Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/f10d82da-3bc7-3d1c-9293-6dbb7eb5b5c8.roa
File:                     f10d82da-3bc7-3d1c-9293-6dbb7eb5b5c8.roa (raw, json)
Hash identifier:          klKbfPl3+VURDhn+yyxCMuOY8+boR051p/8b/kUBMkQ=
Subject key identifier:   16:A1:99:5F:9D:26:EC:B5:CD:02:A1:5F:F7:D9:22:27:9E:74:C0:1D
Certificate issuer:       /CN=b927dc15-9316-467a-b50d-d6b361478436
Certificate serial:       010D0C9F4328584E736A25E761103E913ECDC560
Authority key identifier: 9A:5B:82:A8:00:DF:D6:23:2A:45:9E:7A:4B:55:17:F4:18:E5:83:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/f10d82da-3bc7-3d1c-9293-6dbb7eb5b5c8.roa
Signing time:             Fri 10 Jul 2026 09:00:12 +0000
ROA not before:           Fri 10 Jul 2026 09:00:12 +0000
ROA not after:            Thu 08 Oct 2026 09:00:12 +0000
asID:                     397535
IP address blocks:        198.187.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/b927dc15-9316-467a-b50d-d6b361478436.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/b927dc15-9316-467a-b50d-d6b361478436.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:73:6a:25:e7:61:10:3e:91:3e:cd:c5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b927dc15-9316-467a-b50d-d6b361478436
        Validity
            Not Before: Jul 10 09:00:12 2026 GMT
            Not After : Oct  8 09:00:12 2026 GMT
        Subject: CN=b7c551a9-8ad6-4ce7-9d56-6843139758ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:06:cc:ce:aa:4f:c8:54:6b:dd:6a:65:b1:8d:
                    79:89:90:f2:00:6f:6d:67:96:f5:2f:e2:63:03:a4:
                    7a:33:95:86:0b:ee:fa:cc:70:ea:47:a8:74:c1:39:
                    16:da:d2:1e:cd:ff:80:d9:f2:e0:88:a2:92:88:94:
                    ca:c0:42:de:4c:cb:f0:50:97:b2:ee:ce:92:6b:0e:
                    b0:7c:c4:0f:d3:a7:23:1f:6e:d3:00:aa:17:c3:5b:
                    c6:75:4a:93:a7:78:fb:8f:98:eb:a0:17:cd:00:54:
                    68:75:e8:f7:cc:5a:05:1c:7f:63:88:72:8f:ec:d9:
                    a9:a6:ce:93:e0:fa:3c:47:14:a0:f1:7b:45:56:ca:
                    ca:52:b2:71:43:aa:11:20:f5:89:96:1d:37:21:11:
                    b6:ef:9d:e9:9f:2e:fe:1a:16:f1:7b:71:90:44:63:
                    4a:b8:9d:5c:88:2c:da:01:e1:8b:fd:dc:81:4e:1c:
                    8a:0d:f4:13:04:e6:8a:e5:23:62:29:82:19:a8:ed:
                    98:c9:0e:93:87:5c:8d:73:e8:93:da:4c:91:30:99:
                    44:cc:8a:11:63:07:a7:bf:b4:2b:e8:ed:01:c9:1a:
                    62:e7:1b:83:21:86:4d:02:a5:5d:9d:6e:34:71:83:
                    33:70:85:58:fe:7c:ac:86:31:54:8b:a4:23:70:e2:
                    6f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A1:99:5F:9D:26:EC:B5:CD:02:A1:5F:F7:D9:22:27:9E:74:C0:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/f10d82da-3bc7-3d1c-9293-6dbb7eb5b5c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/b927dc15-9316-467a-b50d-d6b361478436.crl

            X509v3 Authority Key Identifier:
                keyid:9A:5B:82:A8:00:DF:D6:23:2A:45:9E:7A:4B:55:17:F4:18:E5:83:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.187.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:d7:ea:07:ad:ff:68:64:bb:62:56:61:01:64:70:8c:50:25:
         8a:1c:7f:3a:ec:12:ef:c3:b1:e7:f5:8a:8c:79:81:1a:9e:86:
         6d:c8:60:ea:09:19:81:5a:c8:10:57:1e:d1:cc:ab:68:2a:ca:
         88:15:25:e8:fa:df:5d:c6:8f:b4:76:9f:89:5e:d1:a1:c4:d4:
         bf:7b:01:04:96:f2:bd:ce:66:54:1a:ab:0c:ba:b8:1d:ea:06:
         f0:ee:f2:80:84:b4:cf:7d:e7:61:38:7a:a2:25:19:a5:61:d4:
         12:a5:e1:9a:2a:8d:59:59:2a:fc:5d:c1:ab:9f:15:fc:4a:42:
         ba:e8:f0:1d:e7:88:c9:63:90:e0:89:db:cd:03:3b:1b:bd:19:
         a1:1e:81:dd:33:0f:c2:f3:93:24:a8:ed:da:ff:0f:82:c2:b1:
         7c:7b:d1:fb:8f:a1:f4:a3:51:95:b7:3f:22:7c:a8:9e:95:cb:
         b5:64:25:31:c8:15:55:0a:c1:90:e2:6b:08:6b:85:20:ea:50:
         19:4e:64:c3:c9:d9:e0:99:b4:ca:2f:6a:91:72:9d:94:24:ae:
         1b:41:2d:b8:04:34:c1:07:89:8c:90:0e:4a:1b:4e:ec:b9:ee:
         f2:86:c0:8d:0d:b7:88:a4:96:61:47:c6:0e:09:ef:ee:86:1a:
         bd:75:eb:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:50:26 2026 by rpki-client