Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/734e4882-902d-4048-bebd-a21b61bd145c/f59674d6-3a32-3670-a864-84f13900fe96.roa
File:                     f59674d6-3a32-3670-a864-84f13900fe96.roa (raw, json)
Hash identifier:          rLBqhDFtGIEGZSArryr+ZXYnz/u6dkUcf82MaWuqkGQ=
Subject key identifier:   B2:71:85:63:9E:FC:2C:96:12:EC:22:D1:80:F4:CF:87:23:FF:AF:48
Certificate issuer:       /CN=734e4882-902d-4048-bebd-a21b61bd145c
Certificate serial:       010D0C9F4328584E296F1DCED5147E2317CB9B80
Authority key identifier: 7B:CB:39:A2:4C:C9:BE:AC:FD:47:7F:A5:0C:C1:5B:67:8C:A6:33:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/734e4882-902d-4048-bebd-a21b61bd145c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/734e4882-902d-4048-bebd-a21b61bd145c/f59674d6-3a32-3670-a864-84f13900fe96.roa
Signing time:             Sat 13 Jun 2026 21:00:12 +0000
ROA not before:           Sat 13 Jun 2026 21:00:12 +0000
ROA not after:            Fri 11 Sep 2026 21:00:12 +0000
asID:                     17267
IP address blocks:        199.89.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/734e4882-902d-4048-bebd-a21b61bd145c/734e4882-902d-4048-bebd-a21b61bd145c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/734e4882-902d-4048-bebd-a21b61bd145c/734e4882-902d-4048-bebd-a21b61bd145c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/734e4882-902d-4048-bebd-a21b61bd145c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:29:6f:1d:ce:d5:14:7e:23:17:cb:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734e4882-902d-4048-bebd-a21b61bd145c
        Validity
            Not Before: Jun 13 21:00:12 2026 GMT
            Not After : Sep 11 21:00:12 2026 GMT
        Subject: CN=8e3356f0-ba00-40b8-a5b5-11ec6422a46d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a1:ca:bb:47:f2:1d:e4:a6:0f:e3:58:1a:77:
                    fe:5f:d9:f7:87:cc:74:62:11:04:8f:a7:cd:b4:18:
                    87:35:3b:87:77:9b:68:24:dd:ae:60:a7:fc:32:a8:
                    67:cb:dc:ad:d0:d8:bb:d8:17:48:66:06:22:3a:1d:
                    5a:b3:d1:97:78:4d:17:99:e9:2b:d2:11:b0:68:22:
                    9e:c1:87:d1:fe:22:ab:aa:a9:61:7b:cb:a4:70:01:
                    4c:75:ad:17:86:34:91:87:6b:2c:79:50:ca:bc:96:
                    21:89:ae:80:bc:b3:54:32:97:0d:41:34:1f:dc:e0:
                    09:bd:a2:b0:b2:73:79:2d:d6:ed:bb:5c:3b:81:e4:
                    0f:87:ab:ef:c5:50:76:9a:bf:bd:2a:7a:c2:9a:f1:
                    7c:14:c7:90:e2:a5:82:0b:b6:d5:3d:a1:b5:be:70:
                    f6:79:56:69:e2:61:e1:d5:74:9d:ef:b0:38:98:f9:
                    10:31:8a:ed:b9:f1:10:4a:ee:16:9c:64:bb:b3:31:
                    22:bb:a1:3a:61:ec:cd:a6:f5:40:81:5e:b2:3c:95:
                    f3:df:31:31:97:59:34:e6:1a:21:5c:88:43:82:7d:
                    6e:a8:4a:77:fc:2f:ea:68:49:37:64:35:08:f1:00:
                    60:b7:05:5a:89:cb:2a:8b:39:4b:e8:24:ce:f9:6c:
                    2c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:71:85:63:9E:FC:2C:96:12:EC:22:D1:80:F4:CF:87:23:FF:AF:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/734e4882-902d-4048-bebd-a21b61bd145c/f59674d6-3a32-3670-a864-84f13900fe96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/734e4882-902d-4048-bebd-a21b61bd145c/734e4882-902d-4048-bebd-a21b61bd145c.crl

            X509v3 Authority Key Identifier:
                keyid:7B:CB:39:A2:4C:C9:BE:AC:FD:47:7F:A5:0C:C1:5B:67:8C:A6:33:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/734e4882-902d-4048-bebd-a21b61bd145c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.89.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:39:e8:16:51:01:69:16:15:fb:a5:2a:2a:e6:3b:72:b5:17:
         71:d7:28:83:e6:66:36:ab:f0:44:c4:1f:2f:3f:fc:3e:c1:4f:
         56:c7:6a:e1:7f:b6:79:20:76:38:e0:ae:02:6f:20:4b:db:76:
         99:46:77:29:cf:24:77:93:ea:3c:2b:50:4d:47:3a:bf:84:cc:
         28:5b:0c:2d:b6:dc:b8:0f:3e:60:7b:1a:89:61:ea:62:56:b7:
         26:d6:5e:67:11:80:ec:32:64:62:a0:d9:38:20:47:22:97:36:
         4f:64:5e:e6:8b:cf:b4:65:ce:78:2e:8c:28:53:14:f0:0e:25:
         94:91:36:af:43:a3:02:75:3d:8c:64:cf:03:c9:fb:dc:1b:34:
         b4:79:02:6c:fb:f0:fb:9f:4a:20:e7:a8:0c:c9:f6:8b:e5:9e:
         8f:3f:6f:05:9a:7e:4f:0d:68:c5:48:72:74:4a:4c:53:80:59:
         b0:5e:12:2c:57:db:21:b7:98:a7:05:73:ac:bd:18:4d:04:a6:
         46:3c:21:0e:a4:75:0d:99:e4:19:4f:14:ff:bb:40:6e:c7:af:
         aa:a7:0f:8c:96:a3:f0:34:7f:24:8d:30:d0:9e:0c:b2:4c:b8:
         e2:a1:ab:67:de:4c:c5:e7:7f:cc:43:d5:d3:07:6a:df:b4:18:
         b4:77:d2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:25:20 2026 by rpki-client