Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/004aa721-0c95-3726-9aca-e862d11c0d18.roa
File:                     004aa721-0c95-3726-9aca-e862d11c0d18.roa (raw, json)
Hash identifier:          voOG1223g4YN74PNRrUQoxIImj2IhX/ax7qo5ZH4RV0=
Subject key identifier:   2C:76:46:84:93:E5:9E:46:91:FD:74:CD:6D:9C:E4:CC:32:7D:1A:3C
Certificate issuer:       /CN=d5f1d9e6-0be2-4baa-847c-d665c807eddd
Certificate serial:       010D0C9F4328584E858F89CABF322ED3147B2E80
Authority key identifier: 6B:35:D1:0B:29:0C:A7:69:63:67:ED:A9:F5:88:43:46:15:A2:DE:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/004aa721-0c95-3726-9aca-e862d11c0d18.roa
Signing time:             Thu 16 Jul 2026 21:00:12 +0000
ROA not before:           Thu 16 Jul 2026 21:00:12 +0000
ROA not after:            Wed 14 Oct 2026 21:00:12 +0000
asID:                     4922
IP address blocks:        199.187.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/d5f1d9e6-0be2-4baa-847c-d665c807eddd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/d5f1d9e6-0be2-4baa-847c-d665c807eddd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:85:8f:89:ca:bf:32:2e:d3:14:7b:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f1d9e6-0be2-4baa-847c-d665c807eddd
        Validity
            Not Before: Jul 16 21:00:12 2026 GMT
            Not After : Oct 14 21:00:12 2026 GMT
        Subject: CN=25aa2468-f3e5-4810-b660-2a84f50801dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:db:c7:b1:65:ff:f2:cf:7d:06:1d:6f:b1:f0:
                    e1:7c:8e:52:54:7e:d1:8c:f7:1e:a2:74:a4:f9:2d:
                    cf:18:00:09:db:2e:2b:02:c8:cb:a4:18:59:ba:0c:
                    e7:ba:cb:6f:b3:8c:3c:cf:9f:74:69:ef:90:f9:e6:
                    da:77:db:11:ed:e2:28:d7:f4:9d:b9:c7:4a:56:12:
                    f9:d0:9f:e7:8b:5f:60:fb:ad:b7:22:6e:87:60:8f:
                    dc:d0:d1:b7:49:03:c2:24:f1:f3:27:92:79:56:2e:
                    38:09:ef:b1:e8:b2:12:cd:a9:94:5a:e7:09:85:78:
                    14:bd:2d:14:74:65:17:c7:40:5a:1b:a5:fc:ef:0e:
                    f5:63:e6:1d:8b:99:78:22:e5:37:b5:bf:81:3a:e0:
                    54:d5:90:f5:ba:91:d0:3a:62:a2:5b:49:2a:44:15:
                    de:93:bf:a8:20:e4:c5:34:e8:03:ae:b2:c8:9d:88:
                    8c:35:b1:b9:db:6d:16:8d:8b:ce:95:31:ae:98:bf:
                    a0:90:cb:4e:58:48:b2:bd:ee:33:73:b3:4b:bb:3b:
                    23:06:a9:0b:69:82:fd:b2:26:6d:a2:56:29:ff:85:
                    54:81:95:01:c4:98:3c:61:0c:e0:62:68:8a:61:c2:
                    3f:7d:fe:f6:78:de:9a:92:47:a7:7e:b0:58:2f:fc:
                    cc:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:76:46:84:93:E5:9E:46:91:FD:74:CD:6D:9C:E4:CC:32:7D:1A:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/004aa721-0c95-3726-9aca-e862d11c0d18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/d5f1d9e6-0be2-4baa-847c-d665c807eddd.crl

            X509v3 Authority Key Identifier:
                keyid:6B:35:D1:0B:29:0C:A7:69:63:67:ED:A9:F5:88:43:46:15:A2:DE:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.187.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:e4:ee:99:e0:72:c0:a9:dc:36:ee:9b:e9:da:e8:b5:4f:b6:
         8e:49:07:81:68:15:e3:b9:5b:82:2b:f0:37:21:15:86:84:1b:
         ad:52:37:c0:5d:00:ca:49:5f:c1:7e:66:bb:b9:3a:c9:6c:6a:
         17:94:df:b8:d5:1f:2b:d9:2b:ad:e8:82:6e:ef:30:cd:79:83:
         4c:d1:b8:26:41:fb:f6:21:b6:a1:21:9b:c7:13:32:19:cc:8b:
         5b:eb:7b:1c:7b:ef:af:d0:b4:98:e6:b5:ed:3b:0c:cf:6b:2b:
         7a:d0:ad:e6:fc:12:8b:8a:46:9a:57:44:9d:fb:f6:85:66:24:
         19:0a:ac:ae:94:8f:bb:8f:11:55:0d:04:9a:f3:06:ae:cb:b5:
         ae:93:d9:ee:27:68:4e:4b:a1:e3:1b:21:98:99:8b:b8:85:1b:
         7e:02:0d:77:24:2c:fb:b0:1f:06:e7:98:e8:74:27:20:1c:73:
         3c:b7:4e:b7:cc:1d:c0:83:31:8c:62:27:55:86:c5:5f:4f:c3:
         30:fb:20:3a:a1:1f:78:ea:1f:ed:b0:b1:93:da:98:5c:60:36:
         a1:4d:49:2d:77:d0:05:0a:5a:83:e8:5e:ca:fa:58:3d:11:54:
         f3:49:84:2d:5c:3c:b0:a8:0f:20:47:b3:85:4a:ff:51:22:d0:
         6c:6c:c7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:01:27 2026 by rpki-client