Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/694beb6b-d519-35f8-815f-392caf54df6d.roa
File:                     694beb6b-d519-35f8-815f-392caf54df6d.roa (raw, json)
Hash identifier:          lhe7jjFIY5hc75D0YU1VnfmnGszdJFNafsdsRoQTBjs=
Subject key identifier:   EC:33:06:4D:82:46:C7:A6:4E:0C:9E:FD:C5:BD:F6:8B:A7:2F:3F:4A
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F4328584F4987F52BB313A452C0CE9C80
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/694beb6b-d519-35f8-815f-392caf54df6d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        199.6.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:f5:2b:b3:13:a4:52:c0:ce:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=83a4f43f-69e3-452b-852e-2fce81e3c1ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:42:32:66:b7:89:65:fe:41:cc:ee:c2:f7:fe:
                    0c:34:96:96:80:34:27:38:36:e2:da:24:19:a6:b7:
                    bd:5c:18:35:fa:e3:be:56:ca:f2:e4:52:74:61:61:
                    39:80:46:7d:bf:fe:77:d8:ac:d9:51:47:d4:18:28:
                    b8:b0:ad:ab:f4:91:56:20:b0:9d:8a:ff:ef:1b:c3:
                    ca:8e:c0:d4:3b:bf:b2:e2:db:16:3c:4c:2a:72:95:
                    ac:50:3b:5e:87:c6:b5:07:fa:ee:37:79:3c:47:8f:
                    20:22:0e:b7:f9:26:d0:aa:b8:f8:83:1c:e9:20:b4:
                    6f:19:fb:d2:25:c3:5a:6a:1a:3c:9e:62:93:67:c1:
                    96:9b:74:55:c6:a6:df:03:f4:2c:9c:f0:3a:e8:1c:
                    97:95:c2:22:a8:44:5a:5b:be:b7:dd:a7:f7:f9:92:
                    b7:ac:56:a8:98:da:60:4d:64:e6:c9:28:13:f2:c2:
                    28:de:85:be:aa:e8:d7:6c:10:f8:af:1a:f1:7d:d0:
                    3a:5b:0f:2b:bd:d0:22:d6:22:62:72:7b:61:5b:54:
                    77:38:cf:18:a7:ea:81:5d:82:3b:36:2f:18:e9:88:
                    cf:76:d6:f4:cb:15:54:b3:e9:39:b9:4b:35:dc:68:
                    5c:18:46:0b:3c:18:4e:09:b7:1c:f0:c1:b3:f7:a0:
                    54:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:33:06:4D:82:46:C7:A6:4E:0C:9E:FD:C5:BD:F6:8B:A7:2F:3F:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/694beb6b-d519-35f8-815f-392caf54df6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.6.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:db:85:fa:a4:f4:ea:02:b3:37:88:75:44:11:fe:22:07:89:
         67:aa:de:f5:9e:29:b5:50:54:05:02:35:c2:b5:ae:28:5d:3c:
         64:df:5c:34:39:89:50:9d:5b:d3:79:86:46:3c:21:9a:60:54:
         b5:5d:f8:ce:87:e3:69:18:74:5b:9c:14:97:f5:15:4a:5a:9f:
         75:b1:9d:fc:5a:3b:b5:15:2f:b8:15:08:4c:32:23:23:c1:57:
         1a:65:32:81:07:44:9f:02:eb:26:55:96:02:c7:e0:14:49:8a:
         c7:00:51:b0:06:24:c3:5f:93:e8:7a:3c:a4:45:17:e0:3d:62:
         95:87:8c:17:06:1d:23:67:b3:b5:1a:b9:ce:7a:90:eb:06:d5:
         db:f3:be:a3:4d:21:2d:91:d4:37:41:47:e9:24:b3:b6:af:14:
         5c:0c:19:5d:d8:26:e3:eb:e5:8e:33:b4:81:fa:fa:78:f8:7b:
         49:f1:56:c8:4c:e8:8b:6e:c7:6a:76:6a:51:82:b6:5e:0f:29:
         a7:e5:00:97:1e:61:c2:3a:3c:a5:df:04:02:6a:d0:4b:60:ad:
         0b:c2:28:b7:4d:f7:0a:d8:e8:b9:fc:d7:fe:6e:94:29:f2:b5:
         55:c2:13:a2:12:09:0d:9f:97:ec:92:28:bb:55:88:7c:87:f5:
         59:86:40:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 05:29:13 2026 by rpki-client