Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/bb19269d-3510-38f5-9589-0b117cf4dc1f.roa
File:                     bb19269d-3510-38f5-9589-0b117cf4dc1f.roa (raw, json)
Hash identifier:          LBU/WwuqhzF0PjJnxlN5rOcMALUJxdATxQpo+6gaUWU=
Subject key identifier:   F1:58:57:46:14:A3:4C:C4:DD:85:0A:46:5A:B7:D9:09:D4:3A:D8:11
Certificate issuer:       /CN=dc598c19-9d8e-4650-abce-c34c5146591f
Certificate serial:       010D0C9F4328584DCAFB096C72CFA9DAB6995E80
Authority key identifier: 64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/bb19269d-3510-38f5-9589-0b117cf4dc1f.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     5650
IP address blocks:        172.85.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fb:09:6c:72:cf:a9:da:b6:99:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc598c19-9d8e-4650-abce-c34c5146591f
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=42d2d5da-1de7-48df-bbd3-5958dbe78663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:20:e2:ba:b4:a5:ee:7c:47:09:f9:60:d0:06:
                    ee:84:e8:1a:21:44:04:ba:be:b1:15:30:2c:f0:df:
                    9d:3c:43:d8:50:89:49:99:7c:3e:b7:30:f7:8a:e0:
                    d9:22:71:03:2d:82:5c:96:cf:13:71:b0:ff:3d:bd:
                    1a:19:ed:ba:da:18:a2:92:a3:2b:6b:a1:2e:dc:6c:
                    fa:be:4b:a5:2b:6f:8a:4b:bd:0b:14:10:7c:a9:f3:
                    09:4d:8a:6a:a9:fe:f5:be:09:90:9c:3d:9a:fa:64:
                    04:43:ea:b1:7c:44:1b:6b:9e:ec:cf:d5:06:f0:0c:
                    7a:e1:5f:c0:15:08:b0:4a:22:72:2e:9d:c9:46:71:
                    82:60:06:b0:e1:8d:6f:3d:84:b9:87:d8:17:09:ca:
                    6e:01:79:3d:9d:49:d3:70:ee:4d:bc:51:37:3d:0d:
                    62:7e:ae:23:7c:5d:d2:ec:dd:4b:3d:3b:c1:ea:00:
                    92:01:f6:b7:ce:83:fb:95:7e:2c:5b:9a:fe:5f:53:
                    a4:ce:c0:47:35:d0:a8:83:db:39:e7:69:96:ac:04:
                    71:26:2a:46:db:24:e7:85:f7:37:22:8a:71:89:68:
                    1f:ff:47:37:8a:cb:7c:cc:d7:60:34:55:ca:ad:7a:
                    43:43:50:ce:eb:aa:6d:70:67:59:a8:f5:4a:51:cb:
                    3f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:58:57:46:14:A3:4C:C4:DD:85:0A:46:5A:B7:D9:09:D4:3A:D8:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/bb19269d-3510-38f5-9589-0b117cf4dc1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.85.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:c5:27:0e:5d:eb:1f:02:df:15:a4:7b:e9:51:5b:fd:59:37:
         d8:4b:c5:8c:b3:df:7e:69:fe:94:6f:b9:ab:3b:c2:a7:f9:f6:
         41:a0:5d:de:47:a1:d6:66:2f:49:87:ec:d6:7a:d6:b1:be:50:
         ec:41:60:af:12:65:eb:50:41:0e:ef:d9:d7:31:20:79:8a:a0:
         cd:3d:00:6d:e7:17:a9:9e:a5:91:cf:3c:05:f9:f4:f8:f4:4c:
         e4:80:cc:d3:8b:1b:d8:c6:bc:88:b6:95:84:80:d7:1a:a1:fc:
         d1:6a:cc:70:88:ba:ac:c2:66:40:f8:d8:73:c2:54:43:23:99:
         04:85:52:58:18:c9:2c:5c:8c:a7:ed:75:1b:ca:71:85:96:fd:
         b1:2e:e1:7a:4b:21:93:3a:44:aa:52:13:e8:53:37:a5:57:38:
         ef:e9:de:51:6d:90:64:6a:65:a7:a1:69:ad:ed:f3:a6:a1:a0:
         21:72:12:0b:9c:f6:a8:51:f7:71:29:9b:f3:25:df:b6:84:6b:
         bd:5a:4f:66:31:fd:ba:c3:56:d3:f1:e1:02:77:06:c2:c2:74:
         9a:58:cb:eb:ac:f9:cd:6a:99:96:dd:22:04:33:65:22:6b:99:
         08:0c:a5:fb:51:e6:b7:67:ab:6f:14:bf:85:f7:e1:47:53:20:
         68:58:dc:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:35:03 2026 by rpki-client