Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/361f5adf-465b-3b82-8ed0-6688bb9c0c10.roa
File:                     361f5adf-465b-3b82-8ed0-6688bb9c0c10.roa (raw, json)
Hash identifier:          9j1L5JB12h9sMASHstnKTzfOjB6SAHzKXBpgIT7yzso=
Subject key identifier:   A5:26:DF:29:69:85:A8:63:46:79:FC:8B:F9:C1:DC:A4:0B:CC:F3:06
Certificate issuer:       /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial:       010D0C9F4328584E66DA1441DCC90DCD752CC000
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/361f5adf-465b-3b82-8ed0-6688bb9c0c10.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     16509
IP address blocks:        199.45.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:14:41:dc:c9:0d:cd:75:2c:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=f8b10ae5-1d81-4a89-a76c-d11e29b9e1bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:8a:0c:24:38:9b:1b:04:72:31:97:87:be:72:
                    18:9e:0f:b5:8a:3b:ea:9e:4e:c3:e8:86:d4:77:db:
                    ec:c9:97:d3:2d:dc:45:8d:eb:4c:98:86:52:7f:7d:
                    20:91:78:0f:13:81:f3:a6:78:66:6d:3f:2e:c2:5e:
                    e2:b2:50:a8:99:34:b8:79:3f:10:ea:56:66:08:2a:
                    d0:1b:ca:61:b4:17:be:c3:e5:fc:9f:bd:8b:cd:fc:
                    33:92:9f:69:5f:3a:f1:88:70:ee:ba:7b:86:8e:cf:
                    19:31:e2:9d:8d:1e:63:a8:ed:f6:bc:aa:98:5f:16:
                    a6:07:59:37:e2:fe:6b:17:61:56:f5:2d:ba:eb:e5:
                    4a:a9:8b:8e:d5:ca:36:d3:d2:d6:e4:87:e4:54:9c:
                    96:c9:58:b0:3d:ec:76:a1:a2:e4:ba:f4:77:3e:77:
                    0e:1d:04:89:47:8c:69:6d:b5:58:1d:c9:cd:ad:07:
                    5e:13:a7:50:c6:99:69:67:15:17:37:f0:6b:e7:72:
                    06:55:e0:55:ae:c6:75:8d:c5:7c:3e:44:2a:52:d8:
                    3c:2a:ed:d0:bd:37:0d:33:99:0a:fa:05:e7:0a:fa:
                    ad:d8:1b:cd:35:81:10:b8:f0:4d:ba:c2:1c:40:7b:
                    78:5a:59:30:24:42:d9:15:38:f0:b8:17:6e:12:e6:
                    a8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:26:DF:29:69:85:A8:63:46:79:FC:8B:F9:C1:DC:A4:0B:CC:F3:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/361f5adf-465b-3b82-8ed0-6688bb9c0c10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl

            X509v3 Authority Key Identifier:
                keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.45.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:14:2b:20:11:b6:a1:1a:95:c5:63:f0:34:19:ff:ed:8a:5b:
         1c:5f:7b:aa:f4:4b:1c:ce:01:61:c1:21:4f:ae:8b:c3:7e:b3:
         c5:6a:01:65:b8:ab:69:13:01:cd:97:97:36:f8:25:76:e7:ad:
         28:1b:95:45:70:79:a5:38:bf:43:bd:28:b6:90:6f:af:fa:d6:
         26:a7:5d:19:ab:f1:b9:b0:cc:aa:dd:0f:c9:c9:ba:e2:bb:67:
         0a:96:b0:af:b9:32:d0:47:88:72:ed:33:d4:68:ef:1c:84:41:
         49:19:a0:ac:f8:c8:57:05:36:64:00:e9:b0:21:87:a6:55:94:
         25:a4:4c:4a:d2:4d:97:ea:70:70:ec:ae:97:c1:83:8e:fa:90:
         cc:22:f9:b9:ef:94:30:fa:c8:e1:b4:8c:06:0a:3b:e3:04:9e:
         cb:27:4a:b7:52:12:67:29:f5:45:28:54:b4:df:8c:38:e7:b9:
         e0:53:d4:a7:45:ef:69:eb:59:0a:b2:d4:07:17:aa:cf:b6:ef:
         3f:35:a4:61:c2:65:7c:8a:d8:3d:30:3e:57:ff:85:08:41:b1:
         d3:ef:24:90:94:94:ee:3f:08:79:24:70:05:5f:b3:e6:0f:5f:
         06:ca:ca:9b:72:51:8e:6a:02:ee:57:9d:80:23:6b:51:8a:c7:
         23:af:66:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:08:04 2026 by rpki-client