Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/6c76a8da-00a0-3b5d-81a9-2b9be04cca6f.roa
File:                     6c76a8da-00a0-3b5d-81a9-2b9be04cca6f.roa (raw, json)
Hash identifier:          o9p00p06o+oujIv6DJPEXH2qJhUPyOxzdWvN4TUbVOY=
Subject key identifier:   8B:50:8C:93:EC:80:61:1F:11:75:81:80:4E:F3:02:D0:2E:76:A7:36
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F4328584F49879C8871709DE04D175F00
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/6c76a8da-00a0-3b5d-81a9-2b9be04cca6f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7015
IP address blocks:        69.91.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:9c:88:71:70:9d:e0:4d:17:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=6a56f40b-6188-4027-b377-44cccf1796b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:07:22:73:b1:c1:bf:55:09:bd:d3:1a:73:7f:
                    74:c5:6a:fb:64:6c:dc:b3:42:a4:bc:3c:fe:4c:b1:
                    ba:05:82:ad:5a:ea:cb:5d:35:c7:c1:5f:6c:92:8b:
                    94:a1:49:d7:99:a0:83:31:82:45:64:76:19:96:4d:
                    a2:46:61:69:9e:99:0c:88:6c:38:cb:f5:a2:12:54:
                    e8:56:5d:98:29:18:fd:ec:0e:67:5d:30:cb:3b:d4:
                    09:67:b7:32:13:7d:be:39:07:54:5e:17:2f:9b:90:
                    38:c1:f6:da:e8:1f:bb:99:1f:5a:a9:93:51:09:91:
                    89:80:d2:71:84:fe:e8:e2:2f:64:b1:cf:ee:1c:c1:
                    8e:3a:9d:1a:8d:02:1c:74:65:6f:a6:c7:70:ce:bf:
                    f7:3a:3d:77:80:87:18:72:90:c3:5f:c5:c6:c6:32:
                    4e:c3:96:c8:00:bd:6e:70:f1:b3:54:7d:2f:4d:35:
                    ab:38:32:88:b5:44:3d:cb:55:5b:73:3b:c9:07:ef:
                    99:64:7e:fc:2f:56:4e:3a:db:33:2b:b1:f4:fa:6b:
                    f2:0e:65:ab:20:48:75:1e:0a:35:d0:0b:61:6d:49:
                    c0:1c:10:d9:bf:1e:2f:a8:57:27:84:84:5a:ee:ca:
                    d8:e8:8b:fe:95:97:c2:b4:8b:6f:30:2a:ca:cb:dc:
                    f0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:50:8C:93:EC:80:61:1F:11:75:81:80:4E:F3:02:D0:2E:76:A7:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/6c76a8da-00a0-3b5d-81a9-2b9be04cca6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.91.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:77:52:a9:c2:ea:d3:55:e2:24:cf:96:22:7d:2c:14:36:31:
         e7:6d:1f:27:ae:4c:88:25:91:d8:bf:d2:2c:3b:fe:c5:ab:fb:
         d0:65:32:a8:0d:4c:ab:22:95:4f:eb:2b:96:60:82:fe:25:79:
         14:98:80:d2:cd:16:ab:7f:33:5d:2a:98:5a:4c:25:8b:86:88:
         f5:c0:7d:c9:e7:2b:bc:71:33:71:e9:98:c4:d9:c5:4d:7e:3d:
         af:5a:de:a6:24:fe:8f:eb:e3:62:f8:d8:81:12:3b:43:4f:76:
         a6:de:77:f5:ce:69:4e:fa:4a:6b:aa:73:ec:1e:29:fb:11:dd:
         ba:d6:d3:b9:84:df:28:16:54:5a:52:7c:d5:ed:c7:45:a5:aa:
         ee:2b:36:02:d7:a6:0e:74:d6:cd:9f:2f:27:01:92:bc:67:2d:
         8d:cd:9b:b1:3a:4a:a9:08:8e:47:07:1a:a4:b0:0c:3b:2f:09:
         ed:11:48:54:c5:61:f3:08:8c:e9:50:8f:26:34:7d:e3:bf:b7:
         23:ef:bf:9f:30:4f:1f:d5:29:16:f8:bf:39:c7:cc:dd:f0:2e:
         78:b4:39:0d:13:b5:59:ad:ae:73:b9:fd:f7:16:ef:1b:e6:bb:
         30:0c:39:1a:b8:38:88:4a:5c:70:e8:16:25:2e:2c:9a:5d:27:
         57:9f:c6:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 10:37:48 2026 by rpki-client