Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/7e9199d6-68fd-32ce-b6e0-b7f5feaa193d.roa
File:                     7e9199d6-68fd-32ce-b6e0-b7f5feaa193d.roa (raw, json)
Hash identifier:          KmLvXdjjkYw7y45U8PHpjBd2piUbH+FqkjM2qKZPOZU=
Subject key identifier:   DA:A4:59:82:9C:72:91:64:39:4C:F6:49:44:F2:1B:78:39:54:FD:73
Certificate issuer:       /CN=f6a15183-2c23-4d0a-9aaa-fee47f7a61f1
Certificate serial:       010D0C9F4328584DB9D36080BA39615AF58E5100
Authority key identifier: 5E:7D:66:AB:68:3C:74:74:46:85:34:BA:FB:50:A4:2F:7D:CF:A9:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/7e9199d6-68fd-32ce-b6e0-b7f5feaa193d.roa
Signing time:             Mon 04 May 2026 21:32:01 +0000
ROA not before:           Mon 04 May 2026 21:32:01 +0000
ROA not after:            Sun 02 Aug 2026 21:32:01 +0000
asID:                     397268
IP address blocks:        199.58.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b9:d3:60:80:ba:39:61:5a:f5:8e:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6a15183-2c23-4d0a-9aaa-fee47f7a61f1
        Validity
            Not Before: May  4 21:32:01 2026 GMT
            Not After : Aug  2 21:32:01 2026 GMT
        Subject: CN=e203838e-6247-4ddc-a8ed-cb22cb4ab817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:42:f2:cd:85:2d:3c:0a:b7:c5:be:4c:24:e7:
                    fb:92:c5:df:af:f0:ec:4b:ec:3e:6b:b8:52:f6:30:
                    ce:e9:90:ca:91:90:35:dd:22:61:f2:07:55:7a:94:
                    14:f3:8b:88:99:e4:ae:03:fc:6b:dd:60:33:21:b0:
                    17:0f:29:68:d6:cc:e2:75:fd:2b:04:2d:29:17:5a:
                    83:bb:bf:6d:fc:92:9d:81:a5:40:17:a6:1b:cb:65:
                    3d:0e:c6:39:27:8b:a9:90:e7:3b:a2:e1:99:13:11:
                    dc:e0:f1:fd:d0:81:0a:7f:5c:27:79:3c:b6:59:3c:
                    dd:cc:fe:ac:d5:39:a4:12:96:49:bc:c0:81:ec:df:
                    fa:54:e9:ba:be:3f:2a:e9:3d:59:cf:ce:a9:36:94:
                    e1:f9:37:b1:67:57:32:eb:7b:24:3a:da:f0:36:06:
                    b5:88:e5:40:da:70:45:f1:2c:63:54:68:79:e0:a0:
                    25:d1:f8:c8:66:09:b6:27:7c:20:67:19:bc:0a:1e:
                    c1:62:ef:2e:52:e2:37:4c:1d:e4:35:c6:67:86:fb:
                    75:16:d1:0b:9a:a8:14:7f:c1:b0:19:b4:63:c3:92:
                    b3:42:18:05:d6:c0:38:61:49:a8:b6:d8:f8:1e:b4:
                    26:ec:66:52:2a:af:a2:d3:65:82:7c:fa:02:44:89:
                    79:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A4:59:82:9C:72:91:64:39:4C:F6:49:44:F2:1B:78:39:54:FD:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/7e9199d6-68fd-32ce-b6e0-b7f5feaa193d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.crl

            X509v3 Authority Key Identifier:
                keyid:5E:7D:66:AB:68:3C:74:74:46:85:34:BA:FB:50:A4:2F:7D:CF:A9:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.58.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:8c:ed:f2:15:c3:36:ce:22:e7:6e:df:68:c3:2c:8d:69:8e:
         e4:9f:b9:24:94:6e:d9:b9:36:f5:d3:10:c5:9e:f3:a6:4c:ae:
         f4:46:b5:f6:1a:b3:04:fc:50:f3:85:3b:71:3f:85:06:31:32:
         a4:fd:e2:fd:b6:eb:3f:7d:57:20:3b:3e:c6:e3:da:52:71:27:
         ec:ef:7b:9f:96:3c:ba:d6:86:21:e3:08:71:0c:0f:96:08:58:
         ae:15:48:c3:73:32:e7:83:10:e5:bd:63:ed:e5:39:58:63:84:
         76:74:82:a3:cd:a5:bd:44:ae:3c:ab:50:c4:ae:66:53:d2:be:
         2d:ee:d8:50:7c:cf:17:e5:4c:9d:81:14:c6:0f:08:a7:af:5d:
         08:6e:85:ba:4d:aa:eb:cc:ba:b0:fd:07:5c:cb:c7:fe:eb:62:
         47:bd:db:a6:94:e6:af:ed:a3:0e:8f:ec:9d:a3:1e:b7:c0:94:
         52:9a:2c:88:e4:69:45:95:3d:47:2f:5a:c5:a1:d1:ee:07:73:
         96:4d:73:4b:51:bc:88:ef:0d:5d:be:d6:65:45:4a:8a:32:db:
         5d:ad:d3:64:2a:ac:ad:1a:b4:16:b6:b3:53:fd:39:a8:df:e3:
         b8:bc:ee:ca:90:34:25:e1:25:eb:74:4d:8b:3a:a4:cd:8f:5c:
         02:e4:1b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:08:12 2026 by rpki-client