Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/82f0725b-39fa-309e-973d-93dce61d067c.roa
File:                     82f0725b-39fa-309e-973d-93dce61d067c.roa (raw, json)
Hash identifier:          1VFyIpdn5M6JBtro4PisECRH0zfbs7At5j549QpDKeE=
Subject key identifier:   36:31:C8:12:1D:F4:FE:50:9A:C4:2C:AC:A3:41:8D:61:61:BD:77:BA
Certificate issuer:       /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Certificate serial:       010D0C9F4328584DC64513DAC99FE4357FE3D400
Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/82f0725b-39fa-309e-973d-93dce61d067c.roa
Signing time:             Sat 09 May 2026 08:30:49 +0000
ROA not before:           Sat 09 May 2026 08:30:49 +0000
ROA not after:            Fri 07 Aug 2026 08:30:49 +0000
asID:                     153517
IP address blocks:        199.15.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c6:45:13:da:c9:9f:e4:35:7f:e3:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
        Validity
            Not Before: May  9 08:30:49 2026 GMT
            Not After : Aug  7 08:30:49 2026 GMT
        Subject: CN=9d2f1052-1528-4ddb-8efc-8956343a30bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fe:f2:b2:d0:bb:d7:fe:4f:d6:0e:16:a8:54:
                    89:33:ec:70:d3:26:0b:c2:24:f4:c5:a9:4c:d0:17:
                    0c:58:9d:ba:8e:a8:09:43:be:c9:84:3b:b1:d8:65:
                    06:2d:e2:a8:35:d7:69:24:59:26:7a:a6:72:05:28:
                    d9:37:83:5a:0f:9c:63:d7:2d:e1:70:88:ea:8d:c6:
                    a5:70:6e:ab:80:f9:b5:1b:2d:d0:09:ae:2f:f5:64:
                    c9:84:56:a9:7f:77:7c:b1:b3:3c:00:4a:90:5f:b7:
                    6d:b1:13:3a:e6:79:6c:bc:66:02:97:02:96:e9:e4:
                    50:28:b7:47:f1:09:c6:f5:27:2f:84:a7:4e:26:0a:
                    89:13:0d:7f:26:64:df:f7:00:b4:54:ee:d2:02:e0:
                    c5:bc:dd:84:4b:6c:5c:3d:9d:ba:94:a8:ff:2f:53:
                    b6:94:da:2f:06:d8:6e:98:4f:b7:ad:70:e6:25:d5:
                    aa:a8:00:99:30:74:8c:ab:1c:79:da:8f:14:30:8c:
                    e6:f2:28:3a:09:26:e6:d3:1f:8e:77:54:19:42:91:
                    f8:58:40:88:d9:c6:4b:fa:2e:a7:76:33:17:04:85:
                    97:dd:10:59:49:dd:2d:71:85:14:e5:ef:39:e4:6b:
                    5f:8f:7e:c4:33:4d:54:f2:6a:5d:0f:96:dd:f7:38:
                    bf:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:31:C8:12:1D:F4:FE:50:9A:C4:2C:AC:A3:41:8D:61:61:BD:77:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/82f0725b-39fa-309e-973d-93dce61d067c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.15.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e8:07:cb:e1:5f:0d:69:a6:1c:91:94:64:39:86:56:84:02:d7:
         22:ad:65:6e:4e:41:60:67:bb:6d:49:f0:61:9a:23:89:4d:da:
         bd:63:af:28:9f:fb:5a:a5:54:dd:12:94:cb:ac:55:22:76:b2:
         23:d7:3e:c6:8c:e3:e7:97:f4:2c:33:5f:f2:f1:b3:b4:6f:4f:
         34:6f:9a:bd:c0:a0:3a:fe:1c:38:58:ee:71:84:9c:a5:1f:96:
         18:3a:90:0b:cc:bf:ad:13:5c:a6:b6:1b:12:5e:7c:1d:9d:60:
         4d:e7:87:99:0e:80:29:4e:62:f0:6e:6d:9e:3d:e3:fe:36:2e:
         50:89:b1:33:9f:62:0d:3b:74:4d:d0:c9:fa:de:08:e8:97:16:
         8f:32:e6:57:e0:bb:92:4b:aa:06:e9:9a:51:3f:21:ff:5e:51:
         82:99:13:ce:25:43:fa:9e:33:3d:d7:f8:47:d7:a7:2f:dc:da:
         de:74:48:4f:96:07:16:f0:84:a1:e1:44:71:91:54:fa:70:66:
         fb:0c:1a:61:cf:1e:4e:03:87:eb:cd:48:c8:66:4b:dc:c5:c1:
         f1:0f:4d:88:de:af:9c:18:38:f0:1e:40:7c:6b:34:e4:fd:83:
         e9:31:a8:64:28:15:c9:ee:9e:b2:b2:70:8d:60:b2:10:09:eb:
         a8:4f:90:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:37:22 2026 by rpki-client