Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/90b19c66-e154-3701-9e85-1384fe8062e9.roa
File:                     90b19c66-e154-3701-9e85-1384fe8062e9.roa (raw, json)
Hash identifier:          QYH6AKZOK68VzH6UKb84snjPJ9LPuWoqFUuvviUNkAo=
Subject key identifier:   6F:43:46:BB:7C:BC:04:DD:DC:3B:8B:5D:DC:87:41:B4:79:DE:26:5C
Certificate issuer:       /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial:       010D0C9F4328584ED0020B798C66D0A156685080
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/90b19c66-e154-3701-9e85-1384fe8062e9.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     21949
IP address blocks:        69.9.172.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:02:0b:79:8c:66:d0:a1:56:68:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=4eb17bd2-5336-4cbf-b23b-6e05353dfe5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a9:20:f8:a7:88:61:e9:1c:b5:c0:e5:a7:75:
                    9e:3f:39:b9:f5:63:51:a2:7d:d7:7e:93:7f:93:f2:
                    bc:24:fd:07:c4:d4:fb:14:29:6b:fa:e6:77:4a:41:
                    a7:b1:f9:df:9c:5d:31:b6:8a:f3:69:f4:db:80:65:
                    d4:9a:ce:40:95:5e:b0:55:5e:cf:ac:29:01:82:4a:
                    e2:f0:b1:ef:e4:12:f1:aa:8b:76:67:d1:38:0e:06:
                    0d:55:5a:2a:8d:b4:ca:b9:bf:91:b7:00:ba:85:98:
                    42:74:54:8f:c8:2e:01:54:5f:1d:07:4f:59:9b:54:
                    92:e3:5f:94:53:5e:d4:e5:ac:93:d8:08:c5:bb:97:
                    06:a4:e5:2f:b7:ad:3d:b2:d4:c8:be:17:2b:21:23:
                    ae:8a:c7:ad:86:8f:ab:d2:7b:1b:5a:b9:16:a4:d8:
                    8d:df:c0:84:b8:1d:f7:f1:58:2f:21:2e:18:00:49:
                    d0:1b:b8:04:1f:37:1a:65:e6:88:53:fe:35:ef:d5:
                    73:6f:60:3e:fb:e3:f4:29:b4:0f:21:10:d8:e6:3d:
                    88:44:b4:0e:9a:55:5f:8e:6d:d3:db:c4:b4:c1:73:
                    8b:15:c9:7c:3e:18:af:80:8e:5e:20:c0:4f:64:02:
                    fa:8b:e0:c8:79:02:d3:cf:b3:a9:80:78:1a:c7:45:
                    f0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:43:46:BB:7C:BC:04:DD:DC:3B:8B:5D:DC:87:41:B4:79:DE:26:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/90b19c66-e154-3701-9e85-1384fe8062e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.9.172.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:48:76:81:c6:47:ac:d3:25:35:a2:4c:b9:5f:3a:04:b2:f3:
         48:28:0c:14:a9:8e:3d:92:a7:f2:96:ea:e9:3e:4c:0d:20:1c:
         5d:cf:cf:a7:06:99:3e:2d:f6:c8:66:1f:0a:a3:7d:20:20:ea:
         9e:74:e1:48:31:df:51:cc:99:ff:e9:fa:f1:fc:bf:1b:d6:e9:
         6d:08:6b:5a:65:34:8e:a5:e0:a2:3d:d7:cc:b9:14:ee:69:9c:
         43:b0:61:2c:c0:60:23:b3:1a:22:36:72:34:0c:ce:da:1a:cd:
         c1:51:72:81:03:9a:8b:0a:ea:67:7f:e8:7a:d8:0e:72:0b:31:
         32:34:4e:23:bb:99:e6:29:09:d8:65:9c:d7:c2:04:38:ec:cb:
         dc:9b:74:41:b1:e6:2e:c8:fa:08:f9:42:15:3e:04:3b:ad:c3:
         1e:0d:00:06:9d:2c:da:54:49:4f:75:19:a4:e3:12:5e:16:0d:
         73:74:18:04:1a:a3:73:1c:b9:79:9c:b7:03:9b:7f:d9:a7:2f:
         c6:77:25:26:06:33:31:ac:9e:c7:e3:65:22:98:bb:4c:1c:16:
         f9:f2:8f:05:5e:e3:43:73:ce:37:bb:02:64:7d:ec:79:a0:66:
         5a:43:6f:8b:65:fb:2b:ea:78:b1:3a:1e:6b:2e:d8:63:b1:35:
         4a:73:e3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 07:59:43 2026 by rpki-client