Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/df300ec2-57d0-3d27-b4af-5e5d320cc77b.roa
File:                     df300ec2-57d0-3d27-b4af-5e5d320cc77b.roa (raw, json)
Hash identifier:          rb2lDM7rp1ZFm/ctIpciWeaijxc6dkfiEoLi0vZCjms=
Subject key identifier:   48:5D:E7:E5:CE:05:71:F3:DB:90:32:D7:72:D5:C5:6E:B4:E6:36:F3
Certificate issuer:       /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial:       010D0C9F4328584EFCACEBF7C685D6C24A0B9580
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/df300ec2-57d0-3d27-b4af-5e5d320cc77b.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     198949
IP address blocks:        69.89.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:eb:f7:c6:85:d6:c2:4a:0b:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=25b344c7-138c-4211-be97-b0e63e3ace5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:11:dd:39:84:2c:78:a0:f6:af:01:9a:66:38:
                    37:fd:fe:fd:0b:cc:e2:01:d3:85:cc:9f:08:86:11:
                    1f:42:a3:47:c4:68:8b:be:40:78:ce:a3:c9:b4:74:
                    33:ac:91:09:57:2d:92:5f:27:66:10:62:31:49:9a:
                    3a:3c:cd:08:ff:e0:ab:a9:81:60:b1:81:16:c8:4f:
                    a4:db:0c:47:fd:6f:35:5d:22:4f:6f:c4:d8:05:1f:
                    fa:45:44:29:75:90:bd:7a:ee:fb:bc:91:a6:5a:74:
                    ec:b1:af:f4:47:ae:ce:a5:e3:20:04:b1:12:d5:2a:
                    79:3e:12:60:83:99:94:82:26:47:eb:a5:f4:08:6a:
                    4c:89:d3:7d:64:7d:3c:6e:bf:4d:0d:72:21:20:e9:
                    c3:8f:c6:93:2e:ae:f8:20:e5:b5:8b:62:e6:98:87:
                    64:37:cb:ed:6c:a8:cc:cb:01:b7:b1:22:16:82:4e:
                    95:65:d8:66:32:d1:9b:24:91:f1:f7:e6:42:32:65:
                    2e:b7:87:f3:4b:53:86:2a:24:f0:85:b4:31:3c:0b:
                    93:04:dc:aa:8c:f3:09:e0:ef:f0:74:58:d2:d2:83:
                    03:8b:af:1d:24:8d:06:f8:5a:8f:50:34:f8:8a:05:
                    50:fe:e3:c6:c5:27:34:f6:9b:18:fb:95:89:86:05:
                    ed:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:5D:E7:E5:CE:05:71:F3:DB:90:32:D7:72:D5:C5:6E:B4:E6:36:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/df300ec2-57d0-3d27-b4af-5e5d320cc77b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl

            X509v3 Authority Key Identifier:
                keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.89.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:04:26:e3:49:fa:38:17:50:b1:5d:97:71:44:f3:bf:11:8b:
         bb:09:c4:c7:57:c7:9c:c8:8e:b8:b8:87:cb:6b:9c:fa:eb:46:
         17:98:4e:1a:ec:62:93:77:14:f1:9b:73:c3:20:7b:a5:1c:5f:
         09:30:73:b4:c4:2f:b6:ff:ee:22:bb:f6:5a:db:2e:22:03:a0:
         c9:8f:91:0d:bd:27:85:6c:94:fa:e3:2c:4e:be:44:42:c6:c3:
         3c:51:07:a7:ee:91:0b:c7:69:1a:e1:a1:a2:31:71:2e:1b:b7:
         57:05:0f:57:26:36:b0:9b:58:ea:82:22:d0:cd:75:63:a6:7a:
         dd:f4:92:da:3f:d9:ac:33:89:5c:1d:5b:95:71:1b:27:eb:72:
         6f:76:61:70:ef:c7:6b:74:ea:0c:39:dc:bd:76:8c:b6:97:e9:
         ed:96:8a:03:f3:c6:1c:68:52:5b:f1:db:e5:c8:71:92:04:a9:
         f8:19:4f:10:20:bb:73:a7:e5:1e:fc:45:6b:2d:dd:3c:a0:c2:
         2a:80:08:91:8a:5f:11:88:9b:b9:5b:53:6c:01:fe:e1:13:c5:
         3a:b2:4d:02:db:61:3f:fb:04:d6:68:18:4e:b5:e5:5e:32:c9:
         c3:ed:9d:6f:a7:4a:e1:da:94:99:8b:29:5d:e1:82:62:af:cc:
         3d:cb:ab:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:19:03 2026 by rpki-client