Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746/f722ad9f-9529-34f6-b01e-6e78de3ae7af.roa
File:                     f722ad9f-9529-34f6-b01e-6e78de3ae7af.roa (raw, json)
Hash identifier:          NX2Cs2reO3hNJkb18kO66JsHaEQh9o065awAn7wFy3k=
Subject key identifier:   4C:95:55:0D:60:DE:AB:4C:68:5E:2C:E5:C7:88:FE:11:C9:1F:55:55
Certificate issuer:       /CN=01b2d667-c096-462f-9ad9-6391b09e9746
Certificate serial:       010D0C9F4328584F4974F871480161AB1E27F080
Authority key identifier: EF:55:74:99:02:9B:7D:CA:4F:EF:EE:5F:8A:11:58:6F:46:D7:2F:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746/f722ad9f-9529-34f6-b01e-6e78de3ae7af.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     63018
IP address blocks:        199.59.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746/01b2d667-c096-462f-9ad9-6391b09e9746.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746/01b2d667-c096-462f-9ad9-6391b09e9746.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:f8:71:48:01:61:ab:1e:27:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01b2d667-c096-462f-9ad9-6391b09e9746
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f83d8d9f-04f8-4d95-94d6-2667c6d314e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:38:0f:cf:a6:21:7f:be:6c:f9:05:7a:78:33:
                    7e:d8:20:5c:fa:2f:e3:a6:99:cf:db:dc:a2:50:04:
                    5b:38:68:e1:0d:d2:cb:06:55:4e:7d:d9:eb:46:c7:
                    ba:ff:ae:fd:65:25:db:5e:15:b2:48:22:db:57:b5:
                    e3:2c:99:0f:0a:e7:61:1c:ff:a2:0f:7a:53:7d:ca:
                    f5:d6:08:99:77:4d:09:9d:9e:7d:76:c0:a4:62:29:
                    e8:e2:61:0d:d7:3a:f9:bf:8d:59:d6:90:61:0f:fd:
                    c6:1a:96:05:c5:a4:de:66:45:a5:52:65:d1:95:9c:
                    ec:ba:ed:f7:42:50:bd:4e:08:f0:bd:e2:62:0e:39:
                    e4:49:1d:ce:31:f5:ae:89:51:ff:9e:1f:55:fc:58:
                    ea:f6:c5:e4:03:2a:c5:16:af:4a:8a:e0:b0:aa:02:
                    bc:9e:e4:ae:50:ed:44:2f:ec:ec:c1:97:75:25:f5:
                    af:66:ee:34:0d:bd:bd:46:2e:61:96:04:6e:c7:85:
                    82:c5:3a:48:15:9d:8d:53:5a:0b:b1:99:71:b8:e0:
                    b4:29:60:ea:4e:35:11:50:8f:cb:27:5a:4e:8b:7b:
                    c0:07:45:d5:4c:35:4f:27:c7:bc:2b:ab:be:71:13:
                    6e:6f:43:7c:96:4f:1a:52:35:b8:04:2a:87:e0:e0:
                    81:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:95:55:0D:60:DE:AB:4C:68:5E:2C:E5:C7:88:FE:11:C9:1F:55:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746/f722ad9f-9529-34f6-b01e-6e78de3ae7af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746/01b2d667-c096-462f-9ad9-6391b09e9746.crl

            X509v3 Authority Key Identifier:
                keyid:EF:55:74:99:02:9B:7D:CA:4F:EF:EE:5F:8A:11:58:6F:46:D7:2F:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.59.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:26:69:ef:a5:a9:07:91:34:be:51:99:d9:1a:1a:7c:27:30:
         19:6e:1d:93:dd:51:f2:a4:62:e9:89:18:8e:77:38:4f:16:e4:
         77:9e:59:7e:30:23:91:ba:04:a0:5a:3c:23:41:5b:6e:0d:48:
         04:44:cb:68:2f:10:54:dc:50:21:42:e7:23:07:25:fc:4d:e1:
         b9:1b:60:0c:b9:0c:3d:3b:91:54:7e:52:ff:18:c3:73:6c:59:
         12:db:b4:90:fb:56:75:b1:29:85:7f:b1:4b:5f:78:2d:58:04:
         45:19:f9:a8:32:20:24:ec:89:8e:55:55:36:9e:ed:13:d3:44:
         02:22:90:7b:4a:2a:1d:8f:9e:bd:d9:3a:72:80:3b:1d:7a:ec:
         90:1b:50:76:ec:ec:a3:54:d2:c2:44:ef:39:ef:14:46:ff:b7:
         72:aa:a8:62:bb:4f:48:c7:a2:ff:fa:bd:86:5f:a2:d3:78:2e:
         29:a2:2d:07:bb:70:ec:cf:cd:4b:f2:9f:54:e8:f3:dd:8a:c2:
         5b:a7:c8:39:85:86:ea:ee:da:b9:89:a6:46:d1:51:a5:5c:61:
         d4:54:ef:0f:85:d9:1f:ee:d1:14:b5:22:74:2a:41:b4:99:ae:
         a2:51:af:ff:75:82:96:70:cc:85:f5:a7:76:50:b8:52:4a:b6:
         e4:f3:25:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:25:30 2026 by rpki-client