Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/6931bd9b-26eb-3bce-8a34-2c80f4f6b5d7.roa
File:                     6931bd9b-26eb-3bce-8a34-2c80f4f6b5d7.roa (raw, json)
Hash identifier:          Umm0ZsQvaiaivnL75VP/dTKVtDYHUoZQFJNsFHNOXBQ=
Subject key identifier:   CA:AD:85:28:0C:F3:35:70:1B:EC:96:15:4E:4A:67:53:9B:62:5A:6D
Certificate issuer:       /CN=56183502-983d-4114-a074-bf0eaa901de3
Certificate serial:       010D0C9F4328584E6B0A1E964AADD25B6DD2C380
Authority key identifier: A7:70:17:EE:B3:BC:91:78:E4:7F:7D:63:93:F5:25:DA:8E:9E:6C:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/6931bd9b-26eb-3bce-8a34-2c80f4f6b5d7.roa
Signing time:             Tue 07 Jul 2026 09:00:12 +0000
ROA not before:           Tue 07 Jul 2026 09:00:12 +0000
ROA not after:            Mon 05 Oct 2026 09:00:12 +0000
asID:                     54363
IP address blocks:        199.79.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/56183502-983d-4114-a074-bf0eaa901de3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/56183502-983d-4114-a074-bf0eaa901de3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6b:0a:1e:96:4a:ad:d2:5b:6d:d2:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56183502-983d-4114-a074-bf0eaa901de3
        Validity
            Not Before: Jul  7 09:00:12 2026 GMT
            Not After : Oct  5 09:00:12 2026 GMT
        Subject: CN=41de59e3-9193-4309-bccc-99becc07967b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:4e:28:ac:99:34:fd:c6:f8:93:d8:b4:40:8d:
                    31:92:c7:7e:b4:49:92:c2:77:fe:18:b9:51:e3:35:
                    fa:e6:8d:de:26:6c:67:74:db:c7:fb:e7:90:ad:ed:
                    2c:b7:b8:40:c1:2f:1e:52:55:5f:90:c7:bd:56:0e:
                    b7:58:9b:41:2d:bc:3c:56:3c:a0:7d:36:92:5d:fa:
                    9a:ca:8d:5b:b8:a2:78:99:51:7f:54:d7:bc:db:cc:
                    07:ae:de:e1:95:ce:d8:aa:d9:bb:73:bb:ec:6e:42:
                    71:71:18:2d:ac:aa:4d:cf:83:e9:55:c9:b1:6b:ed:
                    57:30:98:73:7d:02:79:89:36:43:cd:5c:fb:35:37:
                    18:f3:5d:0c:15:36:fc:4d:ea:e8:d0:02:aa:6c:3b:
                    1f:f4:2c:af:9a:25:75:ad:8c:04:1c:a3:2b:15:77:
                    a1:f5:70:56:73:e5:7d:80:0b:29:2d:16:da:26:34:
                    a1:76:8d:a5:03:cd:26:d9:29:fc:de:cb:0f:c7:1e:
                    e6:66:75:b2:30:f3:c9:41:c0:6b:0d:a8:a8:90:f7:
                    b9:53:04:73:05:aa:f7:79:08:55:09:77:63:02:6c:
                    74:49:11:fe:26:40:86:57:a4:26:a3:d7:12:d2:67:
                    ee:99:40:3c:7e:ef:03:ef:e3:83:67:01:b5:c5:22:
                    87:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:AD:85:28:0C:F3:35:70:1B:EC:96:15:4E:4A:67:53:9B:62:5A:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/6931bd9b-26eb-3bce-8a34-2c80f4f6b5d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/56183502-983d-4114-a074-bf0eaa901de3.crl

            X509v3 Authority Key Identifier:
                keyid:A7:70:17:EE:B3:BC:91:78:E4:7F:7D:63:93:F5:25:DA:8E:9E:6C:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.79.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:c4:22:03:f8:ff:f8:d3:95:f6:de:cd:dc:14:91:0d:63:87:
         a5:c5:8f:ed:74:92:1f:27:93:d5:e9:a5:d6:76:a8:ea:6e:f8:
         e0:3c:38:01:ad:ce:80:e5:f1:db:8f:dd:ad:d0:82:a8:5b:b2:
         7f:a0:e1:b7:46:5c:5b:92:88:5c:d8:c3:72:4c:2a:91:60:67:
         bb:11:a6:8f:ee:a3:98:ff:d8:b4:6f:0d:94:7c:f4:67:65:ed:
         bb:26:67:86:27:e2:f4:68:26:5a:a0:34:43:50:c8:e4:ca:34:
         f4:67:45:a8:b0:5f:7e:e2:8a:77:29:83:60:c4:71:b2:a4:cf:
         af:58:e5:90:d7:6e:c9:26:fb:e8:d3:f9:30:7d:b8:68:1a:0c:
         76:ec:eb:1d:49:2b:a8:56:a9:fb:da:49:82:71:7e:60:20:42:
         02:6b:58:23:42:b9:e7:eb:64:de:ae:37:ad:fd:89:ba:14:5c:
         f3:da:75:73:53:56:6b:84:a6:0b:e5:2d:69:45:ac:32:d4:fa:
         05:3a:5f:92:3f:43:e4:85:0b:48:9d:e6:77:ef:15:e3:e0:23:
         52:2d:b3:74:7b:fa:d1:ef:28:ce:58:7b:87:4a:cf:7d:23:5f:
         a9:f5:9d:5c:49:1a:3a:5d:08:4c:71:2c:ee:ac:d1:9e:74:69:
         03:ae:af:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:54:02 2026 by rpki-client