Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/dff15429-e42a-3405-bd1a-050a2f301bd0.roa
File:                     dff15429-e42a-3405-bd1a-050a2f301bd0.roa (raw, json)
Hash identifier:          6Rk6HoVLYfHhTYFZx2XM6DVp9D8mzycv7TvdCGsYTzk=
Subject key identifier:   12:6A:21:E0:DE:EB:F6:A0:7E:88:30:57:C6:D0:E4:A5:8F:F5:D0:C9
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584DB4A585720DACD9F0AEC1C1C0
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/dff15429-e42a-3405-bd1a-050a2f301bd0.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     11290
IP address blocks:        199.193.168.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:85:72:0d:ac:d9:f0:ae:c1:c1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=8a66a18c-913d-4b85-a355-fbf0586825f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:23:06:de:f5:23:c6:92:3a:ee:33:87:1d:f1:
                    96:d5:04:f8:77:bd:8d:04:33:6b:d2:14:0d:df:e5:
                    48:f7:7c:09:b8:3f:12:7f:86:5d:04:04:44:ed:7e:
                    13:66:88:18:20:dc:ab:e7:59:e1:e0:ec:3b:03:a5:
                    ca:13:d1:a7:a9:7e:a8:66:18:be:f6:7d:b7:5a:7d:
                    0f:31:e5:40:fa:47:42:8f:e3:4a:82:ed:dd:8f:bf:
                    a6:5e:df:93:5e:5f:c8:4c:86:28:1c:76:05:34:71:
                    db:75:06:9f:4d:05:1b:b7:7f:88:99:86:7d:ba:2f:
                    6a:e7:18:90:dc:a6:f0:21:8d:76:96:07:31:69:bb:
                    3d:89:ae:1e:17:a1:a1:a7:8f:74:49:d4:5d:40:1d:
                    aa:5a:89:2c:1f:8c:5d:fa:17:75:ef:30:23:61:0e:
                    79:89:ee:17:e6:75:2e:d9:93:2b:e9:70:94:29:d4:
                    35:9c:44:c9:56:60:22:6b:95:c0:32:28:b9:32:62:
                    e4:23:cb:24:44:5b:82:52:04:3e:df:5f:2f:5e:aa:
                    97:7b:69:03:75:67:05:c0:9d:fd:23:5c:41:64:e8:
                    62:bf:3d:49:70:6b:3c:ab:d7:9e:ff:78:7c:b6:a1:
                    d4:02:b4:1d:36:24:75:e7:42:d6:67:59:8f:21:61:
                    cd:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:6A:21:E0:DE:EB:F6:A0:7E:88:30:57:C6:D0:E4:A5:8F:F5:D0:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/dff15429-e42a-3405-bd1a-050a2f301bd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.193.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:55:e0:f2:2c:88:60:3d:0e:68:6e:e4:57:61:26:de:ea:a6:
         52:19:bd:a4:e8:32:b4:66:b5:25:97:fb:cb:1a:bc:bb:97:0b:
         6a:6c:de:b7:2d:23:f3:25:8c:f7:dd:48:73:f3:42:42:ab:db:
         ff:5a:de:72:c4:fc:78:ee:1a:c3:dc:97:94:dd:94:f0:f4:bb:
         cb:d1:e0:38:ea:90:0b:a8:fc:6d:00:43:b6:4e:b8:11:65:20:
         66:99:50:db:fb:fe:d3:21:68:97:f8:d4:fb:26:f3:16:d7:5c:
         96:9e:7b:1b:7a:ba:ff:cd:08:a6:22:d6:ee:8f:88:ba:ce:ef:
         e2:06:61:ef:ee:fd:73:72:35:44:68:21:99:39:7b:4b:d5:5f:
         07:3a:ff:c2:7c:96:54:d4:80:48:11:be:0d:6d:d2:ec:f9:02:
         8d:8c:a1:03:3e:15:7b:18:dd:17:50:a2:dd:e7:21:11:87:d1:
         69:65:eb:fa:99:80:a2:1a:97:ed:62:48:c7:72:8a:c4:8c:cd:
         46:c2:3a:67:33:5a:27:15:c7:d4:a5:73:f8:b4:23:41:1f:a4:
         d7:5c:0e:3f:e3:ec:2c:d4:6f:89:52:d6:5f:1a:fe:02:1a:cd:
         f5:4d:09:79:30:8b:c8:ef:0b:5c:6a:07:9b:03:89:b3:ae:9b:
         da:1a:eb:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:50:42 2026 by rpki-client