Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/d746ae63-398e-335a-95e1-8d13ac476d9b.roa
File:                     d746ae63-398e-335a-95e1-8d13ac476d9b.roa (raw, json)
Hash identifier:          FivaF6hL+4aSDerP9soKO8GSAtaQXxZepwBJxO92AXk=
Subject key identifier:   3D:91:CE:61:6C:C6:3A:91:73:66:46:7B:73:32:0D:90:36:03:1E:A0
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F4328584EFF777B3B57AD4FE154EFAC00
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/d746ae63-398e-335a-95e1-8d13ac476d9b.roa
Signing time:             Sat 29 Aug 2026 13:00:12 +0000
ROA not before:           Sat 29 Aug 2026 13:00:12 +0000
ROA not after:            Fri 27 Nov 2026 14:00:12 +0000
asID:                     7018
IP address blocks:        69.91.129.0/24 maxlen: 24
                          69.91.133.0/24 maxlen: 24
                          69.91.137.0/24 maxlen: 24
                          69.91.141.0/24 maxlen: 24
                          69.91.145.0/24 maxlen: 24
                          69.91.153.0/24 maxlen: 24
                          69.91.157.0/24 maxlen: 24
                          69.91.161.0/24 maxlen: 24
                          69.91.165.0/24 maxlen: 24
                          69.91.169.0/24 maxlen: 24
                          69.91.173.0/24 maxlen: 24
                          69.91.177.0/24 maxlen: 24
                          69.91.181.0/24 maxlen: 24
                          69.91.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ff:77:7b:3b:57:ad:4f:e1:54:ef:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Aug 29 13:00:12 2026 GMT
            Not After : Nov 27 14:00:12 2026 GMT
        Subject: CN=f17d153e-cd5b-47f4-8606-60ca3d554f48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a8:9d:52:5a:29:77:d9:f9:04:b2:d9:49:cf:
                    40:50:22:99:76:7f:54:ba:29:8f:ab:86:5b:a8:4a:
                    65:01:fb:6a:8b:8a:f5:0e:76:20:ae:e2:b4:5e:e2:
                    39:1f:f7:40:b7:23:a6:97:ef:67:1f:0c:14:6d:99:
                    5e:8b:12:70:45:fc:39:90:b9:9a:ea:6a:22:4f:d3:
                    ce:3b:fe:1e:ef:55:20:b0:ca:b4:ea:b8:82:f5:2b:
                    e9:9f:74:f9:84:98:3f:b1:3b:a2:b3:bd:22:99:41:
                    4f:86:68:59:90:04:c6:6c:06:97:16:57:4a:88:f9:
                    94:74:b0:3b:a5:a2:f0:81:e3:c7:59:fa:41:6a:e1:
                    b2:67:bc:f9:22:a3:5e:55:15:bf:60:d7:65:57:af:
                    9c:9e:e9:dc:c3:ca:07:66:9a:a4:ce:f0:dd:1e:f0:
                    8a:62:78:fc:72:06:34:88:bd:38:91:e0:2c:51:4b:
                    5f:79:cd:44:42:da:aa:22:13:3e:44:e7:7f:a5:ce:
                    e7:d9:92:a4:1c:0a:42:32:d2:4d:6d:29:ba:66:cd:
                    1b:f1:1b:27:21:9d:fc:8d:9c:f2:76:e1:36:34:a6:
                    ad:08:7f:5a:00:1e:82:00:14:06:f3:2f:76:23:6a:
                    eb:e8:9a:d0:0c:19:f2:3b:72:7d:d9:0c:eb:75:65:
                    91:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:91:CE:61:6C:C6:3A:91:73:66:46:7B:73:32:0D:90:36:03:1E:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/d746ae63-398e-335a-95e1-8d13ac476d9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.91.129.0/24
                  69.91.133.0/24
                  69.91.137.0/24
                  69.91.141.0/24
                  69.91.145.0/24
                  69.91.153.0/24
                  69.91.157.0/24
                  69.91.161.0/24
                  69.91.165.0/24
                  69.91.169.0/24
                  69.91.173.0/24
                  69.91.177.0/24
                  69.91.181.0/24
                  69.91.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:b6:09:89:ce:37:0e:64:7e:49:20:b6:1f:57:0c:fb:2c:bb:
         f2:bd:66:d9:d9:12:96:fd:49:d6:ab:d9:20:2a:61:26:de:ff:
         18:35:62:03:12:84:92:12:b9:1b:79:1d:59:cc:1f:28:cf:8e:
         dd:b7:21:cb:a7:04:94:ec:6f:22:66:85:ee:b8:ac:9b:d7:1f:
         9c:ea:3a:7a:4a:df:ab:27:b7:28:54:c2:26:a4:66:b5:0f:49:
         d5:5f:06:aa:3a:9f:72:38:f5:33:be:1a:12:7f:75:d3:e8:d2:
         cf:04:3d:e7:50:5f:ca:7f:b4:46:19:f1:9c:56:47:9b:83:c1:
         97:35:09:92:7b:96:7e:ab:2f:eb:fb:5b:51:da:59:ac:e4:58:
         a0:0e:60:7e:81:ae:64:62:70:50:55:37:f5:b5:16:09:95:8c:
         45:a2:e7:a3:0b:64:cc:19:ec:3a:be:78:78:d8:d9:82:57:b2:
         a4:85:47:17:00:72:6f:3b:98:77:8e:f7:a7:2e:38:ba:19:59:
         04:7d:21:1a:26:e7:99:d5:01:0e:cc:64:c5:fd:bb:fb:32:5e:
         51:25:03:17:c9:42:1f:c3:4f:e8:1d:a9:09:28:3a:11:5d:82:
         d6:ac:10:ca:3d:0a:7c:6b:50:67:56:cc:3c:0e:d3:de:ae:cc:
         4e:8d:c5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:52:13 2026 by rpki-client