:4f:9d:c3:d2:3c:fa:51:5b:4b:28:a6:e0:
         e5:24:67:fb:f9:0a:08:9e:d8:f4:16:3f:ae:1f:6a:1d:91:cc:
         63:79:d2:ef:d6:5c:8c:1e:f4:db:95:2f:95:79:5e:b7:4f:37:
         48:63:d5:e0:00:bb:e5:2f:8d:4d:5d:b8:42:87:3a:fd:67:da:
         da:a7:67:ef:6e:aa:5a:d7:64:3b:75:14:fc:2a:f6:a6:39:33:
         3a:31:4d:de:59:3d:4a:1d:f9:40:b5:72:46:b6:e4:ab:25:99:
         28:2d:e6:3e:5a:63:96:11:08:92:94:62:7f:db:87:f2:21:fd:
         b5:57:68:d8:49:9a:18:25:27:01:da:92:ca:62:48:44:58:91:
         e0:77:0a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:18:17 2026 by rpki-client