Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/61be0ef9-3137-32d2-952c-11901fbe9d45.roa
File:                     61be0ef9-3137-32d2-952c-11901fbe9d45.roa (raw, json)
Hash identifier:          I9supCACusEb0xrloMWilLLhUPICE2X/HhKfi99X8LU=
Subject key identifier:   CB:37:96:2D:38:22:5D:E1:35:BE:1F:AB:19:50:1F:EB:62:0A:27:B4
Certificate issuer:       /CN=01fc1815-34ef-424d-8258-506f8b486e35
Certificate serial:       010D0C9F4328584D1F4A475F97114E9999FB4BA0
Authority key identifier: 51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/61be0ef9-3137-32d2-952c-11901fbe9d45.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     33635
IP address blocks:        199.7.96.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:47:5f:97:11:4e:99:99:fb:4b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01fc1815-34ef-424d-8258-506f8b486e35
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=67b79fda-a46b-4e96-b6af-3dde81b0a798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:eb:ca:24:f2:6b:f1:e2:02:27:dc:7c:c2:b8:
                    d2:a4:3c:53:25:d4:7f:1b:c6:84:25:37:00:c1:3d:
                    f0:4c:2f:51:65:9b:12:36:a7:21:7a:ba:d1:7e:7f:
                    d7:b9:32:ad:d8:ca:1a:7c:97:c9:23:da:cb:7a:91:
                    aa:6b:a8:ab:bd:f0:af:bf:5e:28:2c:6b:f2:6c:a6:
                    25:c7:0e:b7:b5:29:f7:27:12:eb:64:e1:97:86:32:
                    37:17:bf:38:09:81:52:de:68:8a:db:ff:f5:d6:f0:
                    b8:6d:58:3c:5e:77:08:dd:4f:57:9c:a2:c8:a4:e6:
                    db:19:a5:c6:10:22:54:51:f7:8f:15:b1:1d:62:59:
                    9d:90:11:d1:4c:53:aa:b0:44:ab:87:dc:91:7a:c9:
                    0a:b4:0f:0c:dd:65:2e:2f:23:d0:97:9b:50:7d:19:
                    d9:31:a3:da:64:bb:4e:9d:8f:8c:94:09:af:ae:5e:
                    0a:1c:97:b2:c8:ba:09:43:af:87:8c:97:dc:a6:74:
                    c7:47:f4:a3:7e:10:90:ca:8a:e2:31:c6:4e:0c:9e:
                    be:d3:3f:0a:6c:c5:c8:ef:4f:a8:dd:17:7f:f3:8c:
                    38:3f:a6:ed:7c:80:33:32:2e:ba:9e:c5:7e:be:53:
                    c4:91:fe:7a:b5:c1:81:75:3d:cf:aa:e5:f9:ab:32:
                    21:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:37:96:2D:38:22:5D:E1:35:BE:1F:AB:19:50:1F:EB:62:0A:27:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/61be0ef9-3137-32d2-952c-11901fbe9d45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl

            X509v3 Authority Key Identifier:
                keyid:51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:62:22:8a:33:34:e8:7b:04:8a:f0:ea:21:5f:65:71:f8:a8:
         59:0c:a2:aa:23:79:9d:0f:6a:91:db:06:e5:7e:ca:d1:2a:bb:
         a4:fd:2c:8c:5c:ae:2e:ef:ce:e6:4d:39:32:fb:b5:e1:59:c8:
         7b:94:53:b7:57:42:6c:07:ee:a7:ce:a3:b0:77:97:17:74:3d:
         a9:b5:89:4d:0e:93:97:46:d2:60:01:ed:aa:89:67:af:d5:fc:
         ab:2b:c4:9b:ce:10:1b:24:5d:ef:9c:2f:91:d8:aa:32:c3:1f:
         f5:db:d7:fc:4c:5c:11:2c:f1:96:97:3e:41:b9:60:49:c9:07:
         d6:97:63:73:c9:b1:84:f6:f8:7d:a6:77:bc:29:6a:cf:57:13:
         13:b2:c9:9f:d1:a7:0b:eb:0d:36:4b:b8:f9:ca:2c:3a:07:32:
         cd:84:17:11:82:cb:c1:48:db:64:1d:01:79:c0:c0:4e:25:38:
         e0:03:54:1a:cc:7c:dc:3c:b2:59:46:2a:32:3d:30:be:e0:88:
         eb:cc:79:6d:7c:02:eb:7b:f4:94:d3:d2:91:df:59:60:45:e2:
         b1:f3:f4:dc:d6:ec:59:3c:39:92:11:db:4c:c6:b9:e3:d3:9f:
         32:7f:32:77:6e:f0:c1:e6:15:fa:ef:98:3b:6b:3f:23:60:ad:
         15:6e:71:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:30:10 2026 by rpki-client