Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/e01fe237-d6f0-3180-bbea-fe38f284c022.roa
File:                     e01fe237-d6f0-3180-bbea-fe38f284c022.roa (raw, json)
Hash identifier:          kYHeH8EOcZRm1J0idUZrTMOx24Tk1RKYy2jxVt45qlE=
Subject key identifier:   90:70:6E:E3:67:44:8A:91:02:1E:DC:96:89:A4:A2:C4:F5:49:CD:28
Certificate issuer:       /CN=349213f7-28e2-4fa1-8491-78e3580cdb7f
Certificate serial:       010D0C9F4328584F51D2A6547539925EECE7C700
Authority key identifier: 97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/e01fe237-d6f0-3180-bbea-fe38f284c022.roa
Signing time:             Mon 28 Sep 2026 01:00:12 +0000
ROA not before:           Mon 28 Sep 2026 01:00:12 +0000
ROA not after:            Sun 27 Dec 2026 02:00:12 +0000
asID:                     18934
IP address blocks:        142.202.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:51:d2:a6:54:75:39:92:5e:ec:e7:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349213f7-28e2-4fa1-8491-78e3580cdb7f
        Validity
            Not Before: Sep 28 01:00:12 2026 GMT
            Not After : Dec 27 02:00:12 2026 GMT
        Subject: CN=34e634a1-b214-4e22-b7ed-b7838bb7de4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:60:76:e4:a7:a0:5c:25:d6:4b:43:60:93:0d:
                    0d:ea:27:32:8f:18:52:b8:d0:e4:ce:06:8d:31:44:
                    67:ab:9c:bd:ea:30:2b:1c:cc:67:ac:a6:38:10:dd:
                    cb:2e:8c:aa:70:27:be:e3:e9:c6:f8:4b:fa:b2:3e:
                    f2:ef:a8:7e:37:fa:dd:ec:a8:92:c5:19:08:90:75:
                    62:d7:12:b4:39:c0:b9:36:d2:e3:90:f2:37:6b:9d:
                    9c:72:b2:5f:1e:e8:75:5d:7a:0a:57:03:5d:e6:78:
                    dd:f1:12:fe:f5:9f:d4:bb:c2:ef:4a:47:bb:29:12:
                    5c:d3:6b:f1:64:dd:58:21:db:6b:23:32:6a:c9:c0:
                    78:c8:4b:a8:25:f5:10:3d:53:00:a1:03:4c:68:51:
                    06:f5:aa:34:68:b9:bd:76:f5:05:0f:2d:f7:c2:94:
                    80:84:c3:bc:07:7e:64:98:6c:d1:5d:96:a8:c3:89:
                    b6:0f:f6:8e:c8:77:c5:ca:95:5a:ff:c2:5e:4d:93:
                    b3:2e:c0:65:a5:92:45:23:65:f4:e9:20:09:89:0b:
                    72:46:71:be:2f:d1:99:7a:4a:12:08:94:95:8f:fa:
                    90:b9:14:25:a2:14:1b:13:17:4c:59:b1:95:46:24:
                    42:65:16:8f:b2:d0:09:b3:57:eb:e2:b0:1f:f4:51:
                    60:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:70:6E:E3:67:44:8A:91:02:1E:DC:96:89:A4:A2:C4:F5:49:CD:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/e01fe237-d6f0-3180-bbea-fe38f284c022.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl

            X509v3 Authority Key Identifier:
                keyid:97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:c6:95:50:c3:45:66:13:ff:7f:ab:d3:4a:6a:47:0d:08:22:
         b9:69:e4:ef:8b:73:ed:06:c9:80:00:68:a3:89:e6:47:1f:6b:
         52:e8:78:bb:91:2c:fb:77:ba:0d:5b:c8:18:55:c1:62:06:80:
         b0:e8:0f:6e:18:dc:f9:86:41:63:5a:bd:76:e6:c6:fd:29:94:
         b6:65:ff:5a:66:45:12:d9:fd:3a:a6:28:bb:0d:c2:8c:7a:4e:
         96:55:cf:6d:cd:ca:86:fd:5d:41:44:64:15:98:be:26:1e:0b:
         88:0b:0e:4b:25:76:54:9f:3a:84:59:12:6d:91:73:ed:99:13:
         74:52:24:f0:63:c1:ee:0f:40:c1:ad:4a:61:09:bc:4b:2f:9e:
         27:4a:be:99:ca:a7:1b:c4:f0:c1:08:27:28:8a:4b:ac:4d:9a:
         1e:0c:51:48:6e:d2:22:dc:46:dc:88:60:59:26:99:b7:5b:a2:
         16:78:59:56:40:0b:df:b9:a7:6c:70:02:d7:1a:37:d8:f9:2a:
         a3:cc:6a:b2:af:f2:67:b0:3e:ad:32:62:74:86:c2:a7:dc:8b:
         c6:7f:33:81:28:8b:8b:70:d7:22:48:ef:61:dd:11:35:7b:79:
         24:4c:ec:f0:c1:31:ac:b1:77:4c:29:7b:8c:23:70:84:11:aa:
         56:fa:20:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:38:58 2026 by rpki-client