Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/1d64ebdd-c1b1-3429-9fd3-af9b2f3d89be.roa
File:                     1d64ebdd-c1b1-3429-9fd3-af9b2f3d89be.roa (raw, json)
Hash identifier:          YqTYzCyUx5+Cz+gSrGYYR1EYaTTz7xt1ISmmQlVLBL4=
Subject key identifier:   14:57:BD:D6:F7:5B:1D:CE:96:04:85:DA:E1:C6:97:DA:5D:96:51:69
Certificate issuer:       /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial:       010D0C9F4328584E6B57132AD4B7511257ED11E0
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/1d64ebdd-c1b1-3429-9fd3-af9b2f3d89be.roa
Signing time:             Tue 07 Jul 2026 11:35:27 +0000
ROA not before:           Tue 07 Jul 2026 11:35:27 +0000
ROA not after:            Mon 05 Oct 2026 11:35:27 +0000
asID:                     14618
IP address blocks:        134.49.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6b:57:13:2a:d4:b7:51:12:57:ed:11:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
        Validity
            Not Before: Jul  7 11:35:27 2026 GMT
            Not After : Oct  5 11:35:27 2026 GMT
        Subject: CN=b0b8cc7a-6031-4ccc-9a0f-a3f30aef6e3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d8:e3:6b:4c:df:b7:b3:1a:5f:bb:b5:57:58:
                    bf:d1:0a:70:7e:71:86:e9:0c:55:f7:3b:90:64:63:
                    7e:1d:44:ce:0e:17:5f:2d:3a:c8:0d:77:bd:7b:35:
                    ca:b8:d3:af:d8:71:3b:e5:e6:ff:22:e5:a9:85:38:
                    98:29:38:29:f4:fa:0c:7b:42:af:a1:24:69:d5:17:
                    02:7e:90:a2:a0:52:e8:7f:a4:a1:08:be:0d:89:bb:
                    28:9c:b9:41:3b:25:0a:74:0b:99:30:d9:80:03:86:
                    08:bf:8c:24:e0:c8:d2:21:30:2b:aa:a1:83:d9:d7:
                    ec:d0:58:99:86:3c:e4:25:fa:af:16:93:65:06:4a:
                    c3:4f:aa:bd:ce:cc:5b:3f:ec:cb:b2:d6:4d:97:c1:
                    a6:c2:6d:3f:df:49:62:1c:6a:bd:ce:4e:90:a5:c0:
                    d7:ee:ad:56:76:0f:24:43:fc:80:f6:e6:1f:4c:4d:
                    8c:a7:e2:db:c6:22:03:ef:80:83:99:e2:8d:dc:2e:
                    c9:fd:7d:ac:28:93:57:fd:f5:8e:38:14:6c:46:d3:
                    22:17:e8:83:90:e1:10:68:9e:f4:7d:b3:51:a8:7f:
                    81:f8:82:b4:fd:a7:95:cf:17:54:e1:d8:f7:10:c4:
                    e4:df:76:e4:0f:a4:7d:c8:03:1c:80:8b:d7:bf:f0:
                    b0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:57:BD:D6:F7:5B:1D:CE:96:04:85:DA:E1:C6:97:DA:5D:96:51:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/1d64ebdd-c1b1-3429-9fd3-af9b2f3d89be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl

            X509v3 Authority Key Identifier:
                keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.49.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:60:99:83:94:45:76:4f:46:61:8f:c0:ad:36:2e:93:54:5d:
         cb:8e:0a:e5:4b:5b:9a:8f:98:99:7c:43:5c:60:03:75:31:92:
         9f:e0:2d:68:d4:b8:d1:74:2f:c3:f5:d5:8f:aa:89:a3:45:53:
         b9:9b:d6:34:13:3a:1f:b7:aa:aa:2f:fd:2e:7c:38:00:35:4a:
         f6:52:56:11:79:53:1c:e8:de:c4:97:88:80:d8:a9:70:b7:31:
         5f:d4:f6:85:70:8a:ec:3a:b5:5d:cb:20:22:1f:ea:91:d7:9c:
         76:c2:a1:27:04:9c:bf:de:ae:5e:29:1a:2f:83:e0:a8:22:ff:
         0b:de:e5:e7:51:35:54:75:47:6d:75:1c:28:41:6e:a1:d5:9c:
         ee:2e:30:43:48:6c:bb:76:cc:35:fd:12:0c:f6:e4:13:a7:18:
         56:6a:cc:20:94:49:8d:6a:18:cc:ff:60:66:c5:b1:3a:45:bf:
         ed:29:0b:73:e1:cd:3a:4d:99:72:88:5e:ea:de:35:2c:41:59:
         a3:2e:97:5b:b3:60:91:16:cf:90:c9:55:ce:19:aa:1d:40:84:
         92:4f:d2:38:75:f6:61:5d:8d:1b:fc:59:e0:34:b9:2c:d2:94:
         c9:99:66:7c:cd:32:ae:51:14:2f:58:fe:90:73:32:2e:8c:69:
         2e:bb:a1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:31:05 2026 by rpki-client