Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746/935edd2a-b482-38fc-9dc6-51bd2e9f0828.roa
File:                     935edd2a-b482-38fc-9dc6-51bd2e9f0828.roa (raw, json)
Hash identifier:          GCyotiBeDMwDWCKQKIcxKmSL9fnDWHN2YmanFL7aEnY=
Subject key identifier:   69:49:EB:F7:9E:C4:03:E1:4B:9B:36:69:5D:51:94:43:70:5F:35:70
Certificate issuer:       /CN=01b2d667-c096-462f-9ad9-6391b09e9746
Certificate serial:       010D0C9F4328584E7A64FAEE059910D05FDE4200
Authority key identifier: EF:55:74:99:02:9B:7D:CA:4F:EF:EE:5F:8A:11:58:6F:46:D7:2F:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746/935edd2a-b482-38fc-9dc6-51bd2e9f0828.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     199741
IP address blocks:        199.59.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746/01b2d667-c096-462f-9ad9-6391b09e9746.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746/01b2d667-c096-462f-9ad9-6391b09e9746.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:fa:ee:05:99:10:d0:5f:de:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01b2d667-c096-462f-9ad9-6391b09e9746
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=fc8247ce-22a8-4119-ad45-ec95f6a93050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c3:53:3c:73:fa:2c:ea:3f:b8:4c:7d:b1:5b:
                    d2:43:9b:a0:26:14:81:cd:5a:53:67:3a:6b:8c:70:
                    57:78:9d:0b:63:29:66:43:89:0c:6b:fc:dc:0e:4b:
                    a5:64:52:39:56:30:2e:58:c6:42:5a:57:85:1a:67:
                    66:96:77:8b:01:17:1b:9f:ed:c2:2f:a1:8d:37:12:
                    b9:d7:43:5a:8d:ca:61:6c:0d:67:34:82:43:6e:63:
                    c0:ee:01:91:23:37:34:b9:a6:84:72:ca:5f:65:55:
                    a2:eb:17:8b:5b:d7:41:55:d8:c9:3c:ac:cf:9d:b8:
                    3b:2e:27:25:4f:5b:b8:08:bf:b4:72:4a:2d:6b:a9:
                    b6:12:f4:c2:23:b6:0d:86:c1:e4:5d:6c:82:6c:14:
                    15:29:95:ee:fd:73:e4:08:b2:56:8c:c2:e6:c1:c2:
                    24:69:53:b9:33:03:f4:df:32:49:cf:39:fe:aa:f3:
                    38:df:33:dd:3a:fd:80:b0:26:52:87:cb:3a:58:fb:
                    0b:56:4d:53:37:23:4a:41:12:d8:78:a5:00:ee:43:
                    43:10:94:1b:f5:cf:f5:31:f5:0f:e6:10:2c:23:97:
                    cf:25:c1:cf:31:ba:07:51:86:52:e8:1a:ab:6f:ac:
                    77:10:ae:08:a9:33:87:a7:5b:8e:6b:85:a4:d7:3f:
                    c7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:49:EB:F7:9E:C4:03:E1:4B:9B:36:69:5D:51:94:43:70:5F:35:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746/935edd2a-b482-38fc-9dc6-51bd2e9f0828.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746/01b2d667-c096-462f-9ad9-6391b09e9746.crl

            X509v3 Authority Key Identifier:
                keyid:EF:55:74:99:02:9B:7D:CA:4F:EF:EE:5F:8A:11:58:6F:46:D7:2F:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.59.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:1f:c9:7a:12:e3:88:bb:ee:0c:03:9d:dd:df:1c:5d:c1:ee:
         53:f1:b0:55:06:29:f7:0f:72:c5:70:14:ca:af:f2:2f:f9:a5:
         a4:c3:94:c2:1b:06:78:fa:6a:cd:91:b9:6e:70:b7:40:aa:39:
         49:3e:6e:dd:af:55:19:06:fd:9d:7b:9d:c6:52:c3:00:73:55:
         4f:a9:f7:f4:50:d6:61:54:e7:62:f9:f8:a8:b0:7d:b4:bd:f8:
         65:64:af:f0:70:cd:63:f1:7e:17:7d:8d:44:d8:dd:3e:4d:fa:
         ea:d1:7f:6b:be:55:2a:0e:43:f8:19:01:ce:9d:c0:7f:19:89:
         be:a3:c4:02:56:37:3a:16:32:72:77:2d:0b:d3:72:34:ec:a1:
         2d:79:fd:f0:5c:b8:7f:e9:fe:ea:29:de:64:a1:f0:11:4f:5d:
         b5:7e:79:bf:9d:25:c3:67:78:57:8b:b7:12:4b:da:d2:60:32:
         4a:11:7b:48:82:a3:fa:69:5f:1c:22:2c:29:13:54:ef:c3:c2:
         a1:c7:9f:29:eb:b9:e8:99:83:3a:d7:d2:35:67:09:12:5d:32:
         a9:22:b1:e0:76:a9:1a:c6:b8:26:08:b5:4c:0d:7d:84:2d:27:
         bd:62:97:75:f3:92:47:1d:1a:d4:7a:5a:3b:b6:8b:cc:e1:ca:
         28:0c:05:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:58:55 2026 by rpki-client