Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/058761d7-1b03-3f8d-98d9-a1867091f006.roa
File:                     058761d7-1b03-3f8d-98d9-a1867091f006.roa (raw, json)
Hash identifier:          tRLsTn3iPffZDD9TVRGmt6WLyDY2dvRJIfJcwbb9j6Y=
Subject key identifier:   14:9C:A6:DA:87:CB:4C:DB:F5:97:74:4A:3F:37:06:20:61:3C:74:46
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F498B346E8E45C8E9A8CB6180
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/058761d7-1b03-3f8d-98d9-a1867091f006.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     2914
IP address blocks:        69.33.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:34:6e:8e:45:c8:e9:a8:cb:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=36c9beec-a603-4e37-8c1f-83535b9c6561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b7:33:a9:1c:50:4b:d7:9a:1b:d9:72:ff:25:
                    9e:b4:be:51:83:76:58:d8:79:e7:af:37:06:43:17:
                    c3:68:a0:3f:50:00:42:c7:e3:4f:66:4f:59:1f:5d:
                    b0:3b:2c:6f:29:11:38:fb:cd:d5:57:02:3d:f4:4c:
                    e4:bb:bb:42:9c:90:56:8f:04:83:c2:82:cf:3d:a5:
                    6f:81:89:0b:f8:0e:39:fd:a8:54:c4:04:0a:be:e1:
                    0a:f3:79:e6:c3:df:50:62:5b:01:c2:eb:cb:a1:37:
                    9d:17:84:35:bd:0c:42:6b:f5:4e:1b:b4:04:1f:47:
                    02:df:ef:6e:d5:17:b9:66:12:35:1e:ee:d4:ff:05:
                    25:6f:18:8d:aa:af:75:d6:5f:e3:24:07:59:2d:eb:
                    63:10:88:2e:0e:15:22:28:75:50:f4:48:6b:09:d7:
                    41:9c:ae:6f:ba:5d:ef:ea:73:1f:e1:92:52:66:34:
                    e1:01:02:63:59:f4:74:da:42:1c:b1:1d:03:1a:ed:
                    bf:b1:de:05:e3:03:dc:7c:5a:d1:a4:59:4e:bf:b0:
                    cd:66:5c:a2:92:9f:46:b4:d1:eb:9a:a0:1c:01:88:
                    9f:1a:4f:4f:01:bf:cb:b7:4e:aa:0b:c7:46:6d:b6:
                    91:f6:86:7a:67:81:a0:27:c7:25:42:27:15:57:d7:
                    fe:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:9C:A6:DA:87:CB:4C:DB:F5:97:74:4A:3F:37:06:20:61:3C:74:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/058761d7-1b03-3f8d-98d9-a1867091f006.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.33.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:af:09:58:54:a7:cc:ef:cc:0b:7c:8d:f2:9a:cb:88:1d:5a:
         53:ee:f6:2c:96:12:47:9e:d6:c4:a8:ac:aa:a5:93:ee:73:65:
         ba:69:f5:2c:89:a3:ad:10:0c:74:14:63:8f:94:4b:6a:16:07:
         b0:51:4e:2a:61:8a:51:a6:89:bf:f1:88:4c:e6:78:27:dc:ce:
         f0:38:88:05:f0:95:a5:c4:79:10:23:61:f3:f9:b4:ec:52:24:
         1a:8d:ef:95:88:ea:c0:18:eb:ac:38:10:e7:3d:2d:27:63:84:
         9d:62:06:82:d7:1a:64:9f:84:70:81:f8:c6:97:df:da:91:f8:
         0d:8d:da:8f:ff:ec:6f:fc:5c:e9:fb:23:0e:68:ce:85:3d:c0:
         ca:2b:97:dc:bd:24:0d:a2:10:5d:43:ed:b2:a0:5e:a8:15:8a:
         82:1b:d9:6e:69:7e:8b:04:4f:db:b4:7b:e9:c2:a5:f0:1f:79:
         e5:e4:48:2c:0c:46:a2:e4:fb:de:e0:80:0b:31:3b:46:ac:d5:
         6f:3b:ec:76:d7:cf:e7:8d:70:e1:5e:03:49:97:f9:0d:69:45:
         4e:ee:2b:4b:29:ad:40:29:6b:a2:20:d2:6f:08:d6:b1:cc:37:
         6f:3b:98:ee:a1:24:4a:20:60:ed:f8:53:b7:78:b7:70:ce:6e:
         ef:73:c9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 14:27:44 2026 by rpki-client