Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/1bb5e9fb-e064-3b69-9c68-01484d39d937.roa
File:                     1bb5e9fb-e064-3b69-9c68-01484d39d937.roa (raw, json)
Hash identifier:          rRoonzPq0XtgxxThIdLXK1NryYorOFWhiJfzFtKhSfM=
Subject key identifier:   62:F4:C7:DD:FF:54:E1:1B:25:73:37:5C:59:0A:4B:C0:51:01:87:34
Certificate issuer:       /CN=5ddde1fe-7525-49e3-9718-412c13cd42ca
Certificate serial:       010D0C9F4328584EE921F8226A0BC57069715500
Authority key identifier: 3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/1bb5e9fb-e064-3b69-9c68-01484d39d937.roa
Signing time:             Fri 21 Aug 2026 13:00:11 +0000
ROA not before:           Fri 21 Aug 2026 13:00:11 +0000
ROA not after:            Thu 19 Nov 2026 14:00:11 +0000
asID:                     834
IP address blocks:        199.101.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e9:21:f8:22:6a:0b:c5:70:69:71:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ddde1fe-7525-49e3-9718-412c13cd42ca
        Validity
            Not Before: Aug 21 13:00:11 2026 GMT
            Not After : Nov 19 14:00:11 2026 GMT
        Subject: CN=f4759c3a-9928-4bcb-b13a-52848abe2a47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9d:0b:1b:36:20:52:5c:86:7f:b6:d3:7e:53:
                    4c:37:04:2b:e9:dc:ac:8c:0c:9f:d3:ce:3b:39:96:
                    e1:a0:15:b4:86:b3:ad:32:ea:75:a2:73:f1:89:ab:
                    0b:02:82:b8:cb:ef:09:83:50:01:a5:9c:89:d1:f9:
                    7c:04:74:0c:cc:04:4f:e0:97:8c:5a:22:53:76:27:
                    9b:0b:2b:ba:ba:c7:3b:fb:65:81:96:09:f5:de:2f:
                    b5:de:70:f2:30:b0:bd:7b:cf:a6:40:59:ab:0f:03:
                    ac:ec:f2:c5:85:7c:74:1b:71:90:2e:6a:f1:4b:4b:
                    33:b5:7f:09:58:27:f0:38:bf:35:a7:57:f7:e8:6f:
                    7a:0f:d4:6f:1d:f0:96:f0:04:d1:f1:78:4b:77:f4:
                    8f:21:aa:a2:11:56:31:47:67:93:32:89:51:e4:ac:
                    9e:de:aa:55:4f:32:a1:bb:d9:b5:43:6f:2f:32:f3:
                    61:77:ec:73:a6:e6:a5:5f:c0:13:81:e1:84:9a:57:
                    57:07:4d:8f:e4:07:14:b7:a8:89:9a:59:89:a5:56:
                    a9:12:50:f5:e6:2e:95:5a:7a:84:0d:0b:a2:54:ab:
                    1b:a6:3f:6d:1f:10:f4:f0:39:7f:d8:9f:25:c8:db:
                    95:3c:bc:c4:c9:cd:88:c7:b3:3e:1d:48:53:77:eb:
                    79:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:F4:C7:DD:FF:54:E1:1B:25:73:37:5C:59:0A:4B:C0:51:01:87:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/1bb5e9fb-e064-3b69-9c68-01484d39d937.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.crl

            X509v3 Authority Key Identifier:
                keyid:3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:6d:40:95:9c:e2:c9:14:8e:07:89:c7:30:6a:7f:5f:ca:07:
         7d:8b:15:98:7d:30:b3:16:e5:1c:62:d3:6b:70:ed:7d:5e:53:
         3f:19:c4:4b:b3:5e:f9:53:ce:a6:15:8d:75:6f:ee:df:18:8c:
         a8:d7:c7:c2:66:ef:20:82:bd:fc:3c:96:78:e3:fa:45:6c:2d:
         7e:43:31:2b:bf:e9:d4:b3:6c:48:b2:a0:0d:59:dd:2b:8f:e6:
         a6:a6:06:81:07:94:50:e2:c6:12:6e:78:ec:26:89:33:c1:2a:
         25:cc:8c:27:1f:a7:90:a1:17:b1:f1:d0:ff:29:9b:49:41:58:
         6a:96:f2:9d:e1:95:a8:ca:33:24:88:e2:36:ef:68:31:48:dd:
         8d:0c:b2:4e:6e:63:1c:3a:12:8d:3e:eb:3b:95:41:44:60:9e:
         00:44:6f:50:5e:06:0c:e5:71:a9:9e:03:16:70:96:6d:f1:eb:
         9b:6b:40:73:92:cf:23:f1:da:8b:56:aa:71:16:d4:a7:fd:28:
         a7:d2:52:e0:2b:e7:93:bc:af:69:27:e1:99:67:a9:37:db:42:
         9e:cf:24:a8:0d:1e:34:6e:0c:ac:48:a9:0b:79:b2:8d:33:87:
         8d:33:24:1f:f3:27:18:25:49:a7:5d:d3:dd:e8:c4:60:31:9f:
         17:cb:9d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:19:40 2026 by rpki-client