Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a99e52a4-7690-3002-a15a-178d7cc9ba16.roa
File:                     a99e52a4-7690-3002-a15a-178d7cc9ba16.roa (raw, json)
Hash identifier:          ab5bpiRbcwjnQAPiHg9MRTJczlF53P4TI2Ki2+3MCGA=
Subject key identifier:   32:06:46:EB:CD:B1:E5:2D:DB:07:D0:50:3F:59:45:4C:80:BF:DF:0D
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EE9CAB35226B993D70D0D8F80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a99e52a4-7690-3002-a15a-178d7cc9ba16.roa
Signing time:             Fri 21 Aug 2026 18:40:16 +0000
ROA not before:           Fri 21 Aug 2026 18:40:16 +0000
ROA not after:            Thu 19 Nov 2026 19:40:16 +0000
asID:                     214483
IP address blocks:        69.33.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e9:ca:b3:52:26:b9:93:d7:0d:0d:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug 21 18:40:16 2026 GMT
            Not After : Nov 19 19:40:16 2026 GMT
        Subject: CN=8eb607f9-0b63-4e06-9d56-488dae585567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b4:43:de:d6:60:c6:c8:0c:97:c9:67:01:b1:
                    c7:f6:9f:f0:10:14:c5:19:f9:c9:b9:fe:62:0c:6c:
                    ac:41:de:eb:ba:3c:70:de:e7:b2:71:96:38:09:26:
                    85:41:6a:a9:78:d3:f5:e1:0a:31:a2:5f:f2:ad:1c:
                    37:69:5a:9f:43:0d:b5:54:9d:c5:0c:2e:a6:1b:bf:
                    1e:23:e1:cd:ef:ad:e5:f4:e9:64:17:3d:2a:db:0a:
                    c7:bb:3b:2f:b5:59:cc:5e:b2:2d:ba:16:17:bc:e9:
                    f6:a8:45:d8:77:cc:2f:9a:74:65:64:9e:38:2d:b5:
                    d7:d6:74:8c:ea:af:2f:65:27:69:ba:69:49:5a:28:
                    0d:6f:a1:7c:e6:48:ad:48:0b:36:af:95:84:8f:14:
                    47:5a:5b:33:bc:87:21:f4:98:5f:fe:be:2d:23:26:
                    96:50:00:ba:d4:79:ef:a1:09:f5:85:81:86:9b:79:
                    58:bd:a0:ac:c0:5f:a7:1d:5c:32:e5:72:aa:83:52:
                    3f:a5:e0:3b:93:b3:19:df:ef:80:b5:48:af:58:ad:
                    ab:83:f8:16:8f:a8:17:41:44:d3:0b:4d:d3:9e:bd:
                    88:89:bb:64:2f:4b:cd:14:06:6b:0a:17:cb:01:4a:
                    ef:f7:98:84:4f:c8:0f:2c:40:f8:99:34:bd:9a:7a:
                    72:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:06:46:EB:CD:B1:E5:2D:DB:07:D0:50:3F:59:45:4C:80:BF:DF:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a99e52a4-7690-3002-a15a-178d7cc9ba16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.33.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:56:7b:8b:47:78:3d:ea:12:aa:59:9e:34:e4:31:e8:53:95:
         06:2a:e9:79:ae:81:6e:db:f8:f0:83:de:db:32:fd:23:05:c4:
         11:0f:ab:a8:e1:f2:b1:6b:01:c0:dd:bf:3f:cb:fe:a0:58:62:
         5b:34:a1:d7:be:1e:7e:f1:a5:6f:64:fb:5a:c4:75:00:07:ce:
         6c:af:c0:3e:12:54:63:0b:37:1f:99:a1:59:89:be:b7:85:72:
         9a:97:7c:a9:49:6b:9b:66:83:34:b7:ca:91:3a:2e:06:67:8c:
         09:ec:ee:97:89:bd:e7:0d:71:3c:9b:6b:23:34:e7:e4:48:44:
         8e:12:b0:d4:82:0a:33:72:b7:f6:f9:11:54:1a:83:d9:bf:31:
         2f:f2:bd:f3:e1:b6:a1:4a:86:38:ca:38:00:fc:3c:b8:1d:b2:
         cc:21:d3:8e:44:b0:51:b6:2d:03:e4:81:2a:d9:1c:6f:f2:8a:
         ee:f5:8a:84:01:b8:b1:e0:97:8f:7a:69:c6:40:f8:0a:62:43:
         a0:c5:7e:99:b1:3d:5b:7c:ba:b2:c7:7e:16:72:f9:2b:5e:94:
         75:30:82:e6:90:bd:a8:36:42:79:a1:62:16:0f:ec:ba:1c:91:
         be:ca:cd:75:d0:2c:6c:35:00:43:c0:d8:8e:dc:86:d1:b2:ab:
         79:83:59:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 08:08:47 2026 by rpki-client