Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64b51de8-9235-4199-90c9-93aee2696fab/306fc983-244c-33e2-8c4a-51231d217125.roa
File:                     306fc983-244c-33e2-8c4a-51231d217125.roa (raw, json)
Hash identifier:          NOSxFzpDUbLImRS2XxDgV7aWdBmoN5/ypfzx0lEv1V4=
Subject key identifier:   1C:9E:CA:A4:79:BF:93:B7:DC:E5:0D:05:DE:59:41:86:E0:BD:8F:8C
Certificate issuer:       /CN=64b51de8-9235-4199-90c9-93aee2696fab
Certificate serial:       010D0C9F4328584D8AC547ABB41313D052A7B680
Authority key identifier: 09:F7:2A:B4:C4:52:37:E8:54:AA:62:74:BE:F4:C4:E2:9B:C2:B4:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64b51de8-9235-4199-90c9-93aee2696fab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64b51de8-9235-4199-90c9-93aee2696fab/306fc983-244c-33e2-8c4a-51231d217125.roa
Signing time:             Sat 18 Apr 2026 01:00:24 +0000
ROA not before:           Sat 18 Apr 2026 01:00:24 +0000
ROA not after:            Fri 17 Jul 2026 01:00:24 +0000
asID:                     396982
IP address blocks:        199.47.26.0/24 maxlen: 24
                          199.47.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64b51de8-9235-4199-90c9-93aee2696fab/64b51de8-9235-4199-90c9-93aee2696fab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64b51de8-9235-4199-90c9-93aee2696fab/64b51de8-9235-4199-90c9-93aee2696fab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64b51de8-9235-4199-90c9-93aee2696fab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8a:c5:47:ab:b4:13:13:d0:52:a7:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64b51de8-9235-4199-90c9-93aee2696fab
        Validity
            Not Before: Apr 18 01:00:24 2026 GMT
            Not After : Jul 17 01:00:24 2026 GMT
        Subject: CN=f511fe2a-af4f-47bf-86e5-58fea658db08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:79:f3:ec:1b:3c:6d:1b:00:d0:0b:7c:00:3a:
                    39:af:5c:e5:2e:34:1d:93:72:03:e9:17:0c:d6:be:
                    72:cc:16:54:6a:35:46:1a:07:e2:bb:9f:e8:9d:f0:
                    3c:81:1b:b1:55:b5:12:5f:93:c2:7b:85:d6:c5:68:
                    9b:18:e0:ae:6a:5d:39:18:a7:af:bf:be:39:72:63:
                    47:6a:a9:6d:0b:a0:17:ca:7e:22:53:c7:9b:97:87:
                    3d:40:9e:a5:8a:80:6e:fd:fb:e8:26:da:1a:6a:69:
                    cc:d5:4a:39:6d:20:5a:5b:7f:10:61:a7:2a:3b:ea:
                    be:de:11:ae:ba:b6:73:93:73:1d:5f:10:36:a2:85:
                    d9:0c:a0:10:a1:aa:d6:6d:96:a5:80:c5:0c:06:11:
                    cf:dc:17:c6:ab:6d:29:5a:1b:dd:bf:97:2b:8d:b9:
                    a1:ec:a1:77:97:12:1c:b5:09:a8:7e:9d:ab:e5:0c:
                    93:b5:27:b3:80:d1:15:a5:a0:f9:67:75:bd:24:af:
                    56:8a:90:f8:2e:70:63:3d:a2:68:4a:0b:f8:77:39:
                    70:4f:51:ef:22:c2:c3:cc:a5:f2:28:e4:f1:db:19:
                    14:64:0f:af:b8:55:c8:f6:b1:c9:c1:8c:3c:8c:b6:
                    d1:98:2a:a4:ad:33:38:cf:64:1c:da:ce:00:51:db:
                    39:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:9E:CA:A4:79:BF:93:B7:DC:E5:0D:05:DE:59:41:86:E0:BD:8F:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64b51de8-9235-4199-90c9-93aee2696fab/306fc983-244c-33e2-8c4a-51231d217125.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64b51de8-9235-4199-90c9-93aee2696fab/64b51de8-9235-4199-90c9-93aee2696fab.crl

            X509v3 Authority Key Identifier:
                keyid:09:F7:2A:B4:C4:52:37:E8:54:AA:62:74:BE:F4:C4:E2:9B:C2:B4:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64b51de8-9235-4199-90c9-93aee2696fab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.47.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:f3:35:8b:9b:c5:da:9e:8b:0b:ac:39:2d:34:6d:05:f2:2c:
         4e:d1:ec:92:91:0b:55:02:a4:92:41:ce:eb:dc:91:22:6d:3c:
         cf:f3:43:3d:d6:aa:d3:0d:d9:b9:dc:77:57:32:e5:65:04:06:
         97:d9:12:35:42:1d:d0:d5:f0:93:bd:3f:30:ee:64:82:a8:48:
         76:12:af:d0:ab:99:6f:cc:18:b7:4b:d3:ec:6f:2d:76:33:3e:
         5d:b2:9e:49:6b:12:0c:a2:b3:db:55:86:d1:b9:60:2b:09:76:
         97:56:e7:0a:f9:49:e7:7e:0d:0c:01:a4:97:27:7d:b8:2d:f5:
         f9:65:44:ec:92:24:ee:20:34:35:6e:ad:89:1f:2b:f7:2b:8d:
         d5:e7:d7:40:f9:18:fe:e7:a7:d9:8c:d5:36:58:eb:05:23:18:
         10:e4:bc:7b:26:bd:7d:2b:56:e6:08:8e:a8:ba:3b:a5:0e:7c:
         27:65:73:14:bf:15:e8:97:3a:60:91:fc:69:09:46:fa:b7:6f:
         14:85:1e:c1:33:c7:20:f0:be:ab:29:e7:dc:b1:bc:92:2d:3c:
         3c:b8:4d:eb:3e:bd:08:d3:42:4e:28:b5:af:ee:88:6a:57:65:
         f9:f1:34:aa:c3:f2:50:1b:da:43:d5:94:c8:3f:3c:10:0c:da:
         15:08:f1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:01:39 2026 by rpki-client