Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6fa4de6b-4cc0-359a-bbf4-87c60f791ffb.roa
File:                     6fa4de6b-4cc0-359a-bbf4-87c60f791ffb.roa (raw, json)
Hash identifier:          DLzfRmC+IY7RVIuOSY8rJ3PwbkGmi6PErhU1D4/nTfc=
Subject key identifier:   AA:1E:AF:B4:2A:51:C0:3B:BB:D6:BB:E3:32:89:C4:E7:9D:97:3E:BF
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584E640FC78231C6B97AEA4BD858
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6fa4de6b-4cc0-359a-bbf4-87c60f791ffb.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     36522
IP address blocks:        69.158.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:c7:82:31:c6:b9:7a:ea:4b:d8:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=9cb4964f-ad45-48c3-8545-be8ba40b6c15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:17:80:01:cf:de:da:0b:25:fc:6b:a9:87:c3:
                    ff:aa:f7:3f:e1:80:b6:cd:97:b6:af:8f:99:e9:ac:
                    c2:31:57:78:31:b8:2d:a4:5b:d0:c7:ec:db:8d:c3:
                    f9:c3:56:61:06:2f:25:ce:fa:ac:e6:fe:92:75:9d:
                    2d:5e:bf:6a:52:32:af:6b:dd:a2:6f:4a:2e:06:91:
                    e1:49:f6:60:c4:80:21:8c:4c:3c:19:71:10:3f:6c:
                    76:11:b8:f5:0a:96:19:1c:b1:bc:0a:c4:f3:2f:7f:
                    0b:26:f1:b7:a0:ba:57:d8:c3:28:f4:4f:c6:c6:f6:
                    15:2b:79:cd:9e:62:c1:2a:3b:db:4c:5d:e1:7c:f4:
                    77:59:39:7a:e5:a5:b3:16:fa:6b:91:a0:0d:0e:5b:
                    2b:6e:c4:dd:a0:6f:89:6a:44:3b:51:da:1a:9e:d7:
                    fb:f4:61:a7:94:a3:14:28:b7:82:88:a3:9a:8d:71:
                    98:ce:0f:1f:03:6a:26:e2:84:90:5a:4d:5c:6e:49:
                    cd:63:bd:01:f2:78:06:99:e3:31:ff:53:fc:b3:4c:
                    7f:23:9b:45:29:26:b9:62:bc:2b:23:d3:ef:56:eb:
                    61:da:64:90:85:cb:7d:cb:37:bf:25:90:5a:0c:75:
                    e0:7d:3a:f2:a2:65:08:b9:a8:3b:37:51:60:08:97:
                    6c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:1E:AF:B4:2A:51:C0:3B:BB:D6:BB:E3:32:89:C4:E7:9D:97:3E:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6fa4de6b-4cc0-359a-bbf4-87c60f791ffb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.158.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:98:59:d6:17:f0:5e:ad:ab:4d:f3:4d:8f:2b:03:f9:d3:ee:
         41:5f:d6:39:b9:02:90:ff:00:1d:74:59:3b:c9:67:a7:c9:82:
         ba:fa:5c:d4:69:6c:ad:e7:a0:03:cd:12:02:af:4d:eb:fb:f4:
         2c:a6:d0:05:14:f3:43:01:d7:f1:cf:98:d4:17:0c:01:87:57:
         aa:6b:09:2f:55:9e:14:93:0f:5a:c8:1b:b0:a3:be:fa:2c:18:
         50:b1:ff:dc:66:c9:22:cb:ca:60:f2:91:90:5b:71:f1:50:24:
         f2:c5:92:31:48:5d:36:ed:a8:6d:5e:f7:f4:44:1a:59:9b:e4:
         3d:35:42:b1:d6:e6:af:00:6c:1d:d7:ff:82:90:37:01:d5:38:
         5d:94:87:f6:14:cb:70:1a:cf:a5:62:4f:07:fd:85:74:f2:a3:
         00:0d:ec:20:d7:ca:82:84:50:6d:a7:3e:ae:ff:15:08:c6:8c:
         66:87:7b:60:73:3f:e2:65:b8:58:32:d1:67:bc:b4:7d:d7:66:
         a7:b6:9d:3d:e2:72:ee:c5:ff:23:2f:20:2a:2f:2b:9d:a0:27:
         1c:23:69:6c:06:bc:f0:df:3e:a3:0e:14:35:af:5a:da:e9:ae:
         52:aa:b6:a0:e1:74:d4:11:07:05:9c:0e:fc:b3:1b:6a:10:3c:
         3c:e4:52:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 09:53:13 2026 by rpki-client