Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/61f3e7bb-3cef-3819-a71f-ff3645a33210.roa
File:                     61f3e7bb-3cef-3819-a71f-ff3645a33210.roa (raw, json)
Hash identifier:          txtypka/C6JmtHHirGM2BWyDZ5mtdeEMbRvw5/tIDKw=
Subject key identifier:   C7:0B:0B:63:A5:DB:0A:B8:3E:1B:35:76:E0:C4:C9:07:CE:87:26:78
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F4328584EE0C20233FF5CC5062AB0B400
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/61f3e7bb-3cef-3819-a71f-ff3645a33210.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     20303
IP address blocks:        69.91.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c2:02:33:ff:5c:c5:06:2a:b0:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=ed89bd11-a4c8-4417-a1cd-8fdbdc8ff58b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:97:c2:ba:2c:b7:e9:a8:44:d7:73:33:91:37:
                    86:7c:47:5d:b6:9a:05:12:b1:b7:2b:f2:f4:23:19:
                    e2:b0:d1:20:00:de:66:4a:73:17:ed:34:43:e8:49:
                    03:1c:08:d5:28:9f:ff:56:21:83:8e:d9:d6:9d:35:
                    9f:7a:5a:6d:6c:d8:26:7c:1c:e0:00:1e:b4:66:70:
                    d5:3e:e8:c2:ad:2f:21:a0:19:b0:44:42:b8:09:ca:
                    ad:6a:ca:14:6d:9c:97:a7:94:e2:40:64:08:2c:6a:
                    a9:6b:02:21:48:58:1f:34:a9:ba:0b:fd:6d:5b:57:
                    8a:e2:7c:a4:56:14:46:81:c6:ce:11:62:f0:05:e5:
                    29:94:64:e1:25:bc:01:29:6f:76:dc:2f:4a:e6:bb:
                    9b:d4:41:1e:88:a5:d7:33:4e:e7:25:cd:a0:e0:12:
                    fb:5e:d9:34:a3:6a:c3:df:8f:cf:32:97:5d:2d:78:
                    6d:be:1d:13:4a:d9:c3:88:e8:46:3c:8f:a9:ff:d3:
                    7a:fa:c2:2f:9e:20:00:ab:54:73:19:41:8c:c1:c3:
                    de:23:0c:2c:af:6e:a8:a1:be:58:54:57:d7:28:2e:
                    35:6d:4d:d6:40:ee:d6:e6:22:ff:8e:90:54:c0:25:
                    93:69:22:e1:87:bf:ef:a6:58:e8:14:21:ac:84:90:
                    ae:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:0B:0B:63:A5:DB:0A:B8:3E:1B:35:76:E0:C4:C9:07:CE:87:26:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/61f3e7bb-3cef-3819-a71f-ff3645a33210.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.91.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:b3:c7:c1:77:83:14:e7:3f:bf:af:6a:d4:0b:09:5f:f1:96:
         96:bc:91:a6:05:f5:03:ae:09:fa:3c:b6:f6:98:4d:41:bc:12:
         b9:b0:d4:26:fc:4f:e3:c1:04:3f:d3:47:47:87:66:64:63:ae:
         94:92:48:2d:1f:93:c6:77:da:74:0e:55:7d:ee:9e:e4:0c:fc:
         b3:dd:3c:88:51:12:2c:f6:4e:4d:73:23:f9:ef:38:79:91:57:
         4f:cc:60:ab:94:77:9d:63:41:ca:6c:1e:fc:45:85:b2:be:3c:
         97:94:b7:af:2d:b0:bf:3e:cb:74:e9:fc:4f:bc:fb:8e:45:b8:
         df:4f:9e:56:c8:22:68:3c:38:a5:67:4c:c7:66:ef:49:fd:1c:
         22:97:3c:ac:d8:de:2c:8f:8f:96:0b:73:ed:44:94:b0:e6:7a:
         c1:ab:fe:c9:8f:13:cf:a2:e1:57:8a:79:ca:a8:b8:07:85:69:
         32:93:db:4b:fb:64:4d:26:ad:bd:6f:1f:98:6d:4d:65:a6:ff:
         0d:ab:d7:fe:3d:60:98:d7:23:95:f1:51:39:1b:4f:85:26:ee:
         09:79:7b:23:58:34:31:11:21:95:62:cb:4c:b4:1b:d4:43:d2:
         5f:21:8b:12:5c:ad:b5:3e:6f:d1:98:94:5d:bc:48:db:b8:30:
         9f:38:68:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:07:59 2026 by rpki-client