Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e59f88b9-7d41-4286-9d26-469f2b6a2209/d495d943-0a01-3c05-b6e6-dcd67f279a70.roa
File:                     d495d943-0a01-3c05-b6e6-dcd67f279a70.roa (raw, json)
Hash identifier:          2XxtR4IHL+F2FBM3aXhCTaHZfElYP7OgFHpyeM+5/Ys=
Subject key identifier:   42:5E:1F:59:86:2B:65:36:8B:F2:50:7E:9F:9E:C0:E5:CD:71:4B:78
Certificate issuer:       /CN=e59f88b9-7d41-4286-9d26-469f2b6a2209
Certificate serial:       010D0C9F4328584F655D6EE8D37F26D5EAB37600
Authority key identifier: 82:8C:41:C4:F4:B0:B3:AB:7A:81:92:4D:99:6E:EF:F8:96:F5:1E:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e59f88b9-7d41-4286-9d26-469f2b6a2209.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e59f88b9-7d41-4286-9d26-469f2b6a2209/d495d943-0a01-3c05-b6e6-dcd67f279a70.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     396982
IP address blocks:        69.87.54.0/24 maxlen: 24
                          69.87.102.0/24 maxlen: 24
                          69.87.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e59f88b9-7d41-4286-9d26-469f2b6a2209/e59f88b9-7d41-4286-9d26-469f2b6a2209.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e59f88b9-7d41-4286-9d26-469f2b6a2209/e59f88b9-7d41-4286-9d26-469f2b6a2209.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e59f88b9-7d41-4286-9d26-469f2b6a2209.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:6e:e8:d3:7f:26:d5:ea:b3:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e59f88b9-7d41-4286-9d26-469f2b6a2209
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=fa5ea2d8-3855-4fe2-834b-c0a1676ac35b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2d:60:41:63:db:69:f0:c1:24:5b:a0:2b:37:
                    2c:57:3d:11:d2:e8:0a:91:4f:b6:5d:87:87:4d:83:
                    dc:73:b5:b9:c0:a9:ad:c2:fa:60:ae:76:f7:56:b9:
                    62:ee:0b:14:b5:bc:7c:a8:98:b9:66:82:0a:3e:00:
                    a6:8b:f1:7f:f5:8a:82:d8:3e:66:ad:73:d3:ed:25:
                    be:c9:d6:e3:9c:05:ac:55:06:ec:d8:b1:9e:82:43:
                    64:4d:42:75:27:58:d5:f1:33:45:f7:4d:01:e7:ad:
                    75:ef:b4:b6:9a:83:1a:cc:50:de:ec:2a:7c:29:17:
                    55:3c:0e:f0:92:7d:9a:2c:d4:c1:55:ac:1f:1a:bd:
                    aa:1c:d8:02:fc:94:61:46:67:32:5a:da:95:ce:c8:
                    6e:32:90:5a:ec:2e:7b:c9:32:b1:09:95:58:75:5c:
                    5b:5a:48:54:09:70:83:cc:6d:ad:ce:1d:b9:5e:ce:
                    74:6e:ee:f1:03:03:6f:e0:8a:97:dc:b4:3d:76:7e:
                    21:2b:e8:9b:d5:55:e2:7b:30:29:03:e9:2f:94:e0:
                    01:3a:e6:52:2c:fc:30:85:20:04:3e:5a:6d:0e:46:
                    29:8c:ea:59:1c:2a:af:1e:b6:1e:e2:42:e2:cf:40:
                    06:5f:bb:89:9d:5d:82:88:6a:07:61:9a:31:10:88:
                    7b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:5E:1F:59:86:2B:65:36:8B:F2:50:7E:9F:9E:C0:E5:CD:71:4B:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e59f88b9-7d41-4286-9d26-469f2b6a2209/d495d943-0a01-3c05-b6e6-dcd67f279a70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e59f88b9-7d41-4286-9d26-469f2b6a2209/e59f88b9-7d41-4286-9d26-469f2b6a2209.crl

            X509v3 Authority Key Identifier:
                keyid:82:8C:41:C4:F4:B0:B3:AB:7A:81:92:4D:99:6E:EF:F8:96:F5:1E:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e59f88b9-7d41-4286-9d26-469f2b6a2209.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.87.54.0/24
                  69.87.102.0/24
                  69.87.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:15:1f:35:de:c9:66:e3:a3:70:92:03:89:dc:8e:c3:44:0a:
         ef:74:65:a0:69:c7:05:62:7b:33:a3:12:94:2f:37:8b:ad:88:
         32:10:c2:44:c4:40:19:3c:40:7d:81:ff:90:7a:79:5f:30:28:
         2b:93:37:4b:60:6f:85:b1:74:b4:d4:77:59:ab:8e:47:ed:88:
         2e:0d:e7:22:89:bd:a1:34:58:24:5e:de:60:1c:61:0d:2d:90:
         df:f8:6c:ef:07:94:c0:32:6d:32:2c:65:fa:69:41:ce:6f:7d:
         7a:be:e1:2c:75:50:02:01:29:c8:03:67:0d:04:aa:9b:23:41:
         77:2d:ae:56:4a:aa:d0:6e:ec:38:32:2e:1c:1f:67:7e:24:c9:
         44:7b:bc:21:2a:5f:7e:5a:cc:46:f5:cf:c7:15:45:dd:64:aa:
         ec:ec:31:52:11:b1:3c:b9:24:b9:74:f8:75:f2:41:42:a9:6f:
         f9:83:8a:ae:8d:bc:01:0d:36:08:db:97:55:a0:8c:b0:82:61:
         0d:47:7a:a0:06:c3:ff:94:e3:75:3a:29:ec:a8:02:66:ba:5a:
         4e:c8:3a:a8:61:34:37:b0:93:a1:bf:6b:a4:c5:01:40:48:dd:
         62:4c:32:c8:84:16:be:00:92:0c:ac:6c:37:24:ea:8d:c0:81:
         4f:c3:e0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:41:44 2026 by rpki-client