Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/d683b615-7561-3b21-8d29-1a646004c1fa.roa
File:                     d683b615-7561-3b21-8d29-1a646004c1fa.roa (raw, json)
Hash identifier:          gf4D8+6/tSUll2Nk1Vfg7wSpPFQPRiuf366R5TujYFA=
Subject key identifier:   FE:63:5F:CC:92:1C:5E:7C:C3:77:71:5F:3F:6F:60:56:1B:0A:B1:9E
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584F7BB2F51193F2D8868346FEE0
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/d683b615-7561-3b21-8d29-1a646004c1fa.roa
Signing time:             Tue 13 Oct 2026 01:00:14 +0000
ROA not before:           Tue 13 Oct 2026 01:00:14 +0000
ROA not after:            Mon 11 Jan 2027 02:00:14 +0000
asID:                     13768
IP address blocks:        69.90.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 23 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7b:b2:f5:11:93:f2:d8:86:83:46:fe:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Oct 13 01:00:14 2026 GMT
            Not After : Jan 11 02:00:14 2027 GMT
        Subject: CN=5d378dd2-ac3d-4f63-b1cf-2eeae1e4b3e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d9:44:e3:09:69:63:fa:b1:41:5c:27:c4:68:
                    7f:ca:38:0c:53:e5:32:7a:21:84:fc:df:56:52:d9:
                    24:8d:3e:1e:1b:3c:3c:ec:79:99:34:93:cb:46:f0:
                    20:80:82:f5:b1:a1:95:4e:2b:57:59:c8:c3:2d:1f:
                    92:84:2a:86:5d:7f:32:57:f3:78:63:56:66:51:68:
                    02:2c:93:4f:31:e1:6c:a7:72:83:54:05:7c:13:d5:
                    25:3e:d6:6e:c1:d1:e0:98:da:1c:e9:6b:2e:a9:67:
                    be:55:c8:55:44:f6:98:7f:39:fd:12:d2:35:a9:61:
                    08:0e:64:b1:f5:e6:84:55:d0:b2:2c:a9:c4:fd:7c:
                    3f:1b:62:82:2b:a6:22:b0:bb:a0:d9:84:fd:ec:ae:
                    70:43:6d:bb:76:6c:e3:51:cc:81:6c:c7:6c:97:10:
                    19:bc:15:ef:05:95:39:f8:e0:b0:4f:fb:58:c5:87:
                    bf:23:a9:85:09:9e:9e:84:f0:c8:33:b4:bf:30:b1:
                    38:e2:4d:25:07:5f:a2:4e:bd:b4:78:bc:fa:ef:90:
                    48:fd:37:66:af:c9:45:b5:c8:14:96:d3:c9:9c:52:
                    90:7c:92:c8:86:90:38:9d:72:57:e0:6a:96:c0:6f:
                    60:be:7f:e6:10:30:79:f7:e5:4f:08:94:28:6a:5a:
                    25:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:63:5F:CC:92:1C:5E:7C:C3:77:71:5F:3F:6F:60:56:1B:0A:B1:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/d683b615-7561-3b21-8d29-1a646004c1fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.90.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:b4:e2:6d:fa:90:d8:bf:f3:fe:43:1f:46:f8:70:5e:1c:21:
         27:ee:64:7b:b1:65:1a:36:0c:85:f0:8b:4b:f9:e5:21:84:c9:
         26:45:91:04:16:db:46:e7:71:0b:13:93:73:c7:26:75:61:12:
         08:d8:0c:e8:5f:fb:31:9f:76:54:0f:4c:c9:3b:e7:95:a2:44:
         8e:33:52:8d:41:a8:c3:bd:10:1b:23:6d:c3:ef:f6:77:4d:7e:
         49:d1:77:6a:85:8c:1e:23:80:da:e7:63:87:20:ca:d0:8b:80:
         6a:02:fe:54:a2:97:d0:18:9d:94:f6:5b:6c:20:30:25:73:6e:
         96:1a:03:06:6c:a4:8d:32:37:6f:79:1c:6a:1d:25:6a:cd:fd:
         cf:1b:42:37:e0:20:6c:e4:63:cc:26:a0:7b:7f:10:e8:bf:04:
         31:f0:51:09:05:9d:eb:e2:fc:cf:52:b4:16:2c:71:1d:7e:a7:
         b7:50:67:3e:98:4a:2a:0a:1e:7b:dd:83:bc:c0:0e:94:42:b7:
         73:94:b8:b1:6c:d5:9d:93:5f:f5:d4:a4:79:29:d8:cb:32:59:
         45:f3:d1:c4:b8:bf:3d:e5:0d:c4:3f:d5:df:79:b9:21:ad:ca:
         80:eb:9c:2c:42:88:c7:03:72:4a:e0:ab:73:27:ac:c6:fd:93:
         4f:07:2b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 23:53:28 2026 by rpki-client