Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/fc2d25ca-0dfa-3092-aef3-a1e8c3cc11a6.roa
File:                     fc2d25ca-0dfa-3092-aef3-a1e8c3cc11a6.roa (raw, json)
Hash identifier:          x/DcA57qtDslrBKiOu8yjowdZ+THGc8fJI8OPuP1l/c=
Subject key identifier:   38:08:C9:93:FF:2E:C6:16:19:09:0F:A4:94:C4:BC:C0:4B:2B:C8:25
Certificate issuer:       /CN=989afb89-021f-486a-9386-ea5ad2a85eb3
Certificate serial:       010D0C9F4328584E35FF18682B2460AB69552300
Authority key identifier: C8:B3:AD:AE:75:39:83:2D:10:4E:01:6B:67:FF:1F:8B:DD:56:66:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/fc2d25ca-0dfa-3092-aef3-a1e8c3cc11a6.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     3359
IP address blocks:        199.185.2.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:18:68:2b:24:60:ab:69:55:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=989afb89-021f-486a-9386-ea5ad2a85eb3
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=49262e27-bbbc-4495-b527-c25c94274a47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:db:74:7d:e7:e3:93:e7:65:f2:7a:11:8f:4a:
                    d2:64:a4:36:9a:4f:26:5d:3f:84:10:ab:bb:c9:e4:
                    59:d5:fe:e2:73:9b:67:74:9e:a6:39:cb:02:a2:60:
                    50:d5:10:db:9f:67:50:bf:68:61:e3:c8:13:fd:80:
                    b8:f3:3c:eb:28:02:8a:f1:14:54:c8:d3:49:f6:be:
                    59:1e:63:9f:f4:61:56:32:03:72:e1:f7:e4:99:59:
                    55:09:1b:99:1c:de:d4:7f:49:70:95:a5:25:41:b4:
                    5c:0a:fb:78:6d:b6:12:3c:f5:b6:3f:7a:9c:5d:0f:
                    5e:56:85:8a:17:ee:c4:07:17:28:83:d8:50:57:69:
                    ae:89:78:ca:88:c7:dc:46:ec:f7:a0:45:ca:54:2f:
                    95:4a:b6:fa:53:f7:71:ba:f1:7d:c1:53:88:25:81:
                    be:09:4f:88:74:71:c5:eb:20:53:af:91:54:23:f9:
                    1f:e4:74:42:1d:da:5e:03:fe:d2:7b:d8:ae:0f:e3:
                    8d:05:f4:a2:ca:a8:16:f5:46:7f:1c:95:9b:e8:56:
                    fd:a5:b8:74:fd:8f:f5:aa:13:9c:de:c4:cd:8d:a9:
                    47:24:16:ed:6b:87:8e:a3:d1:9f:00:25:14:d5:b1:
                    5c:31:04:ec:0e:c9:a8:51:f8:1c:66:5d:30:72:e4:
                    d0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:08:C9:93:FF:2E:C6:16:19:09:0F:A4:94:C4:BC:C0:4B:2B:C8:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/fc2d25ca-0dfa-3092-aef3-a1e8c3cc11a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.crl

            X509v3 Authority Key Identifier:
                keyid:C8:B3:AD:AE:75:39:83:2D:10:4E:01:6B:67:FF:1F:8B:DD:56:66:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.185.2.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:46:ee:27:cd:f4:1d:b9:dd:d8:59:8d:e3:ea:2a:8f:97:c1:
         61:54:e9:a4:5f:cf:8b:6d:ff:6a:95:12:38:ca:e7:79:c6:03:
         2f:53:6d:f4:ba:02:97:3b:5a:41:3c:c7:40:61:01:91:c5:5f:
         ba:f5:5b:03:5c:24:bc:9c:b6:d4:f0:7a:3a:38:f6:c4:25:4a:
         46:f5:70:7f:ee:82:34:b0:ad:46:a0:3e:75:9a:54:00:2f:75:
         11:b8:9c:0a:3d:be:7d:e5:17:a6:91:8a:48:d2:c7:ef:67:d5:
         8d:d0:d7:4e:29:77:a6:f2:23:a8:75:61:df:3c:e3:c4:6a:74:
         78:ff:d5:14:93:2d:47:c9:f7:e4:f5:82:9e:78:25:e4:0a:ab:
         e4:dd:8d:d7:b7:83:cd:ce:fe:af:90:63:18:dc:cb:ef:75:8d:
         b6:cb:6c:f0:03:2c:88:fe:ed:60:c0:37:c1:47:99:46:8d:23:
         96:dd:98:8b:d7:1e:d6:e7:d8:1c:ea:99:0c:bf:4a:9f:3f:1d:
         23:8e:3d:bf:c7:48:58:a5:fd:bf:99:7b:7b:93:24:65:aa:cc:
         ca:08:b2:e7:fc:a4:ac:03:a7:8a:3a:f1:b3:89:e7:de:50:d8:
         61:21:27:d7:f0:a9:e5:21:9c:ff:f0:90:d9:74:ac:b7:3f:cc:
         04:68:0d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:54:25 2026 by rpki-client