Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/ea443fec-6835-385f-81fe-3d064ac0a2e7.roa
File:                     ea443fec-6835-385f-81fe-3d064ac0a2e7.roa (raw, json)
Hash identifier:          P/KOyM43omqaqtsGsYRd9GMYNJlXMGHr/55F9r+Ve44=
Subject key identifier:   ED:C3:74:FF:D4:A8:EC:A8:43:CC:46:7D:76:5A:A8:A2:D5:4B:84:FD
Certificate issuer:       /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial:       010D0C9F4328584F5E62F0F33A170168665E2100
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/ea443fec-6835-385f-81fe-3d064ac0a2e7.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     12025
IP address blocks:        69.71.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:f0:f3:3a:17:01:68:66:5e:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=c0b5267f-39c4-4142-acdf-febc4633a44a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f6:36:22:bb:cf:e6:bb:c4:0a:b1:a0:1d:b2:
                    a8:de:64:cd:57:ce:1c:d3:57:cd:53:14:24:c6:3a:
                    a1:54:c3:0a:a9:6b:64:4a:bc:29:89:6c:9b:fe:84:
                    be:8e:51:15:91:69:a0:5b:50:9d:cf:de:ae:e2:86:
                    c4:31:45:03:92:98:84:93:2a:6c:80:d2:5c:bf:5f:
                    2f:ab:64:e8:26:61:5e:9c:5e:4e:a4:8d:d0:82:65:
                    5a:e8:11:1a:35:4e:2f:d4:e0:ef:0c:73:7f:31:fd:
                    7f:c1:36:e9:5c:dc:d7:bf:78:f5:e1:fb:40:ac:e7:
                    95:12:b6:90:6a:5b:07:db:46:fa:6f:b4:77:65:22:
                    ad:54:f0:51:44:8a:28:2d:d3:ec:81:b7:4f:98:54:
                    16:b1:84:f8:09:9b:06:d4:10:71:a6:5b:36:8b:86:
                    3a:09:d3:6e:ff:9f:55:2e:db:a2:57:42:32:19:2d:
                    66:75:07:0b:b9:15:7c:7b:7a:6f:ef:7b:08:19:2d:
                    ef:89:c0:5e:f1:57:f6:27:8c:0d:ed:a6:44:60:14:
                    54:14:03:41:46:c4:2f:0f:d0:10:0c:11:95:c0:3e:
                    33:9a:17:67:cb:9e:ff:4c:c5:78:56:0a:0f:a7:1f:
                    48:6c:b9:79:0d:8a:94:26:72:7e:e1:33:c5:15:e7:
                    63:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:C3:74:FF:D4:A8:EC:A8:43:CC:46:7D:76:5A:A8:A2:D5:4B:84:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/ea443fec-6835-385f-81fe-3d064ac0a2e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl

            X509v3 Authority Key Identifier:
                keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.71.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:65:a6:5f:77:c0:76:0b:3e:00:b4:75:a4:e4:03:65:40:32:
         84:f8:8e:12:1a:82:7f:95:68:cf:28:97:86:cf:8f:dd:35:90:
         5d:4a:5c:4f:0e:f3:c1:31:7d:84:fb:c8:eb:eb:38:f0:61:da:
         c6:d0:a8:84:be:7f:a5:d5:f1:82:84:cd:57:bd:d3:0b:43:76:
         77:d3:1c:0c:d9:df:04:87:5b:cb:d6:2f:86:16:a9:37:06:ad:
         d5:93:20:ef:85:c3:90:be:b8:e7:73:12:e1:9d:f0:ab:2b:f3:
         94:4f:67:f3:cd:1a:a4:01:1b:16:1a:76:96:31:f8:c2:62:04:
         91:99:2b:66:a0:86:c7:e1:92:04:60:45:98:73:cd:18:05:a7:
         ad:a0:bd:2f:5f:6e:d2:16:e3:3d:2a:ab:1b:9f:4e:c8:2c:13:
         dd:30:69:ee:39:c6:a0:76:af:84:3f:94:68:41:04:1d:b5:d3:
         68:2f:a5:0d:6b:b0:fa:32:aa:96:3c:d1:47:df:74:e6:3c:12:
         c0:28:ae:4a:4b:63:91:c8:ea:08:a5:68:3c:35:95:4d:18:d4:
         45:8a:62:63:cd:4e:6d:06:2c:14:24:3b:a6:9f:22:31:bf:e7:
         90:d0:fa:dd:82:40:a8:e6:6a:f0:c3:ec:88:36:30:33:8e:53:
         42:57:98:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 00:37:03 2026 by rpki-client