Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/4f3323a0-d75d-37c4-b2ea-2f666d66e885.roa
File:                     4f3323a0-d75d-37c4-b2ea-2f666d66e885.roa (raw, json)
Hash identifier:          dBV4Ji92JsmGgSf8qM1n4axKYNSyq9XfGYf7SI8TRX8=
Subject key identifier:   6E:5E:38:E0:79:9E:E8:7B:A0:3F:C7:B3:D5:13:76:13:28:F1:9E:2D
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F4328584D2A74E8B0C23EE72CDE1B1280
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/4f3323a0-d75d-37c4-b2ea-2f666d66e885.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     55293
IP address blocks:        199.195.116.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:e8:b0:c2:3e:e7:2c:de:1b:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=31f24452-ddba-4fbe-8e32-b3ddd46a23d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:28:3c:38:5b:fd:ea:1f:ee:ef:4e:af:b6:d1:
                    b0:b9:01:8d:f7:38:cb:d0:c3:0c:1e:05:7a:6b:d6:
                    34:c2:dd:af:3c:ad:be:f3:13:07:72:19:a4:20:e8:
                    1b:d3:43:3c:a9:1e:25:0f:e8:45:10:47:2b:e8:df:
                    0c:cd:2b:8f:3d:d8:fb:61:d9:22:6c:de:a2:89:98:
                    df:f8:f6:17:0c:40:74:90:8a:61:3d:03:a5:80:73:
                    eb:97:97:91:6b:c9:00:2f:51:84:04:e5:0a:09:8f:
                    0f:21:59:5e:14:48:f7:48:95:c8:d5:62:3f:26:82:
                    b3:13:e5:fb:89:0a:78:71:ad:a3:3f:5f:20:c0:af:
                    47:af:87:e4:57:92:9d:85:05:2e:cb:a9:45:c3:be:
                    72:16:c6:8e:9c:ab:df:e6:77:31:9c:e4:17:49:01:
                    6e:3d:1c:07:06:02:4a:b9:75:54:c7:ac:3e:58:40:
                    51:5e:f5:5f:d0:5d:7e:f2:d7:96:b6:f9:85:c8:16:
                    6f:ee:a0:93:9b:44:7f:9b:15:17:1c:65:6e:58:6d:
                    1f:e1:5d:69:fc:5a:ef:ba:b0:87:a0:c8:30:21:65:
                    73:92:6d:d8:5b:44:75:fa:fd:f3:6e:11:78:7c:90:
                    95:10:f6:17:4e:68:a2:43:aa:b0:66:14:ba:52:ee:
                    a7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:5E:38:E0:79:9E:E8:7B:A0:3F:C7:B3:D5:13:76:13:28:F1:9E:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/4f3323a0-d75d-37c4-b2ea-2f666d66e885.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.195.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:c0:3f:4d:1f:f2:92:71:26:c7:31:b4:2e:17:45:8a:5c:4e:
         79:09:24:9c:2d:db:45:53:c4:ec:82:a8:fb:a0:4f:f0:b1:d4:
         89:b2:26:95:0b:9e:41:4c:7c:f1:23:d6:da:ff:5a:d6:b2:f3:
         0d:c1:80:67:e7:23:a0:ec:25:21:cb:2b:d7:c7:3e:b7:d7:40:
         a0:a6:fe:a8:a0:b3:91:86:3c:6c:47:a9:66:be:29:07:cc:eb:
         8e:66:f6:24:d0:f9:b8:e1:6e:8c:61:66:4f:05:08:95:b2:00:
         24:1b:0a:ed:4a:05:94:6c:e7:f8:77:89:90:bc:75:e7:06:d3:
         f3:18:78:42:11:3c:67:05:06:32:67:7a:5e:38:90:f8:c7:08:
         66:9f:30:c9:b4:e3:08:ba:04:1b:c7:a6:4c:e3:7e:1e:85:ed:
         a2:ae:e9:dc:be:1f:16:3e:0d:7a:be:f0:58:4d:eb:c8:0a:71:
         14:17:d8:2c:30:04:a0:8f:c0:18:34:b4:42:cc:83:0a:64:02:
         19:d5:5e:9c:98:b1:e7:3f:70:db:83:31:10:cf:b7:44:dd:89:
         9f:ea:87:96:3b:a5:e7:77:25:ba:5d:80:04:6f:33:65:2a:ad:
         91:8b:6c:6a:b7:c5:35:32:bc:40:33:b8:9d:b7:fa:f3:fa:cb:
         a2:f5:a8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:05:56 2026 by rpki-client