Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e727d729-e439-4963-b6df-9b7aec75f8e1/f9b63be0-4e77-3548-95c8-c67bb50729dc.roa
File:                     f9b63be0-4e77-3548-95c8-c67bb50729dc.roa (raw, json)
Hash identifier:          3mCdGfGvC116bxCy5v9HbPC1HOFPJLJUivIMZVnJ4Ic=
Subject key identifier:   E1:4E:C1:DE:4F:43:70:46:F0:8E:7B:38:4C:56:67:B8:CC:65:13:12
Certificate issuer:       /CN=e727d729-e439-4963-b6df-9b7aec75f8e1
Certificate serial:       010D0C9F4328584E5D14A1AFB7DC56488DAD1440
Authority key identifier: 5F:1B:E0:33:1D:DE:F6:48:34:80:91:29:ED:C0:37:6C:67:5D:06:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e727d729-e439-4963-b6df-9b7aec75f8e1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e727d729-e439-4963-b6df-9b7aec75f8e1/f9b63be0-4e77-3548-95c8-c67bb50729dc.roa
Signing time:             Thu 02 Jul 2026 09:00:12 +0000
ROA not before:           Thu 02 Jul 2026 09:00:12 +0000
ROA not after:            Wed 30 Sep 2026 09:00:12 +0000
asID:                     46851
IP address blocks:        199.47.80.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e727d729-e439-4963-b6df-9b7aec75f8e1/e727d729-e439-4963-b6df-9b7aec75f8e1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e727d729-e439-4963-b6df-9b7aec75f8e1/e727d729-e439-4963-b6df-9b7aec75f8e1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e727d729-e439-4963-b6df-9b7aec75f8e1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5d:14:a1:af:b7:dc:56:48:8d:ad:14:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e727d729-e439-4963-b6df-9b7aec75f8e1
        Validity
            Not Before: Jul  2 09:00:12 2026 GMT
            Not After : Sep 30 09:00:12 2026 GMT
        Subject: CN=4a3814cc-4ac1-4355-adee-4a80d14696cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f3:49:94:fb:57:98:40:6c:9a:ed:06:b7:19:
                    35:a1:92:c7:d9:f3:78:9d:d8:9a:ec:bf:db:c4:75:
                    17:c4:2d:2e:fa:93:da:f9:70:b4:86:d0:23:66:2c:
                    22:01:9d:a0:10:f8:2d:d0:e8:8b:2e:98:4f:ed:ed:
                    92:19:a1:2a:9f:65:51:23:5a:d3:9f:82:72:e2:db:
                    39:df:58:4b:7d:71:b5:98:13:b3:89:2f:fa:3c:2d:
                    03:c0:0c:bc:ce:de:90:49:49:d2:65:65:55:e1:66:
                    b7:09:f1:3f:1e:91:7f:ce:10:a6:dd:64:71:0a:b4:
                    64:08:e3:85:8c:51:bd:bc:c6:10:47:09:53:80:c7:
                    17:65:21:e8:b3:be:dd:94:24:e0:c5:93:9d:f5:ff:
                    88:8d:95:80:22:b9:5e:c4:51:4b:a8:33:96:68:6a:
                    65:b3:41:d9:24:9d:8b:ca:4e:3f:7a:a2:f9:9c:d3:
                    2a:51:c1:86:1c:13:5c:66:b7:d3:88:79:42:11:db:
                    40:8a:5a:86:83:03:59:26:02:ea:60:2f:fd:76:8d:
                    ed:d9:e4:71:ef:50:bb:6b:63:66:87:71:b9:42:34:
                    64:1d:de:5d:dc:ec:7c:bf:a2:0c:ae:f9:76:8e:1b:
                    25:ea:b2:17:47:45:b6:fe:26:17:d7:fa:50:72:3a:
                    f6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:4E:C1:DE:4F:43:70:46:F0:8E:7B:38:4C:56:67:B8:CC:65:13:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e727d729-e439-4963-b6df-9b7aec75f8e1/f9b63be0-4e77-3548-95c8-c67bb50729dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e727d729-e439-4963-b6df-9b7aec75f8e1/e727d729-e439-4963-b6df-9b7aec75f8e1.crl

            X509v3 Authority Key Identifier:
                keyid:5F:1B:E0:33:1D:DE:F6:48:34:80:91:29:ED:C0:37:6C:67:5D:06:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e727d729-e439-4963-b6df-9b7aec75f8e1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.47.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:6e:a8:c3:19:74:dc:4a:1c:a5:16:c3:22:96:23:b1:76:2e:
         80:fe:3a:59:a0:c7:cf:99:ba:73:96:32:18:43:27:75:12:ff:
         92:bb:50:be:51:8b:09:2e:c4:01:e1:ee:06:0f:e8:84:db:b5:
         96:c5:69:d0:ec:74:9e:9c:79:14:35:cb:47:14:80:de:a2:0d:
         19:c7:30:5a:d8:f0:54:c6:af:58:b4:23:04:5c:60:57:d5:51:
         d4:1e:92:f5:8e:42:06:a6:b5:30:d6:62:c6:f7:56:31:8d:8e:
         fb:23:2c:40:de:8b:c8:cd:03:19:f1:43:0b:8b:85:48:c0:1a:
         ec:6e:c7:5d:95:db:c9:f7:81:84:80:c6:f7:9c:a6:b5:1a:29:
         5b:3d:c3:6f:e5:74:05:84:e6:9e:8b:27:c2:63:42:36:2c:cf:
         ae:79:9f:2a:9e:60:1a:ca:86:d1:bc:d6:7b:4b:2b:d8:e1:35:
         b7:77:d7:89:dd:55:dd:e8:54:ec:28:94:1f:c3:9c:57:d5:3d:
         7a:52:f1:cd:79:79:db:2b:ce:f9:88:07:22:d2:e6:5e:40:26:
         31:22:f9:55:94:5e:7a:23:b3:12:08:d7:1b:91:ea:4e:63:47:
         ae:f3:ed:42:13:a2:e6:d2:e0:80:a1:14:76:52:52:ea:02:c5:
         e2:ea:13:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:56:30 2026 by rpki-client