Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9f82e01-1002-419a-bb0c-56dcef6c9309/0c726ba2-0a8c-3c36-8a9c-585b643827f3.roa
File:                     0c726ba2-0a8c-3c36-8a9c-585b643827f3.roa (raw, json)
Hash identifier:          YcRQ6MRVlsytzcVrnSZopaMoDurFfNvkDLDmY1ROqMg=
Subject key identifier:   2C:17:67:67:17:04:DE:7A:5D:BD:8C:9D:32:61:68:4A:28:20:BD:62
Certificate issuer:       /CN=b9f82e01-1002-419a-bb0c-56dcef6c9309
Certificate serial:       010D0C9F4328584D93254CF683BBEA923C9F0348
Authority key identifier: B1:98:91:A4:80:DC:3E:DE:61:99:DE:CD:6B:1D:7C:20:78:9F:EB:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9f82e01-1002-419a-bb0c-56dcef6c9309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9f82e01-1002-419a-bb0c-56dcef6c9309/0c726ba2-0a8c-3c36-8a9c-585b643827f3.roa
Signing time:             Tue 21 Apr 2026 01:00:24 +0000
ROA not before:           Tue 21 Apr 2026 01:00:24 +0000
ROA not after:            Mon 20 Jul 2026 01:00:24 +0000
asID:                     16276
IP address blocks:        199.193.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9f82e01-1002-419a-bb0c-56dcef6c9309/b9f82e01-1002-419a-bb0c-56dcef6c9309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9f82e01-1002-419a-bb0c-56dcef6c9309/b9f82e01-1002-419a-bb0c-56dcef6c9309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9f82e01-1002-419a-bb0c-56dcef6c9309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:93:25:4c:f6:83:bb:ea:92:3c:9f:03:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9f82e01-1002-419a-bb0c-56dcef6c9309
        Validity
            Not Before: Apr 21 01:00:24 2026 GMT
            Not After : Jul 20 01:00:24 2026 GMT
        Subject: CN=011699ec-caed-4291-a793-98593e624a4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:21:02:5e:86:97:e6:b8:73:af:48:7a:d8:4a:
                    35:d2:7c:cf:3a:3f:8a:d7:12:80:3d:08:eb:b4:28:
                    20:28:58:0a:51:fa:3a:3a:08:ca:59:25:e1:50:ee:
                    b9:78:4c:19:e4:3c:39:f3:d2:b1:55:a9:92:6e:95:
                    fc:9f:cd:22:c9:d4:23:4d:1b:6f:d9:c8:d9:88:b0:
                    47:af:62:97:59:d5:9a:e0:3d:94:34:86:0d:4d:b6:
                    ac:3f:32:30:73:fc:93:76:42:60:bf:04:0c:7e:ab:
                    67:90:aa:4f:34:d7:97:8d:79:7f:f2:4c:45:df:7f:
                    f1:59:f3:ba:4c:da:0d:55:8a:0a:cb:66:cc:0d:3e:
                    08:19:f4:4d:f8:de:8d:1b:ee:97:98:ad:2e:d8:ed:
                    5a:54:14:2e:6a:9b:b2:e9:62:11:f1:34:f8:dc:ac:
                    80:fc:cf:71:99:19:5c:df:57:a9:2d:f6:09:e8:5a:
                    18:0d:9d:cf:92:3b:41:76:bf:08:55:01:a2:20:2d:
                    76:02:60:d7:08:13:c7:c9:1b:b5:66:b9:8c:6b:b6:
                    ba:47:7b:0e:f7:b5:7d:3e:f7:44:e9:28:63:88:ed:
                    5d:c5:08:0c:21:94:7b:6c:5d:98:64:99:89:8b:40:
                    e8:a4:40:2e:41:1b:de:6e:c3:2b:54:df:63:f8:9e:
                    df:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:17:67:67:17:04:DE:7A:5D:BD:8C:9D:32:61:68:4A:28:20:BD:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9f82e01-1002-419a-bb0c-56dcef6c9309/0c726ba2-0a8c-3c36-8a9c-585b643827f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9f82e01-1002-419a-bb0c-56dcef6c9309/b9f82e01-1002-419a-bb0c-56dcef6c9309.crl

            X509v3 Authority Key Identifier:
                keyid:B1:98:91:A4:80:DC:3E:DE:61:99:DE:CD:6B:1D:7C:20:78:9F:EB:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9f82e01-1002-419a-bb0c-56dcef6c9309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.193.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:c2:a8:7a:75:84:8e:cb:6f:30:30:e0:d8:c4:c2:e0:73:28:
         42:30:2b:ca:16:72:c7:93:c5:d0:54:e1:ac:bb:91:90:db:7b:
         0b:43:40:d0:be:b7:5d:ad:0a:e8:c3:2e:9b:cb:8a:71:57:29:
         c3:6b:b8:d2:cb:a3:af:d0:0d:07:f5:9a:ad:49:cb:be:f1:80:
         6d:10:ac:df:98:79:1e:b6:c6:de:e7:ed:dc:9e:74:c4:33:64:
         66:de:37:bc:43:ba:d5:df:77:7c:b6:e2:95:56:59:2f:54:8e:
         82:8e:fc:12:8a:24:5a:e4:62:57:65:51:d7:56:19:c9:e5:29:
         ca:cb:2e:3e:53:3b:47:c2:f9:fb:b5:fe:dc:b5:58:ff:be:ca:
         83:46:03:00:5f:7d:73:78:b3:fa:1e:39:cb:07:b0:09:46:87:
         6f:a6:01:fc:3f:0d:f3:05:f1:f5:44:77:0c:bd:40:75:1c:c2:
         2b:df:af:c7:ed:71:6b:31:79:20:a4:74:0f:af:9c:9d:6a:9a:
         29:40:05:ab:48:67:a1:53:bf:89:8c:d3:c7:51:d7:26:31:e4:
         b4:47:c2:02:27:81:ce:04:84:74:f5:7a:f7:b2:51:bf:a1:6e:
         13:01:75:ce:7f:e2:d9:e5:ce:58:1a:e4:f9:e8:04:ea:98:a0:
         c3:20:66:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:04:33 2026 by rpki-client