Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/dc545a09-fe55-4cde-85d3-9e2e69524db2/fb66cf6f-bce9-3b5e-a77c-969d874030cf.roa
File:                     fb66cf6f-bce9-3b5e-a77c-969d874030cf.roa (raw, json)
Hash identifier:          IMKVIvsQYCU15HED2t3WhjYSptfZqiIZJBZrDrwTTYM=
Subject key identifier:   98:12:D2:5B:50:77:5F:E7:EE:D1:90:F0:99:06:E3:5F:ED:BA:E4:F7
Certificate issuer:       /CN=dc545a09-fe55-4cde-85d3-9e2e69524db2
Certificate serial:       010D0C9F4328584E7CED7CD753C3CC494C7A7800
Authority key identifier: 12:FB:70:DA:3C:F2:F0:FE:65:43:74:6D:EA:AB:86:A4:C1:F9:A6:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/dc545a09-fe55-4cde-85d3-9e2e69524db2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/dc545a09-fe55-4cde-85d3-9e2e69524db2/fb66cf6f-bce9-3b5e-a77c-969d874030cf.roa
Signing time:             Mon 13 Jul 2026 18:47:15 +0000
ROA not before:           Mon 13 Jul 2026 18:47:15 +0000
ROA not after:            Sun 11 Oct 2026 18:47:15 +0000
asID:                     14618
IP address blocks:        199.249.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/dc545a09-fe55-4cde-85d3-9e2e69524db2/dc545a09-fe55-4cde-85d3-9e2e69524db2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/dc545a09-fe55-4cde-85d3-9e2e69524db2/dc545a09-fe55-4cde-85d3-9e2e69524db2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/dc545a09-fe55-4cde-85d3-9e2e69524db2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7c:ed:7c:d7:53:c3:cc:49:4c:7a:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc545a09-fe55-4cde-85d3-9e2e69524db2
        Validity
            Not Before: Jul 13 18:47:15 2026 GMT
            Not After : Oct 11 18:47:15 2026 GMT
        Subject: CN=ec937ac2-c8a2-4422-8749-d909f51f1489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5e:35:32:69:62:11:e9:27:71:13:a2:9b:57:
                    e4:19:4c:c4:c9:48:07:77:22:4f:f2:68:cd:35:17:
                    6d:82:e6:ea:6f:dd:f7:ac:73:75:f9:eb:70:c1:18:
                    b3:54:b2:34:93:1b:8c:b0:9b:2e:a5:5e:41:93:9a:
                    da:57:13:8e:5b:78:69:af:66:40:4b:80:0a:e2:70:
                    d1:77:e0:95:f1:cc:9c:6f:61:87:5c:0a:28:4b:07:
                    91:f6:d2:32:d8:02:46:ee:c6:c3:f7:08:6b:8e:dc:
                    cd:e6:34:3a:82:ee:01:c8:bd:d0:e3:c3:f8:33:46:
                    0b:49:24:d1:88:5f:98:44:54:f9:6b:ce:34:7a:12:
                    1e:93:26:97:a0:9f:e2:b9:7d:a4:a0:2c:c0:a2:ea:
                    6a:15:e2:8c:0c:4a:50:25:5c:dd:7a:3a:cd:2f:90:
                    1e:52:4d:d8:04:db:2b:d4:fb:6d:bb:c4:3d:53:9a:
                    3a:03:e7:80:f8:c9:13:70:c0:e6:4b:45:0a:1e:7d:
                    aa:9f:f4:3c:86:ff:a6:9d:51:f6:35:82:2f:dc:4c:
                    8b:30:bf:b0:71:21:72:8f:a4:1c:6a:fd:5a:54:33:
                    39:67:4d:8f:88:76:87:f4:3b:7d:cb:ba:3c:9e:44:
                    23:23:95:8b:c2:73:cf:00:4d:1a:a6:80:ac:d7:86:
                    72:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:12:D2:5B:50:77:5F:E7:EE:D1:90:F0:99:06:E3:5F:ED:BA:E4:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/dc545a09-fe55-4cde-85d3-9e2e69524db2/fb66cf6f-bce9-3b5e-a77c-969d874030cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/dc545a09-fe55-4cde-85d3-9e2e69524db2/dc545a09-fe55-4cde-85d3-9e2e69524db2.crl

            X509v3 Authority Key Identifier:
                keyid:12:FB:70:DA:3C:F2:F0:FE:65:43:74:6D:EA:AB:86:A4:C1:F9:A6:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/dc545a09-fe55-4cde-85d3-9e2e69524db2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.249.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:fd:f7:37:b1:9d:46:06:02:2b:12:08:89:a2:da:d5:8b:a6:
         16:64:19:d4:50:27:83:0c:04:03:b1:19:45:c8:9c:21:26:4d:
         11:9e:5e:c2:aa:c4:07:75:2f:9d:d4:01:8c:c4:b7:a3:8d:72:
         1f:f8:1e:68:28:78:e3:5e:c3:59:00:64:cd:ec:25:03:43:51:
         0a:97:18:a0:64:2a:7c:2e:ad:f1:7c:04:ff:2d:45:62:c0:6a:
         71:7c:38:3c:00:94:60:36:27:04:4e:21:cd:1e:22:fe:92:85:
         75:b0:a5:bd:41:b3:43:ad:2b:47:0b:6e:9a:07:42:a1:5b:5b:
         3d:5d:b4:76:ec:2c:3c:64:23:d7:36:bd:c5:68:92:4c:27:25:
         c2:37:b1:aa:6a:26:d2:e3:49:05:98:78:7b:ae:73:1f:88:bb:
         f2:62:8c:d1:af:c9:7b:9c:24:36:52:3f:0f:35:21:94:9e:e6:
         ad:f8:87:88:7d:05:13:1d:d0:7c:9d:ab:bb:19:bc:5d:64:2f:
         78:26:be:bc:fb:f3:6d:44:f4:e3:57:88:6b:37:81:30:6f:82:
         e2:24:fa:c7:27:3c:d8:a9:e5:e2:38:ee:57:70:bc:ba:63:d4:
         0a:c9:44:dc:9d:ca:a3:19:7f:9a:6b:82:76:04:b1:f4:ff:0b:
         69:81:c1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:05:27 2026 by rpki-client