Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/320e9704-5913-3952-ad22-92e63e1f07ac.roa
File:                     320e9704-5913-3952-ad22-92e63e1f07ac.roa (raw, json)
Hash identifier:          ytvmhCAvF0Xbxxn28q2k9ReiunJJEUMebqMZbO8QOKo=
Subject key identifier:   9B:BC:BA:01:FA:9B:18:5D:0F:FF:27:62:23:76:3F:48:8B:23:45:C2
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F52DC4E5953B8DAA8A2C22D40
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/320e9704-5913-3952-ad22-92e63e1f07ac.roa
Signing time:             Mon 28 Sep 2026 09:55:37 +0000
ROA not before:           Mon 28 Sep 2026 09:55:37 +0000
ROA not after:            Sun 27 Dec 2026 10:55:37 +0000
asID:                     218910
IP address blocks:        69.33.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:52:dc:4e:59:53:b8:da:a8:a2:c2:2d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 28 09:55:37 2026 GMT
            Not After : Dec 27 10:55:37 2026 GMT
        Subject: CN=cbb3a7a2-32f9-4bf5-8012-52e344b8e0c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:bb:0e:3d:37:60:11:ee:07:3f:5d:a8:a2:8a:
                    a0:f6:94:d8:20:2b:6f:25:f5:00:27:34:7d:14:fb:
                    59:26:20:7f:5d:b0:f7:da:86:1d:f4:f1:a6:e0:fb:
                    aa:e8:e2:e8:1d:37:8f:48:f3:b9:ae:e8:7c:a0:5a:
                    5c:bc:c9:54:95:5e:d6:4f:db:16:1f:dd:d6:83:f3:
                    fb:af:59:0d:a1:e3:03:ba:8c:da:53:ce:1b:8f:4c:
                    1e:92:b3:86:e8:b4:45:b4:d3:4a:99:ff:84:d9:7c:
                    95:c1:1d:0f:39:5f:70:16:95:79:bf:38:f2:9d:1f:
                    4f:c5:84:e7:ec:01:72:c3:f9:b0:d2:8d:d8:61:ce:
                    59:3b:9c:71:76:c4:20:c4:71:6f:d4:2b:b9:4a:d7:
                    cc:0c:0d:74:e5:29:c6:07:1f:a7:53:a5:1e:de:3c:
                    c1:22:93:dc:6f:a7:e7:47:0a:72:39:d2:83:79:5f:
                    40:ef:27:68:ef:d0:cd:e2:40:ea:4f:08:2e:15:39:
                    81:d7:55:81:f8:5a:be:a4:d4:2a:23:06:a5:e2:be:
                    7f:86:2f:d8:28:06:0a:7b:1f:93:bf:9e:77:e9:35:
                    14:40:f6:37:61:3f:ef:4e:ac:de:63:b5:00:94:7b:
                    d0:74:b2:70:12:34:20:2c:e6:1b:48:0e:2a:26:70:
                    e0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:BC:BA:01:FA:9B:18:5D:0F:FF:27:62:23:76:3F:48:8B:23:45:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/320e9704-5913-3952-ad22-92e63e1f07ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.33.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:0b:e3:ac:e6:42:ba:0c:ac:fa:bd:2c:ed:15:5c:d9:6b:58:
         9f:59:24:47:2e:4a:15:26:49:7b:93:95:cd:05:ad:55:72:bc:
         ce:8b:c4:da:22:78:c9:ab:38:88:f3:b3:ca:c6:e5:c5:df:b1:
         e2:4a:b0:fb:0f:a4:4e:64:1c:e0:ad:64:84:f8:89:c1:60:f2:
         0f:62:9f:fe:0f:f5:cb:ef:6e:59:b1:13:02:8a:1f:e8:53:1d:
         69:b2:cb:a4:6c:f5:12:ec:89:9c:59:f7:6b:1e:b9:ce:a8:e5:
         fd:d8:3d:de:ef:71:98:0a:ce:bf:00:3b:dc:d4:2d:9b:82:f1:
         a7:3e:bd:73:d2:13:45:b0:17:fd:a4:c4:4c:91:93:b8:16:18:
         5d:9e:c7:6c:e0:a6:ce:80:27:ef:1c:f4:a1:44:a8:59:a2:a5:
         7f:a8:53:7f:38:24:d6:d2:93:12:28:83:4d:fe:02:b1:d4:14:
         53:3c:d5:1c:c4:8d:f6:75:13:35:98:48:97:e3:e5:ae:56:97:
         60:44:de:c0:39:78:c9:7d:78:7a:58:7d:84:d3:80:ab:f9:23:
         82:03:b2:c4:ec:a5:4b:66:51:c8:ef:ec:60:1a:b7:2a:50:11:
         7a:1e:c8:72:52:e7:61:9c:66:8a:f4:08:08:5a:85:40:61:ff:
         ce:e5:9a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 12:00:26 2026 by rpki-client