Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/d1e734e2-ce89-3dd5-9697-dab100cd0408.roa
File:                     d1e734e2-ce89-3dd5-9697-dab100cd0408.roa (raw, json)
Hash identifier:          QcAq0lbcTcK7oBTmT0AkLJ+caQfVijp2NEVtuEfrcYk=
Subject key identifier:   F4:03:89:2C:9D:47:7A:62:06:0A:A1:C2:45:7A:2A:0F:0F:51:FF:2B
Certificate issuer:       /CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969
Certificate serial:       010D0C9F4328584E48247FD43FA88C5F30111440
Authority key identifier: DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/d1e734e2-ce89-3dd5-9697-dab100cd0408.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     14618
IP address blocks:        199.47.128.0/24 maxlen: 24
                          199.47.129.0/24 maxlen: 24
                          199.47.130.0/24 maxlen: 24
                          199.47.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:7f:d4:3f:a8:8c:5f:30:11:14:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=5f178a42-3714-43da-83e4-552d4d3349af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3e:ef:a0:04:5a:83:4b:93:5f:39:5e:f7:71:
                    cb:13:87:19:99:c9:e0:c8:f4:4f:b8:6e:3a:ff:6e:
                    84:af:10:82:4e:fd:7e:42:80:a8:06:86:fd:44:a1:
                    07:0b:0d:25:74:d3:d8:5f:66:7f:89:06:c3:2c:53:
                    58:90:f9:6f:53:c0:05:e0:03:8b:d9:58:db:9a:c6:
                    65:35:52:53:85:8c:f1:a9:06:15:46:93:05:3b:d6:
                    5e:7b:aa:76:7d:94:1b:e8:ad:c0:8c:9c:89:8d:b5:
                    7d:1c:b1:29:5d:a9:7d:7c:da:1e:54:dc:d6:31:c1:
                    9d:11:fa:98:c9:3b:bb:02:65:8b:4b:59:29:08:f8:
                    30:5b:f3:47:41:db:08:d5:71:32:d0:4c:5f:38:65:
                    a7:c6:33:ba:27:b4:a2:70:97:18:08:25:4b:c2:65:
                    f2:d3:6a:4e:a2:63:2e:30:3d:00:b4:e7:7b:7a:92:
                    38:da:ce:00:7c:fa:2b:42:f9:c0:27:c0:40:ec:55:
                    17:70:a6:04:2a:bf:5f:8d:43:ff:c0:b5:3a:a9:a9:
                    b6:81:be:08:3e:6a:cb:90:ba:00:64:4f:d1:56:bf:
                    3e:39:c0:df:19:c1:4a:e7:45:56:a9:bf:d7:ee:a5:
                    cd:f7:5a:f6:e5:25:b4:54:d3:f3:e7:ef:73:26:8b:
                    71:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:03:89:2C:9D:47:7A:62:06:0A:A1:C2:45:7A:2A:0F:0F:51:FF:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/d1e734e2-ce89-3dd5-9697-dab100cd0408.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.47.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:6d:ed:45:4f:cb:77:cd:8b:ed:10:a5:12:7b:33:66:74:67:
         ba:d6:d8:12:45:25:26:6b:dd:9d:04:b3:76:2f:08:94:07:43:
         b5:3d:bf:fb:6d:08:a8:97:68:a1:7c:d8:5c:8b:e6:88:ba:4c:
         3f:3d:36:c8:53:c7:01:6d:da:28:9d:c7:01:29:e8:62:71:bb:
         fb:b5:d5:c9:bd:aa:dc:9a:80:ea:32:1a:d6:57:cd:0f:49:ce:
         26:56:7e:d4:19:3a:f7:fd:29:f5:72:cb:78:a5:a3:74:9e:52:
         46:4e:06:45:86:74:49:b3:d3:96:32:d4:f6:4b:cb:41:74:3d:
         a1:0d:22:e5:8a:3c:87:5e:9d:ab:4e:eb:fd:93:06:a0:d2:09:
         03:48:f1:af:d0:3e:60:5d:67:8d:22:17:42:0a:12:d1:34:c7:
         3f:1c:ad:e2:44:62:6b:b4:56:b5:3d:7c:49:df:43:81:00:91:
         15:55:4c:09:2b:ee:ec:16:35:83:41:a9:32:1f:6e:fc:4a:cf:
         1b:91:f9:b6:9b:f3:98:5f:93:fb:08:cf:5d:51:c3:bd:12:34:
         a7:04:a7:30:e6:88:f3:cb:85:00:d5:c0:dc:94:f8:b7:be:7d:
         b5:08:65:91:79:67:b2:11:4e:f1:9b:0b:57:8c:ad:f2:3d:57:
         84:c1:ab:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:39:35 2026 by rpki-client