Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/8af19c0f-0647-3211-b029-18e913e3d7c0.roa
File:                     8af19c0f-0647-3211-b029-18e913e3d7c0.roa (raw, json)
Hash identifier:          oU0yMIEeScpZSTtM3PughIRxxX9cq4bLcDTEUdu+KgI=
Subject key identifier:   E8:F7:81:B0:C1:FE:CC:11:C2:E6:55:C8:9F:C4:7F:CA:3E:8D:5B:14
Certificate issuer:       /CN=9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec
Certificate serial:       010D0C9F4328584F2673BAB3379DBF1CC78D6300
Authority key identifier: B6:F3:A8:F6:CC:10:73:46:38:5F:AB:6A:C9:47:D8:74:32:0F:94:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/8af19c0f-0647-3211-b029-18e913e3d7c0.roa
Signing time:             Sat 12 Sep 2026 12:09:21 +0000
ROA not before:           Sat 12 Sep 2026 12:09:21 +0000
ROA not after:            Fri 11 Dec 2026 13:09:21 +0000
asID:                     11179
IP address blocks:        199.59.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:26:73:ba:b3:37:9d:bf:1c:c7:8d:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec
        Validity
            Not Before: Sep 12 12:09:21 2026 GMT
            Not After : Dec 11 13:09:21 2026 GMT
        Subject: CN=8927df5c-044a-4eba-9367-e9305dc8d0f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d6:ef:58:5c:ff:03:64:dc:f4:6a:cb:0e:b9:
                    6d:d7:08:9a:86:2e:fb:75:61:22:8e:b7:78:07:47:
                    05:63:19:c9:52:ac:59:f0:c8:05:67:0e:fd:ec:ba:
                    b2:b2:72:f5:79:a1:0b:99:a9:f8:54:15:3c:7f:00:
                    c3:38:f1:bc:f7:38:83:94:95:38:bf:3e:70:81:3e:
                    1c:6a:df:3c:62:68:d2:3b:9e:49:12:5c:d7:5b:d3:
                    30:b6:9e:1b:bf:33:e6:3d:05:46:96:85:f1:aa:94:
                    a5:69:81:47:3f:c3:09:72:16:d1:82:bc:19:79:30:
                    71:48:df:4f:77:16:2b:93:c3:f3:c2:38:39:ed:27:
                    e4:f8:ef:e8:d0:7a:22:03:98:8e:74:d5:ff:bc:d8:
                    a1:de:54:bf:69:32:45:e5:14:b5:cc:1d:29:1f:dc:
                    68:6f:c2:59:f3:f2:f4:1c:8f:01:d5:4b:03:9d:63:
                    6c:be:8b:f1:4c:5f:26:63:62:7b:1d:a5:60:72:a7:
                    03:72:1d:b7:b9:3b:fc:73:bb:a4:66:51:f8:88:be:
                    66:4e:2b:63:32:d8:2a:ce:ac:48:42:b0:a9:cc:c5:
                    a4:7c:bc:ef:92:87:8b:6e:f2:ba:fd:fd:96:68:0a:
                    5f:04:43:14:b4:a5:76:45:f5:43:d1:fd:50:67:f6:
                    e4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F7:81:B0:C1:FE:CC:11:C2:E6:55:C8:9F:C4:7F:CA:3E:8D:5B:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/8af19c0f-0647-3211-b029-18e913e3d7c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.crl

            X509v3 Authority Key Identifier:
                keyid:B6:F3:A8:F6:CC:10:73:46:38:5F:AB:6A:C9:47:D8:74:32:0F:94:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.59.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:d0:fd:06:0f:c3:f7:d1:88:9f:ad:a5:a6:14:aa:fc:7d:9d:
         8d:7d:16:5a:62:28:99:5b:48:46:1e:21:85:33:6a:29:86:87:
         53:a3:4c:db:b3:a9:13:fe:1e:1a:bb:d1:e4:6d:5f:ce:0e:15:
         80:6d:63:3a:78:ed:9c:ee:fb:ad:9b:95:8c:d3:cb:03:30:04:
         15:c0:0b:2c:2c:29:55:e3:74:e0:ea:fc:88:ad:01:6d:d7:d1:
         3c:70:f6:ee:2d:6a:22:09:98:b2:3a:32:08:b4:59:5f:30:b3:
         7e:bc:60:79:50:9b:5b:14:5a:87:c3:70:35:a8:cc:d4:ce:ba:
         42:e3:52:ea:07:2f:d3:4a:cd:a1:df:f4:0b:97:61:81:74:97:
         07:ce:ee:63:15:ed:0f:ed:11:20:af:c4:c2:33:c8:26:82:f3:
         29:a3:b1:8d:6b:24:94:ae:a0:40:b2:a8:6f:79:a7:6e:90:4b:
         f5:e4:b7:f0:8b:4d:cf:9b:e1:5c:fd:30:60:fe:83:0b:46:0c:
         37:6f:bc:82:35:0c:ff:81:da:43:30:a1:19:ab:e9:f0:5b:6f:
         6b:d9:88:76:b9:4d:61:61:5f:32:24:02:6f:3a:a8:8c:08:45:
         9b:54:6f:5f:71:40:1b:e3:2f:a9:9d:87:02:59:f0:71:7a:d5:
         86:5c:10:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:02:39 2026 by rpki-client