Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e59f88b9-7d41-4286-9d26-469f2b6a2209/d495d943-0a01-3c05-b6e6-dcd67f279a70.roa
File:                     d495d943-0a01-3c05-b6e6-dcd67f279a70.roa (raw, json)
Hash identifier:          OE/7ijUV9g6nT+0kF5OvZ/ZMWPb33E3D9+2MbJSyVXQ=
Subject key identifier:   B2:60:16:D4:F3:1B:6F:3A:1D:7C:90:15:05:2E:27:61:FE:C8:85:46
Certificate issuer:       /CN=e59f88b9-7d41-4286-9d26-469f2b6a2209
Certificate serial:       010D0C9F4328584EC371B8BA28CFE08BC26022C0
Authority key identifier: 82:8C:41:C4:F4:B0:B3:AB:7A:81:92:4D:99:6E:EF:F8:96:F5:1E:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e59f88b9-7d41-4286-9d26-469f2b6a2209.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e59f88b9-7d41-4286-9d26-469f2b6a2209/d495d943-0a01-3c05-b6e6-dcd67f279a70.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     396982
IP address blocks:        69.87.54.0/24 maxlen: 24
                          69.87.102.0/24 maxlen: 24
                          69.87.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e59f88b9-7d41-4286-9d26-469f2b6a2209/e59f88b9-7d41-4286-9d26-469f2b6a2209.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e59f88b9-7d41-4286-9d26-469f2b6a2209/e59f88b9-7d41-4286-9d26-469f2b6a2209.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e59f88b9-7d41-4286-9d26-469f2b6a2209.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:71:b8:ba:28:cf:e0:8b:c2:60:22:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e59f88b9-7d41-4286-9d26-469f2b6a2209
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=a973cb29-9ed4-4790-aef7-4149c4276b94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:09:39:7e:a3:03:61:bc:de:4d:f0:5f:09:ff:
                    a7:5d:38:0f:3a:b4:62:1b:19:2b:b4:66:9b:3b:14:
                    ac:06:c4:07:86:95:5b:47:27:dd:79:0c:a6:60:af:
                    79:15:9f:01:7e:17:26:fa:fc:b0:61:62:d0:0e:87:
                    25:d8:d2:93:4b:6a:48:4c:94:d7:a8:94:78:98:70:
                    0f:fb:ea:c9:d4:97:0b:aa:1f:fd:e4:93:77:45:f5:
                    7e:6d:ab:db:46:1c:c5:44:e4:b6:04:e8:a1:6a:28:
                    52:37:d2:c3:a1:58:6d:d0:4b:e3:da:27:1b:8a:60:
                    f6:09:0b:60:7a:f4:5b:e0:89:db:06:36:41:b7:7b:
                    a3:8c:c1:78:27:d2:90:52:53:b0:b5:63:d0:64:18:
                    1e:88:8b:3d:6e:97:b4:91:cc:56:05:ce:68:ef:27:
                    3b:21:da:c2:16:c0:c6:c6:ba:a8:c1:18:d2:a8:8c:
                    d7:8e:19:12:d5:00:82:7e:27:6b:e3:26:d1:c0:85:
                    e6:a6:17:c9:f1:ae:d6:83:f7:42:ee:5e:5d:c1:bc:
                    0c:d0:56:b0:fc:4c:f7:2f:bd:f7:af:92:83:ae:7b:
                    ae:58:a4:c7:f5:c3:22:03:66:61:2b:ef:10:65:fe:
                    4d:08:52:ba:32:fa:25:be:ba:b8:06:67:c6:e2:9e:
                    b7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:60:16:D4:F3:1B:6F:3A:1D:7C:90:15:05:2E:27:61:FE:C8:85:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e59f88b9-7d41-4286-9d26-469f2b6a2209/d495d943-0a01-3c05-b6e6-dcd67f279a70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e59f88b9-7d41-4286-9d26-469f2b6a2209/e59f88b9-7d41-4286-9d26-469f2b6a2209.crl

            X509v3 Authority Key Identifier:
                keyid:82:8C:41:C4:F4:B0:B3:AB:7A:81:92:4D:99:6E:EF:F8:96:F5:1E:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e59f88b9-7d41-4286-9d26-469f2b6a2209.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.87.54.0/24
                  69.87.102.0/24
                  69.87.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:92:1c:c2:9b:a4:f7:cc:06:e8:50:2c:fb:6c:32:3b:fe:d8:
         7b:c0:29:7e:86:3d:36:45:49:88:1a:d8:e6:cf:0d:b3:6c:ed:
         a2:e8:56:1f:99:40:62:24:69:35:ac:ac:99:cf:1b:69:36:1b:
         30:29:98:a0:a6:02:e8:55:74:12:51:37:80:8c:a1:65:ea:9b:
         87:05:15:ba:91:a2:77:b3:78:e7:a2:ab:d3:8b:d0:b6:e5:4d:
         bf:5c:c7:a9:8d:11:9d:5f:47:ac:3f:27:86:ad:e2:40:c1:25:
         a9:19:f4:5c:7e:cd:e6:8c:54:4c:20:e3:31:77:2e:e5:f3:de:
         d7:cb:be:3b:19:f2:15:ef:fc:b1:dd:dd:89:fa:46:30:f9:9e:
         cf:cf:d1:c4:ac:1f:d3:54:9a:82:5f:68:78:1d:c7:b4:0c:58:
         fb:86:7a:41:34:3b:99:6a:dc:93:24:74:30:7e:94:fa:20:05:
         9f:aa:cf:f3:62:1d:d4:49:bd:92:1a:3b:45:15:46:b2:d7:be:
         3a:c9:13:a6:81:46:c1:50:87:f2:ad:e6:ef:b6:24:b6:1d:9b:
         03:14:bf:37:87:2f:c1:35:c0:24:12:53:ef:8f:50:57:a9:3c:
         32:6b:08:cb:f7:bb:bb:4d:a1:34:1a:db:d5:8e:c5:85:27:49:
         9e:0e:f6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 21:11:31 2026 by rpki-client