Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/53990068-555c-4a99-a422-303d3cb064f7/3299068b-d57f-3607-b224-6b1548d188dc.roa
File:                     3299068b-d57f-3607-b224-6b1548d188dc.roa (raw, json)
Hash identifier:          S3HidRIQTl6FYyRqQlkJPmBpgv6gVh9Xj0Ofh2UMckg=
Subject key identifier:   55:F0:98:12:06:EA:1E:C8:59:64:AD:92:54:63:D4:83:16:06:83:C2
Certificate issuer:       /CN=53990068-555c-4a99-a422-303d3cb064f7
Certificate serial:       010D0C9F4328584F498B6F50BFE9DB6A39007280
Authority key identifier: C8:6D:5B:B8:71:C8:22:C3:3A:11:D0:A0:6D:6E:E9:A1:0F:1E:0C:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/53990068-555c-4a99-a422-303d3cb064f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/53990068-555c-4a99-a422-303d3cb064f7/3299068b-d57f-3607-b224-6b1548d188dc.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7029
IP address blocks:        199.7.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/53990068-555c-4a99-a422-303d3cb064f7/53990068-555c-4a99-a422-303d3cb064f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/53990068-555c-4a99-a422-303d3cb064f7/53990068-555c-4a99-a422-303d3cb064f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/53990068-555c-4a99-a422-303d3cb064f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:6f:50:bf:e9:db:6a:39:00:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53990068-555c-4a99-a422-303d3cb064f7
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=3ae5580c-efe4-47a2-9ed1-c4b0960a3da9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:54:91:39:1f:96:cb:20:3c:cf:cf:f0:fa:3a:
                    af:a9:45:bc:86:22:1e:b7:6b:7b:11:1f:5a:83:fd:
                    3a:09:0b:20:b5:a8:68:fa:33:49:00:ca:4d:af:d5:
                    9b:c8:35:6d:fe:cf:6d:3f:cf:7f:cc:0a:b5:85:d0:
                    ac:06:50:91:50:13:7b:6e:c3:54:6b:95:1a:5c:98:
                    e6:44:b0:65:ff:04:0c:24:10:c0:00:7e:26:b0:7d:
                    b2:ea:84:e5:b7:5c:ab:00:8a:f6:f0:99:0f:1b:35:
                    28:c3:dc:b7:92:c4:be:55:8c:0c:4d:e2:49:61:b4:
                    ae:d8:ab:11:f8:5b:69:2e:aa:3d:25:25:ef:d2:81:
                    f8:1f:9e:c7:6e:4f:43:11:37:4d:59:91:1f:a6:a5:
                    4b:07:dc:db:82:32:ab:ae:a8:91:d4:86:16:bf:9d:
                    9a:1b:5b:0c:2f:76:1a:7a:56:67:4b:6c:3d:6e:d2:
                    bd:63:af:cb:e5:b8:2e:73:b0:67:80:d2:f9:0b:b0:
                    0c:a3:22:6c:3e:e3:52:6f:f7:82:1f:3e:0f:a9:5b:
                    95:c5:ee:1b:b2:b2:dd:25:a3:bf:56:87:a7:22:5f:
                    19:5f:64:ec:12:2b:6d:8d:77:b6:35:a5:e9:d5:b3:
                    3a:ee:f6:57:3c:9a:76:0e:58:75:b5:40:f0:fe:b9:
                    0c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F0:98:12:06:EA:1E:C8:59:64:AD:92:54:63:D4:83:16:06:83:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/53990068-555c-4a99-a422-303d3cb064f7/3299068b-d57f-3607-b224-6b1548d188dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/53990068-555c-4a99-a422-303d3cb064f7/53990068-555c-4a99-a422-303d3cb064f7.crl

            X509v3 Authority Key Identifier:
                keyid:C8:6D:5B:B8:71:C8:22:C3:3A:11:D0:A0:6D:6E:E9:A1:0F:1E:0C:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/53990068-555c-4a99-a422-303d3cb064f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:72:d5:93:5a:af:33:90:30:2a:9a:f0:7b:be:4e:3d:26:48:
         6f:98:46:9d:ed:2d:48:bc:9a:4e:d0:02:d4:f4:29:45:0a:30:
         37:3f:db:cc:b3:5f:29:ef:73:9a:ef:70:10:19:9a:54:5c:7a:
         c0:07:e0:59:02:bb:89:8a:e4:fa:a2:af:2d:9f:02:6f:62:76:
         c3:89:4f:b1:8d:12:b1:0b:80:af:c5:24:38:ea:04:05:0f:9d:
         7b:21:36:1c:fc:cb:5e:fb:e1:d8:0f:8c:f5:9c:61:ae:0c:e3:
         f4:ff:d6:6c:e1:93:43:60:08:46:b7:48:c3:06:b6:4b:83:68:
         aa:48:fb:02:a4:9b:40:c4:94:4a:f3:eb:9f:af:10:f1:ac:1d:
         3d:8f:58:a9:69:80:78:89:16:db:b1:c2:07:7b:5d:1c:1b:97:
         dd:21:3c:1d:a8:2e:94:19:ea:33:0e:8e:63:45:bd:05:26:e0:
         ac:85:2c:e4:6e:0d:d9:cb:eb:75:0c:45:3a:70:63:7c:c9:b2:
         8f:dd:39:87:28:25:ff:49:29:08:74:86:88:d5:f2:88:39:97:
         59:98:2a:9d:78:b0:40:4e:31:1d:f3:e8:e6:4d:1d:01:89:26:
         6b:b9:74:71:4c:92:19:48:f2:7b:15:b9:10:f3:6a:ba:ca:73:
         24:4b:a0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:05:39 2026 by rpki-client