Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/4790749b-7bd8-360a-9663-48cfb42d79e5.roa
File:                     4790749b-7bd8-360a-9663-48cfb42d79e5.roa (raw, json)
Hash identifier:          fTg9jqg1nCVDHNEtMNiP+PZMbE7SZSRtlRAzCpUesEY=
Subject key identifier:   27:A1:6B:6B:CC:BC:24:49:47:FB:6D:39:C1:86:40:2D:F2:87:0A:10
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584E48247A3AEC7378572E65BBC0
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/4790749b-7bd8-360a-9663-48cfb42d79e5.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     10753
IP address blocks:        149.19.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:7a:3a:ec:73:78:57:2e:65:bb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=71f3bdd2-a032-4ada-bf28-e709dd52cd0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:58:e6:6a:c8:be:cd:3a:37:f7:6a:d7:bd:51:
                    f8:0d:aa:a0:1b:c4:94:eb:61:dd:6a:31:ed:60:1c:
                    1a:eb:12:1a:67:15:dd:3e:cd:d3:c5:8f:af:41:ec:
                    7a:50:7e:fc:5e:00:e8:53:18:9c:bb:19:40:73:7e:
                    0d:05:db:6d:93:f5:75:c5:cd:b4:6d:77:78:04:a7:
                    2f:b5:ef:86:bc:e6:28:46:8c:b6:6d:b5:9e:ac:f0:
                    98:47:3d:73:c9:b0:c8:03:53:2f:9f:c1:e6:b0:4d:
                    34:7a:06:5b:da:c0:b0:30:f5:31:36:c7:2b:41:a0:
                    27:bb:41:80:69:db:ff:d3:c6:93:2a:4f:5f:6f:c5:
                    b2:f9:ea:02:3d:39:91:1d:c2:36:e2:de:da:ff:db:
                    2f:93:2f:22:ca:79:c1:cb:eb:69:9d:fc:83:b6:35:
                    5c:97:dd:1e:65:ad:05:a2:e2:de:57:e1:47:6e:43:
                    95:d6:8f:a5:49:ea:1d:b9:cd:0f:bd:64:82:2a:af:
                    eb:f4:88:fd:ad:3a:30:9a:53:1a:79:34:e7:22:0b:
                    b9:b6:3b:aa:93:1f:3b:5a:3c:31:d6:85:4c:57:07:
                    58:fc:7d:e6:94:8b:47:d2:aa:d7:04:14:1b:e6:a1:
                    f4:ff:b2:23:3c:fa:33:66:28:44:63:02:59:da:b6:
                    c8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A1:6B:6B:CC:BC:24:49:47:FB:6D:39:C1:86:40:2D:F2:87:0A:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/4790749b-7bd8-360a-9663-48cfb42d79e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.19.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:d6:81:c7:bd:25:2b:12:19:86:79:10:b8:7d:57:07:35:ef:
         47:2b:59:c0:86:a5:00:68:4c:a9:7e:e2:4f:08:f3:bc:76:fe:
         ed:d6:bd:c7:fa:fb:3a:c6:25:4b:0a:61:ab:4c:2b:a9:ea:93:
         bc:fb:d6:74:00:b9:e2:53:fa:85:15:28:36:fc:93:85:e2:6a:
         ec:c7:ff:e9:b1:b9:07:b3:f1:3b:0a:0e:34:fd:87:a0:c2:4a:
         c0:3f:db:ee:21:1a:0d:c6:11:2f:d4:3e:f8:03:9f:5b:c2:1f:
         58:a7:3d:a9:41:b1:9e:23:d3:cd:df:f7:8b:9f:fd:cb:f6:d9:
         28:a1:fa:11:e8:f2:61:85:0a:8b:5a:33:da:5a:49:fe:59:2b:
         a8:af:fa:a3:7a:53:bb:dc:fc:9a:0a:cf:66:0a:a8:ec:38:0d:
         7d:fa:a0:23:c1:1c:a8:23:91:95:b5:93:e5:ca:e2:fe:89:9e:
         11:ed:2b:2c:1c:95:26:a6:a6:ff:56:8c:73:8f:30:9b:1b:02:
         33:84:f3:63:71:e4:60:d0:27:e6:e9:89:da:22:c8:a1:04:da:
         a4:2b:ad:c9:d5:05:11:57:f1:c2:49:8b:b7:0d:be:a3:1d:e0:
         75:07:c6:85:51:0d:41:37:0c:36:5a:15:c0:ae:d5:b7:5e:c5:
         39:8f:04:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:09:46 2026 by rpki-client