Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/35b5598c-6468-4a07-ba62-b390f60d1dde/1bb0ebae-f7ba-3646-a08c-3e410b3ce578.roa
File:                     1bb0ebae-f7ba-3646-a08c-3e410b3ce578.roa (raw, json)
Hash identifier:          tGSgSksjjRAYLsjXnDU5Npf2MfvtrN37cSfJJVcNeTk=
Subject key identifier:   F8:DD:65:6E:DB:7C:D2:D7:95:B2:88:B0:17:19:AC:39:C6:23:E1:F9
Certificate issuer:       /CN=35b5598c-6468-4a07-ba62-b390f60d1dde
Certificate serial:       010D0C9F4328584F40915430A368AD597ABAF880
Authority key identifier: DD:5D:3B:CD:F9:81:21:7B:71:FC:0A:A5:9C:06:B7:F8:82:62:FD:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/35b5598c-6468-4a07-ba62-b390f60d1dde.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/35b5598c-6468-4a07-ba62-b390f60d1dde/1bb0ebae-f7ba-3646-a08c-3e410b3ce578.roa
Signing time:             Mon 21 Sep 2026 20:40:00 +0000
ROA not before:           Mon 21 Sep 2026 20:40:00 +0000
ROA not after:            Sun 20 Dec 2026 21:40:00 +0000
asID:                     198949
IP address blocks:        199.192.0.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/35b5598c-6468-4a07-ba62-b390f60d1dde/35b5598c-6468-4a07-ba62-b390f60d1dde.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/35b5598c-6468-4a07-ba62-b390f60d1dde/35b5598c-6468-4a07-ba62-b390f60d1dde.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/35b5598c-6468-4a07-ba62-b390f60d1dde.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:40:91:54:30:a3:68:ad:59:7a:ba:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35b5598c-6468-4a07-ba62-b390f60d1dde
        Validity
            Not Before: Sep 21 20:40:00 2026 GMT
            Not After : Dec 20 21:40:00 2026 GMT
        Subject: CN=858478c5-e7f3-460a-86e5-b26595bb8a13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c8:3f:89:6e:48:af:3f:e4:20:27:ed:6f:d3:
                    e9:ce:60:c4:18:c5:85:c1:e5:17:94:a6:f0:0d:3c:
                    a1:48:48:90:20:66:13:be:d5:19:a3:ae:d9:d2:59:
                    07:cb:43:61:e4:01:7f:17:54:17:9e:6f:14:d7:d8:
                    c9:16:3d:64:a1:69:45:42:09:aa:93:a8:fa:f7:ce:
                    a6:93:ea:fa:30:74:e6:df:88:54:e4:c8:b2:81:c8:
                    16:d0:01:76:8b:b7:10:ce:d8:72:43:17:95:69:da:
                    a7:67:68:77:f0:c1:c4:4e:16:06:b5:1a:cd:ce:d2:
                    1f:29:83:75:ad:b1:1b:cc:f3:a5:85:73:7d:08:24:
                    2c:1d:4c:d1:ae:fd:4f:1b:5b:e0:58:e8:47:be:ab:
                    31:2e:01:4d:de:fa:e5:e6:c7:64:47:f2:c9:77:c8:
                    1d:fe:48:81:7c:b2:bf:72:ca:aa:d9:4a:68:08:8e:
                    c4:22:ff:22:d3:02:5c:ed:36:4f:7f:38:d6:0a:a1:
                    04:0e:15:5b:89:88:45:c3:29:85:62:76:4a:7c:a8:
                    ce:a9:09:b1:e7:4a:20:cd:62:57:8e:a9:c0:1b:b1:
                    cc:9e:06:08:2b:e7:85:8e:a7:b3:bd:82:2c:5d:d1:
                    b8:42:00:d7:e7:0e:5b:58:94:22:a0:4a:2c:91:ba:
                    08:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:DD:65:6E:DB:7C:D2:D7:95:B2:88:B0:17:19:AC:39:C6:23:E1:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/35b5598c-6468-4a07-ba62-b390f60d1dde/1bb0ebae-f7ba-3646-a08c-3e410b3ce578.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/35b5598c-6468-4a07-ba62-b390f60d1dde/35b5598c-6468-4a07-ba62-b390f60d1dde.crl

            X509v3 Authority Key Identifier:
                keyid:DD:5D:3B:CD:F9:81:21:7B:71:FC:0A:A5:9C:06:B7:F8:82:62:FD:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/35b5598c-6468-4a07-ba62-b390f60d1dde.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.192.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:e2:5d:53:1d:56:e3:71:96:49:2b:17:b3:58:54:0e:86:5f:
         f1:8b:62:63:b0:fd:ce:c7:1f:04:88:55:ed:a8:1c:e1:99:e0:
         a4:9f:ea:87:fe:2b:2e:88:cb:cf:9d:ec:e5:a9:72:ba:cb:96:
         d6:24:c2:6e:ba:65:17:35:3a:d9:e6:aa:4f:d0:99:4f:c4:f4:
         36:c2:09:6a:5e:a7:8a:08:52:5b:de:08:8d:7d:0d:7a:56:2f:
         96:51:70:2d:6a:7c:3d:86:74:58:f3:3b:00:8c:e3:31:bc:f1:
         fc:29:fa:30:ec:8a:47:76:34:38:80:bc:c9:37:19:6e:b4:a0:
         8c:87:c0:93:e9:c3:c7:94:24:83:1c:de:29:19:cb:23:21:c1:
         37:2c:28:65:47:25:03:b0:fb:f4:8b:d5:32:de:92:1e:4d:85:
         da:dc:b9:01:fd:b6:ab:bb:c5:ee:97:c7:13:52:cb:0a:bd:4c:
         04:ae:c0:1b:af:1f:17:b9:bb:cc:f6:aa:dd:44:09:c5:77:d8:
         45:fb:44:51:60:4c:45:96:99:80:5a:b1:f8:a5:11:af:4e:d7:
         1a:cc:bd:52:4b:87:3e:56:ca:34:b9:99:96:03:ca:17:80:87:
         0b:26:f7:da:c9:ef:08:1a:89:b0:1d:d1:c1:d4:ce:5f:28:a5:
         32:63:dd:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:00:13 2026 by rpki-client