Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/09ddca0c-00ea-3e20-b685-50e6b951950b.roa
File:                     09ddca0c-00ea-3e20-b685-50e6b951950b.roa (raw, json)
Hash identifier:          zPvGcC+aHMSVij/DoZBsEzFkOPGQ4gXHD2rDnm7mro8=
Subject key identifier:   C1:85:6B:5A:C4:5B:45:1B:81:64:43:B6:5D:DC:5D:D4:07:D1:AC:A0
Certificate issuer:       /CN=b985122e-f2ff-4349-8e7b-d604ee2577f1
Certificate serial:       010D0C9F4328584E6144B6B28ABFEA5FFE3CFD00
Authority key identifier: 32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/09ddca0c-00ea-3e20-b685-50e6b951950b.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     203
IP address blocks:        199.249.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:44:b6:b2:8a:bf:ea:5f:fe:3c:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b985122e-f2ff-4349-8e7b-d604ee2577f1
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=e8b9939b-4014-4814-8548-514d789caf82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fc:b1:dd:f9:a6:a6:59:94:cd:75:f6:c5:c9:
                    6d:a2:4f:c6:08:87:e4:26:01:11:db:81:f3:c4:2b:
                    8e:12:da:c0:f3:3b:fe:58:28:79:42:9b:07:5d:73:
                    81:8b:c8:59:75:ef:6e:7e:86:72:80:d6:7a:e0:0a:
                    ae:ce:1f:19:f8:17:b3:e9:ba:03:c3:77:fc:a5:4e:
                    ff:f8:7c:0f:df:e6:21:70:89:0d:b1:79:ef:6a:5d:
                    f7:f3:31:c1:9c:22:c2:10:40:70:27:28:26:1e:a2:
                    e0:1a:3c:aa:da:10:65:64:0f:64:8a:93:32:fe:a1:
                    0c:0e:89:8f:62:75:c8:d9:0a:9a:1d:0f:0a:fa:ff:
                    80:e8:da:2c:09:ce:d2:92:7f:82:a6:9a:7e:c8:ae:
                    b1:c5:c9:19:3b:07:23:bc:2e:d4:e5:be:16:0d:99:
                    d5:11:9a:5f:e7:75:47:00:ab:77:05:d9:0d:f1:55:
                    ef:fe:1d:8b:fe:06:64:60:17:55:4e:18:09:3b:8f:
                    1b:67:5c:4f:e9:45:f5:1d:ed:fa:e7:37:12:96:a8:
                    95:2e:58:ad:c3:80:62:de:69:bf:4c:15:63:a8:15:
                    95:cf:ce:d9:e2:cb:8f:76:6e:7d:4c:25:e5:e3:d0:
                    55:f1:6c:b4:c4:9f:8d:19:24:de:12:19:6b:35:c6:
                    32:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:85:6B:5A:C4:5B:45:1B:81:64:43:B6:5D:DC:5D:D4:07:D1:AC:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/09ddca0c-00ea-3e20-b685-50e6b951950b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl

            X509v3 Authority Key Identifier:
                keyid:32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.249.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:01:44:c5:df:c9:bd:07:51:b4:d2:88:15:84:ab:db:ee:35:
         6e:4e:02:54:d6:50:18:1e:b4:b8:db:93:3d:e0:63:45:80:7d:
         a3:6c:37:b0:52:de:b4:02:4b:6b:c7:7e:e1:e5:c1:99:49:b4:
         37:c8:02:50:d2:84:eb:e3:e7:ef:b6:2a:82:05:03:7c:75:bd:
         0c:da:a0:f2:f4:de:71:7b:d6:ee:24:8d:0d:d1:a1:40:d1:ff:
         42:8d:43:0c:a7:d9:37:fe:3f:5e:7b:7e:59:e0:42:0d:27:e2:
         d9:d0:16:d9:9b:ab:ff:bf:be:d3:27:ba:33:25:fb:47:38:bb:
         64:8f:42:cc:fe:3d:ec:bb:a7:cf:80:5c:df:b1:3e:15:65:2f:
         04:6b:ea:9f:c0:26:b2:7e:ef:33:f7:1d:f4:f2:e1:f3:13:b0:
         5e:0b:d4:be:64:98:2d:d2:b4:51:6e:7e:1c:f4:3f:39:97:8a:
         40:92:e2:8a:44:0b:3e:94:51:dc:d1:65:f5:1c:8e:93:d3:7f:
         e5:ad:79:1b:af:3d:b6:8b:7e:ff:76:f3:ae:e9:80:6e:30:3f:
         04:f5:3a:67:6e:d9:1c:29:52:da:47:c9:16:13:a3:47:61:16:
         8a:76:8e:12:d9:5f:cb:b4:60:7f:1d:3d:95:95:fb:41:1b:3d:
         9f:fc:36:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:15:26 2026 by rpki-client