Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6bbd9f4b-4a94-4f33-8f7b-4372f7e43443/eb2971b3-00ec-3401-a6df-68d370b9c1d9.roa
File:                     eb2971b3-00ec-3401-a6df-68d370b9c1d9.roa (raw, json)
Hash identifier:          wqXpTdj3a4bvULUHx4jsGJ3QfeBmvPH2HwwLg8zhxXo=
Subject key identifier:   D0:6E:35:9B:C9:9B:AF:11:43:4B:48:8D:AE:3B:48:1C:26:15:BD:44
Certificate issuer:       /CN=6bbd9f4b-4a94-4f33-8f7b-4372f7e43443
Certificate serial:       010D0C9F4328584E7634C63D6225F5130058B800
Authority key identifier: 39:41:91:70:BC:76:AD:15:EF:26:F2:A4:72:9B:13:C4:29:DA:AC:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6bbd9f4b-4a94-4f33-8f7b-4372f7e43443.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6bbd9f4b-4a94-4f33-8f7b-4372f7e43443/eb2971b3-00ec-3401-a6df-68d370b9c1d9.roa
Signing time:             Sat 11 Jul 2026 09:00:12 +0000
ROA not before:           Sat 11 Jul 2026 09:00:12 +0000
ROA not after:            Fri 09 Oct 2026 09:00:12 +0000
asID:                     394962
IP address blocks:        199.87.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6bbd9f4b-4a94-4f33-8f7b-4372f7e43443/6bbd9f4b-4a94-4f33-8f7b-4372f7e43443.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6bbd9f4b-4a94-4f33-8f7b-4372f7e43443/6bbd9f4b-4a94-4f33-8f7b-4372f7e43443.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6bbd9f4b-4a94-4f33-8f7b-4372f7e43443.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:76:34:c6:3d:62:25:f5:13:00:58:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bbd9f4b-4a94-4f33-8f7b-4372f7e43443
        Validity
            Not Before: Jul 11 09:00:12 2026 GMT
            Not After : Oct  9 09:00:12 2026 GMT
        Subject: CN=b3da0d53-f074-4ebf-9243-866c179f029a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ad:e7:91:1f:79:7f:ae:6c:fd:9c:55:2b:62:
                    19:c6:70:aa:1e:f3:74:b7:e4:46:a7:8b:fb:cc:1e:
                    2b:90:11:7f:96:33:d0:b5:cc:65:27:03:2d:89:8b:
                    da:c6:5a:9a:d2:04:39:e0:22:4a:b8:56:89:25:ed:
                    85:cb:97:ba:23:9b:92:07:8e:de:75:e4:94:a2:e8:
                    d7:48:ca:65:a2:9f:ab:b9:af:a9:07:3d:4a:e4:e5:
                    83:35:36:07:b3:a1:1c:ab:54:ef:94:fd:b0:de:78:
                    14:8b:a1:01:76:ed:38:2e:9a:d2:04:0c:12:39:c4:
                    6b:0b:27:ed:37:af:49:e7:32:9a:31:34:e2:bf:6c:
                    a5:f6:22:02:b7:87:84:8f:39:d7:31:d6:bf:c3:16:
                    1f:74:cc:35:cb:89:57:3c:88:59:3a:1f:1e:0c:7f:
                    65:61:88:08:ce:de:07:7a:bb:9a:9c:7a:15:84:a1:
                    d4:aa:2e:d6:d1:b7:66:98:17:85:a8:16:ee:67:22:
                    b2:f3:5f:bb:7f:5f:c3:42:82:00:39:bd:37:7d:9a:
                    90:7c:fe:7b:3e:51:34:20:dd:56:59:c3:89:f6:8d:
                    8e:60:52:53:b6:1a:7f:12:b1:93:72:c5:4d:ab:06:
                    9a:f9:ff:a0:9d:13:d3:7a:39:d9:c0:9a:14:34:8f:
                    e7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:6E:35:9B:C9:9B:AF:11:43:4B:48:8D:AE:3B:48:1C:26:15:BD:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6bbd9f4b-4a94-4f33-8f7b-4372f7e43443/eb2971b3-00ec-3401-a6df-68d370b9c1d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6bbd9f4b-4a94-4f33-8f7b-4372f7e43443/6bbd9f4b-4a94-4f33-8f7b-4372f7e43443.crl

            X509v3 Authority Key Identifier:
                keyid:39:41:91:70:BC:76:AD:15:EF:26:F2:A4:72:9B:13:C4:29:DA:AC:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6bbd9f4b-4a94-4f33-8f7b-4372f7e43443.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.87.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:db:02:cb:60:fb:08:78:9b:08:56:d3:87:c6:bc:d5:b3:9f:
         78:80:c2:67:00:49:4c:57:c1:26:a8:eb:bf:2f:17:c1:95:f8:
         af:42:30:4a:f8:f1:b8:5b:bb:eb:a4:fe:32:67:fc:0e:47:cc:
         b2:6f:b8:cf:43:98:b4:59:df:71:65:34:ba:d4:9a:c6:cc:45:
         60:6e:b8:b4:c6:c6:f7:4f:69:2c:ce:f8:81:71:aa:de:4f:51:
         fb:b3:e0:15:76:61:47:22:47:fe:10:8f:2b:7a:86:14:9d:08:
         80:95:35:45:82:b7:fe:72:31:a0:ed:ad:70:c5:f9:6b:8b:93:
         03:5c:a8:49:8f:57:36:e4:6e:db:2a:a8:7f:33:b5:78:71:ca:
         b2:27:73:4c:b6:c0:de:3d:0e:55:fb:d4:d8:fe:c7:b1:8d:e5:
         0a:73:e5:42:92:f6:91:d6:8c:51:38:fb:f5:d2:26:8b:e9:13:
         22:c6:a8:cd:4b:62:de:30:4d:0e:ba:c0:58:a8:f0:8a:42:42:
         a9:07:77:49:d3:55:b9:7f:21:50:db:78:6c:de:f0:b0:0b:db:
         6d:87:fb:d7:7e:ea:8a:34:43:e7:50:97:ea:09:03:ba:9f:81:
         65:c2:98:ae:28:87:9b:78:3e:74:fb:0b:43:0c:ed:66:4a:32:
         a7:62:45:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:41:26 2026 by rpki-client