Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/395a3b5b-c1cd-4dd2-b405-46454e121484/e5a067ba-79c7-3c6f-8cf3-5bbba4faf814.roa
File:                     e5a067ba-79c7-3c6f-8cf3-5bbba4faf814.roa (raw, json)
Hash identifier:          /JD87mQgHalGcCVK2XFt+RfuCfeE7WIaGl0ik1dLxtw=
Subject key identifier:   B6:96:98:E3:8A:9A:94:95:4C:A5:54:F6:5A:54:93:5F:AE:66:A5:DF
Certificate issuer:       /CN=395a3b5b-c1cd-4dd2-b405-46454e121484
Certificate serial:       010D0C9F4328584EFE121C1EBAF98435E1EA1E40
Authority key identifier: C2:68:00:45:2B:16:33:80:0B:46:AF:CE:32:CF:97:D7:BC:6E:5D:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/395a3b5b-c1cd-4dd2-b405-46454e121484.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/395a3b5b-c1cd-4dd2-b405-46454e121484/e5a067ba-79c7-3c6f-8cf3-5bbba4faf814.roa
Signing time:             Sat 29 Aug 2026 01:00:12 +0000
ROA not before:           Sat 29 Aug 2026 01:00:12 +0000
ROA not after:            Fri 27 Nov 2026 02:00:12 +0000
asID:                     396536
IP address blocks:        69.24.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/395a3b5b-c1cd-4dd2-b405-46454e121484/395a3b5b-c1cd-4dd2-b405-46454e121484.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/395a3b5b-c1cd-4dd2-b405-46454e121484/395a3b5b-c1cd-4dd2-b405-46454e121484.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/395a3b5b-c1cd-4dd2-b405-46454e121484.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fe:12:1c:1e:ba:f9:84:35:e1:ea:1e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=395a3b5b-c1cd-4dd2-b405-46454e121484
        Validity
            Not Before: Aug 29 01:00:12 2026 GMT
            Not After : Nov 27 02:00:12 2026 GMT
        Subject: CN=47963edb-c4ff-4f72-8c6b-4c793ad55bdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a5:c9:39:b8:d6:05:16:1e:ad:9d:1e:90:9c:
                    00:64:17:d6:a0:76:b0:cf:d9:70:d5:cb:7e:5a:f0:
                    5e:2e:e2:59:ac:92:66:b5:be:57:2d:37:84:fc:3f:
                    8c:13:d2:b6:2c:2f:c8:42:20:08:aa:2b:d2:34:c0:
                    a0:10:a9:52:a1:ec:31:d9:2b:66:d8:8a:19:4c:9a:
                    57:4e:cb:e9:40:38:37:a3:09:6d:c3:59:a7:82:a3:
                    91:21:17:d3:31:49:d2:58:72:04:ee:b0:2f:a6:55:
                    b3:e2:6a:25:4b:f0:41:5c:0c:1c:72:59:6c:d7:59:
                    b8:45:8b:3c:a9:84:41:3a:62:d7:19:c1:e2:a5:04:
                    9c:bd:71:76:c4:a6:66:9c:21:e4:ab:40:80:59:1c:
                    9d:19:70:31:40:6e:a3:63:bc:25:a6:0d:7f:8a:d3:
                    8d:a3:72:9d:cc:e4:fe:61:f0:b4:5a:b2:ac:49:4c:
                    9c:a7:1f:b2:0b:10:d9:c9:62:19:09:39:26:61:6e:
                    62:11:fb:0d:6f:93:87:aa:95:9e:e1:60:52:3f:80:
                    d4:fa:58:d7:b6:b3:3b:02:61:c4:0d:b2:f3:77:b3:
                    b6:8f:f6:99:b5:4c:05:2e:ae:b2:3d:4d:1e:8e:0f:
                    16:3a:5e:35:b3:9c:5f:48:dd:e5:3f:be:3d:77:83:
                    44:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:96:98:E3:8A:9A:94:95:4C:A5:54:F6:5A:54:93:5F:AE:66:A5:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/395a3b5b-c1cd-4dd2-b405-46454e121484/e5a067ba-79c7-3c6f-8cf3-5bbba4faf814.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/395a3b5b-c1cd-4dd2-b405-46454e121484/395a3b5b-c1cd-4dd2-b405-46454e121484.crl

            X509v3 Authority Key Identifier:
                keyid:C2:68:00:45:2B:16:33:80:0B:46:AF:CE:32:CF:97:D7:BC:6E:5D:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/395a3b5b-c1cd-4dd2-b405-46454e121484.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.24.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:fc:db:c8:b0:51:1a:c8:64:05:2a:96:b6:6e:67:d2:5d:a7:
         3f:ee:d8:91:1b:a7:7c:63:c8:02:2c:f4:e1:f1:ca:ff:7b:50:
         9c:f2:e7:cc:25:70:99:36:eb:bf:bb:5a:1d:00:28:8c:65:3b:
         40:42:2d:1b:cb:62:58:2c:79:7e:18:3d:ae:c5:75:77:6a:af:
         44:58:f2:3a:9c:26:17:25:4d:50:24:15:7b:c3:5d:f9:20:55:
         e2:4f:79:e9:55:45:fa:21:3f:5d:3c:b4:3b:f1:e9:2e:05:7e:
         b1:f0:6a:27:ac:5c:dc:9d:44:28:d4:99:e6:84:0b:01:b1:5f:
         ba:16:f0:76:bf:c9:b2:06:5a:1b:21:57:dd:82:a2:49:15:ee:
         47:81:f7:4c:93:8f:a6:37:e3:3f:75:c3:45:87:ca:ec:eb:e6:
         d3:1e:8e:c5:45:fd:8e:30:df:cc:5e:bc:07:8a:8b:94:75:e2:
         2a:45:1d:37:4d:e9:87:14:a0:5a:ef:5a:80:aa:c6:99:03:c9:
         b4:25:a5:c1:dc:3c:74:95:7e:4c:41:28:dc:bc:9d:eb:15:eb:
         80:6b:46:de:b7:a8:f5:39:2c:4b:5c:28:cb:fa:8a:e5:05:30:
         95:67:f6:97:72:b0:ae:5f:7b:cc:fd:df:fe:a0:80:2c:75:dc:
         50:fe:46:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 10:37:42 2026 by rpki-client