Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517/9720fbe9-9fad-3bc5-bc60-58cd34b8ceca.roa
File:                     9720fbe9-9fad-3bc5-bc60-58cd34b8ceca.roa (raw, json)
Hash identifier:          nJmAnBfrg+lyJ2fwE4JBL+KPBEHMzv0M1fhhB9T9pkw=
Subject key identifier:   F7:17:2F:6C:B5:35:F2:AC:E0:53:F1:88:21:96:F6:48:38:BC:29:8D
Certificate issuer:       /CN=e1ec6ef7-f760-42cd-a1f3-c6c0393b2517
Certificate serial:       010D0C9F4328584F5A332B7F264543AD9BE13D00
Authority key identifier: 81:D1:4D:E9:C3:E4:A8:4C:10:A1:4A:89:6E:A3:CA:E3:2B:BE:BE:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517/9720fbe9-9fad-3bc5-bc60-58cd34b8ceca.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     22773
IP address blocks:        199.180.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:33:2b:7f:26:45:43:ad:9b:e1:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1ec6ef7-f760-42cd-a1f3-c6c0393b2517
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=2fdcf485-c670-4c85-bcfe-c7b46cdb4d36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4e:ae:5c:69:bf:10:96:62:6b:cb:d0:39:a7:
                    71:40:3f:f9:82:4b:01:c1:dd:e2:f0:57:9a:61:08:
                    6f:97:86:86:f4:cb:bb:22:85:ca:8e:60:9e:91:2d:
                    72:10:0a:02:2b:e5:8c:c7:70:53:12:66:eb:07:bd:
                    5b:ee:c5:88:62:9f:f4:1e:9a:72:be:28:4d:39:a9:
                    6b:36:63:ee:44:72:68:8e:96:5d:ad:ec:1a:9e:65:
                    b0:8a:b5:2c:ad:4a:76:15:6d:69:78:67:70:e1:b1:
                    c0:88:c4:4c:4d:75:c2:15:a4:0d:96:85:00:53:48:
                    dc:de:95:b3:3d:11:03:f3:fb:d6:14:ec:09:09:78:
                    ee:22:64:68:f5:f1:9d:76:d6:a9:36:e3:d5:35:9a:
                    06:c0:da:30:0a:16:8c:1b:df:3c:6f:00:97:92:be:
                    82:34:c3:5e:de:bc:bf:4a:a7:ca:b6:a0:41:3a:8b:
                    2f:a2:40:cc:40:3e:76:d4:9a:0a:5b:87:03:9a:3e:
                    56:9b:d0:28:95:b4:14:1a:ae:df:22:0e:cb:8e:eb:
                    b3:d8:4f:34:d8:4a:b9:43:32:58:28:de:33:90:32:
                    88:c2:11:ad:a0:61:1d:9d:04:f7:2a:0e:db:17:a1:
                    a6:6b:1b:ed:46:e8:9b:0a:13:a7:8f:1f:25:3f:76:
                    56:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:17:2F:6C:B5:35:F2:AC:E0:53:F1:88:21:96:F6:48:38:BC:29:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517/9720fbe9-9fad-3bc5-bc60-58cd34b8ceca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517.crl

            X509v3 Authority Key Identifier:
                keyid:81:D1:4D:E9:C3:E4:A8:4C:10:A1:4A:89:6E:A3:CA:E3:2B:BE:BE:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e1ec6ef7-f760-42cd-a1f3-c6c0393b2517.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.180.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:0d:13:4e:ec:f5:55:f4:08:be:b4:87:c7:d5:5e:b1:3e:64:
         82:14:e1:0f:07:1b:9b:c0:3a:88:c7:c2:94:ba:63:9d:14:23:
         64:84:c5:46:f3:3d:d9:f9:6b:7e:28:76:2b:25:9b:b9:af:87:
         9c:03:7b:79:20:50:ea:e8:e1:d4:24:8a:22:7c:75:44:54:74:
         c1:18:92:59:ed:00:5d:ec:cf:77:e0:f9:dc:c2:3b:f4:e0:4f:
         76:2f:43:ae:d4:85:58:ea:43:50:5b:21:e7:3b:9c:a4:cb:e9:
         f4:c7:b4:68:9b:0e:c7:8d:fa:0e:58:b8:27:1d:b9:d5:bd:60:
         aa:74:4b:5a:94:71:a9:bf:71:53:35:31:ac:07:b2:06:3d:b2:
         45:de:85:c9:55:a1:50:22:79:8b:4c:ac:b8:89:fb:62:28:fc:
         a1:dd:43:04:24:82:35:3e:98:df:df:72:5b:1d:8b:0f:50:f6:
         11:92:27:30:e1:26:bc:9c:82:ae:8f:2e:27:6d:98:2c:8a:ef:
         a6:97:ca:76:3b:30:1f:5c:e8:be:5c:ab:c3:68:93:79:6a:77:
         f8:a5:79:32:5c:1c:af:1e:94:39:44:0e:6f:11:ee:05:96:6d:
         36:bb:a4:e0:79:ca:4d:e7:ea:b1:4a:82:02:75:75:1d:80:0d:
         a3:42:10:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 03:23:30 2026 by rpki-client