Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/559623de-14dc-3254-abac-1b766ef6a5f9.roa
File:                     559623de-14dc-3254-abac-1b766ef6a5f9.roa (raw, json)
Hash identifier:          tImwJMj1kevICr0Ycq8TygDJ4Snb/rJvTrnANHM5p2E=
Subject key identifier:   59:81:99:DA:2F:75:7E:7A:51:04:A8:36:38:7F:84:2E:C5:00:2F:72
Certificate issuer:       /CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234
Certificate serial:       010D0C9F4328584F13024B213A8A55ECAF9FB100
Authority key identifier: BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/559623de-14dc-3254-abac-1b766ef6a5f9.roa
Signing time:             Sat 05 Sep 2026 13:00:12 +0000
ROA not before:           Sat 05 Sep 2026 13:00:12 +0000
ROA not after:            Fri 04 Dec 2026 14:00:12 +0000
asID:                     15296
IP address blocks:        199.216.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:13:02:4b:21:3a:8a:55:ec:af:9f:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234
        Validity
            Not Before: Sep  5 13:00:12 2026 GMT
            Not After : Dec  4 14:00:12 2026 GMT
        Subject: CN=5e9ab2c0-2655-489a-9b9d-25c875574127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:07:e7:c9:a1:52:8b:b3:03:2d:05:f6:9c:96:
                    66:b6:1b:21:29:e3:4f:3c:a6:4d:85:2f:f2:f4:02:
                    66:58:e0:ab:72:af:e3:61:17:c9:7a:e0:5a:60:9f:
                    cf:12:43:9b:98:1c:5d:e1:a8:8e:80:85:1a:a2:02:
                    b4:d3:2a:2d:37:3e:27:2a:28:55:7d:73:72:fb:9b:
                    fd:c5:b0:61:5a:93:f6:aa:ed:d3:0a:9d:35:a0:88:
                    2c:d5:d1:4c:4e:36:bf:4c:cd:f3:32:4e:3b:0f:e0:
                    bb:d9:15:f0:33:12:21:da:ab:f0:28:e4:9f:85:41:
                    22:fa:e1:a8:ac:2f:18:5f:e9:1b:c7:f8:c1:b4:12:
                    e7:d9:ff:2a:81:51:75:ba:3e:70:ec:61:d1:e9:86:
                    0d:9e:b7:c7:11:24:21:eb:f4:37:c6:7f:da:3c:31:
                    8f:3d:05:d1:8c:d8:f7:fb:7c:b2:fb:76:68:ba:4d:
                    87:bd:f0:ae:c0:4d:ca:e6:66:78:7b:42:76:5e:c0:
                    69:d4:6a:04:2e:b7:66:9a:80:57:a8:96:c9:7b:67:
                    e0:18:1c:73:d5:e5:cf:1f:4f:d4:20:ac:83:51:a0:
                    12:e7:17:aa:ed:6c:79:77:25:ba:c1:72:d0:fe:ed:
                    45:0d:15:c3:b1:be:c3:4a:8e:65:d9:f9:c4:bf:b4:
                    1b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:81:99:DA:2F:75:7E:7A:51:04:A8:36:38:7F:84:2E:C5:00:2F:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/559623de-14dc-3254-abac-1b766ef6a5f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl

            X509v3 Authority Key Identifier:
                keyid:BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.216.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:78:23:43:8f:8d:69:dd:44:da:72:7b:bc:fa:78:d4:7a:ea:
         9e:c6:70:42:4a:63:e4:aa:64:e9:73:40:14:d4:7c:da:02:32:
         79:91:87:77:66:56:f0:89:cd:6b:6b:dc:84:b9:a9:d8:c5:46:
         dd:77:61:74:71:ec:ef:03:24:9e:0f:6e:6a:8e:25:7c:91:bb:
         39:50:71:52:11:90:e5:7c:ec:b6:74:5a:2f:f8:17:1b:1d:fb:
         48:e5:c9:ac:fa:28:51:2b:1d:fc:78:31:12:a5:02:23:70:71:
         32:3c:07:ab:a7:58:5a:12:84:5e:4d:05:cc:c7:11:68:cf:92:
         a0:1d:c1:cf:b2:19:8d:bb:4d:17:12:54:a5:9e:8d:09:b0:bc:
         37:ea:b9:dc:1c:a7:ce:af:68:e6:76:b3:7a:21:f2:c5:1c:37:
         38:ed:8b:9f:8e:db:5e:97:b5:32:77:ad:5c:46:49:00:62:32:
         4c:20:22:86:94:60:3c:6d:54:fb:3a:85:d8:09:57:cd:e8:20:
         5c:e0:5f:b0:31:b4:4e:df:0f:04:93:c1:35:ad:1c:a8:d6:9c:
         10:33:52:54:09:72:89:1a:06:76:e8:e4:52:49:70:2b:84:0c:
         79:b9:b8:f2:17:ae:63:e2:5c:fd:ba:8e:3d:39:68:6c:47:a7:
         b1:94:96:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 19:53:47 2026 by rpki-client