Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/82c7c3ba-3c41-3cf2-a7f7-7cbeb52e42c1.roa
File:                     82c7c3ba-3c41-3cf2-a7f7-7cbeb52e42c1.roa (raw, json)
Hash identifier:          UBWhsoM/qP8sk9z7PTdGRfjBjixDLHHQL+Jy8x1XAmU=
Subject key identifier:   42:87:14:72:E9:5D:6F:18:CE:13:92:4E:13:DB:55:6C:B0:D0:66:A1
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F4974B9C76B2F4EEE1EA9D280
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/82c7c3ba-3c41-3cf2-a7f7-7cbeb52e42c1.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        150.195.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:b9:c7:6b:2f:4e:ee:1e:a9:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=499ffcf4-c1cf-4cd0-bf9b-c99123429c0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e9:a6:69:e7:f7:3c:a4:90:e4:9f:c4:92:7d:
                    7e:5e:7f:90:a1:8c:21:d9:e9:6f:03:3c:7a:1e:6b:
                    27:88:c1:5f:89:f0:57:ac:57:0f:a1:63:c6:15:b1:
                    1c:b0:16:bc:f8:36:1a:82:f7:c2:5e:33:d9:82:26:
                    27:97:01:92:d5:8d:34:29:6c:f5:3e:c6:c4:13:4f:
                    05:4f:09:a4:f4:ba:8a:69:1d:88:07:e5:03:30:c5:
                    59:c3:41:e1:78:fb:1e:79:5c:9f:ea:8a:8e:4f:e0:
                    b2:60:db:d8:18:78:b6:3e:0f:ff:fd:5f:41:02:3c:
                    5f:14:bc:3d:94:5d:f3:95:32:c6:ff:0e:ba:4f:d4:
                    25:df:84:ee:88:2c:ab:10:25:70:e9:b1:9c:27:81:
                    e8:ce:25:24:96:8f:60:fc:16:e2:20:71:a5:61:20:
                    80:3f:18:e9:50:78:ca:ed:9d:63:ee:c4:3e:f5:e4:
                    22:28:65:bc:63:2d:06:1d:ef:f1:7d:4c:83:c6:9f:
                    e1:f9:b2:46:92:96:29:ac:ba:0a:cb:77:34:10:1d:
                    73:77:93:2a:12:f5:ec:dc:60:39:6e:e8:c7:89:9f:
                    66:d9:ee:27:2d:d3:40:30:4b:c7:17:d7:ca:2f:c9:
                    3e:7d:7f:bc:1d:82:d9:eb:f0:81:49:0a:41:fb:f0:
                    18:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:87:14:72:E9:5D:6F:18:CE:13:92:4E:13:DB:55:6C:B0:D0:66:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/82c7c3ba-3c41-3cf2-a7f7-7cbeb52e42c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.195.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:7e:c8:69:a7:d9:76:aa:8a:19:f9:fd:18:48:84:75:61:56:
         4c:fd:83:e6:24:0e:cd:9d:7a:12:0f:10:5e:47:8c:8a:62:b1:
         8d:c6:e7:3c:b7:8a:cd:1e:38:01:59:8f:6c:6e:dc:d1:79:02:
         d0:9d:96:f3:f6:17:ba:45:f6:4e:b5:47:92:f1:a9:65:71:7d:
         a6:51:1e:2d:41:fe:14:ab:8d:61:69:ec:66:a4:f4:7b:0c:97:
         8f:9a:d7:0e:ef:a6:42:c8:23:08:90:60:f0:df:50:bf:a2:0d:
         40:4c:1b:ca:61:16:ab:7e:15:33:89:2e:5b:8a:49:ab:39:39:
         70:a1:68:96:32:5c:6f:81:44:5d:09:97:cd:59:e5:5b:bf:37:
         68:a8:5d:92:e5:56:ae:d4:5d:02:3e:79:0a:4a:20:09:e2:16:
         4c:0e:1d:90:8c:6f:13:90:0a:e0:9b:74:2a:0f:ec:ea:d8:f4:
         75:53:0b:0b:44:3d:2e:4e:18:3a:07:cf:7c:7a:6c:d0:a6:36:
         04:4a:9f:7c:6f:b7:97:3f:2f:7e:bc:94:96:58:77:39:17:e4:
         eb:02:cf:7a:99:98:ec:eb:6e:d0:72:bf:1a:54:4b:01:26:a0:
         4d:30:60:81:f9:de:19:95:8a:6d:62:1c:b6:fc:31:7d:71:4f:
         7f:1b:0a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:52:25 2026 by rpki-client