Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8b4809b-1c1e-48af-b8f0-a66a1e00d5d1/ef1e360e-eb36-33da-9ec8-f66d1a992bb4.roa
File:                     ef1e360e-eb36-33da-9ec8-f66d1a992bb4.roa (raw, json)
Hash identifier:          6mwPXTGdAnR92oKkEb4mOhGh9CLfG6840qY12cvTjsU=
Subject key identifier:   25:E4:B5:F8:47:56:B2:2C:7F:FA:89:65:F8:AE:35:45:5E:1C:FC:AA
Certificate issuer:       /CN=f8b4809b-1c1e-48af-b8f0-a66a1e00d5d1
Certificate serial:       010D0C9F4328584E97B4FD462193B8E714864E00
Authority key identifier: 59:F4:59:3D:AD:54:4C:09:01:C5:00:42:6B:40:F4:7C:CC:18:C7:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8b4809b-1c1e-48af-b8f0-a66a1e00d5d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8b4809b-1c1e-48af-b8f0-a66a1e00d5d1/ef1e360e-eb36-33da-9ec8-f66d1a992bb4.roa
Signing time:             Thu 23 Jul 2026 09:00:11 +0000
ROA not before:           Thu 23 Jul 2026 09:00:11 +0000
ROA not after:            Wed 21 Oct 2026 09:00:11 +0000
asID:                     36365
IP address blocks:        199.36.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8b4809b-1c1e-48af-b8f0-a66a1e00d5d1/f8b4809b-1c1e-48af-b8f0-a66a1e00d5d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8b4809b-1c1e-48af-b8f0-a66a1e00d5d1/f8b4809b-1c1e-48af-b8f0-a66a1e00d5d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8b4809b-1c1e-48af-b8f0-a66a1e00d5d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:97:b4:fd:46:21:93:b8:e7:14:86:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8b4809b-1c1e-48af-b8f0-a66a1e00d5d1
        Validity
            Not Before: Jul 23 09:00:11 2026 GMT
            Not After : Oct 21 09:00:11 2026 GMT
        Subject: CN=283424ad-2f14-4357-ac51-3ed3c59586e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:22:52:07:8a:d1:68:0f:5b:26:1d:be:f3:65:
                    4d:19:58:ba:5c:6b:c0:0c:b9:b8:b6:66:bd:7f:12:
                    a9:d1:7a:fd:ae:b7:ae:28:c7:0c:05:93:fa:d4:c7:
                    23:a6:54:dc:a9:3e:1a:17:c2:6b:ed:41:75:2a:dd:
                    4e:d6:aa:80:5f:4a:a3:f6:67:5f:94:e0:31:dd:61:
                    da:0b:c3:f7:8e:b1:38:6b:08:42:9d:8e:5c:7c:74:
                    50:84:0e:9f:dd:07:1c:4d:b2:fb:10:1a:55:b2:64:
                    56:f9:bf:59:81:b0:74:03:4a:66:08:ff:15:4d:0d:
                    3c:30:09:e1:bf:ac:3c:b6:9a:5e:08:5d:c0:30:a5:
                    9c:60:fc:9d:21:10:38:5d:62:1b:66:10:f1:00:db:
                    c8:e6:1c:5b:32:db:77:01:60:bd:78:34:a4:58:83:
                    7f:cf:a9:d5:f5:a3:f6:4b:24:55:5a:5d:6b:b2:09:
                    84:e6:22:de:6b:47:6a:15:8a:2b:de:d6:23:33:20:
                    68:24:cb:c3:67:9a:18:53:85:b6:6d:ec:e7:c3:ab:
                    70:30:1b:22:62:e9:e2:82:6d:cf:b9:41:d9:c9:a7:
                    e4:30:16:65:b1:5a:34:33:fa:ca:84:5a:93:ae:7b:
                    76:04:5a:f0:98:e1:a8:53:ef:f7:2c:c4:c5:10:a1:
                    c6:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E4:B5:F8:47:56:B2:2C:7F:FA:89:65:F8:AE:35:45:5E:1C:FC:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8b4809b-1c1e-48af-b8f0-a66a1e00d5d1/ef1e360e-eb36-33da-9ec8-f66d1a992bb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8b4809b-1c1e-48af-b8f0-a66a1e00d5d1/f8b4809b-1c1e-48af-b8f0-a66a1e00d5d1.crl

            X509v3 Authority Key Identifier:
                keyid:59:F4:59:3D:AD:54:4C:09:01:C5:00:42:6B:40:F4:7C:CC:18:C7:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8b4809b-1c1e-48af-b8f0-a66a1e00d5d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:df:8c:1d:ef:15:52:cd:19:e8:cb:fe:8d:7c:5e:25:93:05:
         9d:87:af:23:25:6d:78:73:0b:07:6a:75:f1:32:09:b6:8c:da:
         48:75:63:c5:ff:2c:0c:7a:f8:72:7e:8a:eb:aa:27:50:e7:6e:
         67:92:aa:d1:51:a7:a8:bc:76:7b:ff:8f:2b:9f:57:c2:a5:a1:
         36:f3:2e:fc:1e:5c:2e:2d:44:1a:26:56:e0:f6:c1:96:85:5a:
         eb:44:db:34:8e:79:09:67:25:c0:07:fa:23:77:ea:9b:a3:e0:
         2f:02:62:7e:c3:62:73:e1:16:78:a9:70:88:9b:b2:c4:03:73:
         c6:9c:2a:69:16:8f:35:74:39:99:31:66:39:88:ee:a1:01:6c:
         36:96:49:49:94:0b:19:4f:03:13:86:6d:5a:da:1b:f5:6c:c2:
         2c:8e:58:b9:fa:03:24:2a:3b:10:15:dc:73:da:58:55:e4:88:
         cc:0c:90:b7:bd:55:b7:4f:be:68:7c:8e:dd:c5:04:49:6b:aa:
         c5:48:a3:f9:ff:58:fd:05:7b:bc:f0:38:56:9a:06:a0:22:46:
         e8:5d:aa:f1:44:bb:24:73:41:3e:f5:60:06:4f:e8:8c:59:3d:
         83:34:ad:d5:78:cd:74:e8:dd:4c:2f:44:65:5a:ec:7f:f2:5a:
         d3:e1:1d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:19:09 2026 by rpki-client