Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee/e4b829a7-1824-38b5-9c7d-3155a26aaa4b.roa
File:                     e4b829a7-1824-38b5-9c7d-3155a26aaa4b.roa (raw, json)
Hash identifier:          U0aJqouPYyQWsvbD29p2KbQN8Tk9bdSyMowpMYqb1rk=
Subject key identifier:   1E:D8:7A:42:A1:F8:43:57:CC:D3:B5:2D:DC:12:80:A5:B4:73:3E:4E
Certificate issuer:       /CN=4dfb879f-7966-496a-b35e-d766981846ee
Certificate serial:       010D0C9F4328584B2FC19586DBC27E71780C1200
Authority key identifier: 47:A0:89:91:6C:7F:47:53:FB:B8:28:FF:43:4D:96:C5:0F:02:A5:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee/e4b829a7-1824-38b5-9c7d-3155a26aaa4b.roa
Signing time:             Sun 14 Sep 2025 01:00:33 +0000
ROA not before:           Sun 14 Sep 2025 01:00:33 +0000
ROA not after:            Sat 13 Dec 2025 02:00:33 +0000
asID:                     271
IP address blocks:        199.60.226.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee/4dfb879f-7966-496a-b35e-d766981846ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee/4dfb879f-7966-496a-b35e-d766981846ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2f:c1:95:86:db:c2:7e:71:78:0c:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dfb879f-7966-496a-b35e-d766981846ee
        Validity
            Not Before: Sep 14 01:00:33 2025 GMT
            Not After : Dec 13 02:00:33 2025 GMT
        Subject: CN=81122e48-f557-4612-894b-444252f62306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9a:1b:d0:a7:9b:19:6a:02:ae:64:81:5c:8a:
                    ca:a7:4e:8a:4d:60:77:b5:e5:07:e9:89:64:f5:e6:
                    4f:42:23:a0:94:0d:61:99:a6:90:ae:76:bc:f1:6a:
                    b1:a4:5f:15:c3:8d:46:9a:6f:94:6b:4b:b8:88:18:
                    c6:16:58:d5:a3:4b:e9:6d:d7:6c:24:bc:6e:92:4d:
                    0b:e6:a0:47:65:2c:79:25:67:15:eb:96:5a:8e:7a:
                    31:51:ef:df:e1:68:71:f7:ff:d9:42:32:28:77:d4:
                    d1:50:a7:5e:d1:84:e3:b1:16:d2:73:18:63:e1:ad:
                    94:9e:25:41:2c:30:e4:3c:5d:84:ca:89:a4:0f:77:
                    cd:bb:a8:d0:79:2e:79:51:07:b3:54:28:c0:11:4d:
                    fd:6b:02:3a:d7:84:7c:e0:bf:c9:76:58:ce:12:b0:
                    99:90:21:7f:54:50:7b:27:3c:83:b5:49:e2:83:d1:
                    8d:89:db:6c:92:c1:c4:39:c2:0b:4f:8a:e4:77:b5:
                    72:38:de:62:99:2e:31:db:87:92:fe:6a:8c:e8:a4:
                    c6:26:0a:40:11:38:04:c3:ae:e8:0e:fd:bb:7d:2c:
                    c4:92:ca:35:77:26:38:48:ef:d7:85:32:e5:fd:e6:
                    98:4a:d6:2c:07:3f:27:d0:0d:5e:b3:71:8c:ae:24:
                    14:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:D8:7A:42:A1:F8:43:57:CC:D3:B5:2D:DC:12:80:A5:B4:73:3E:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee/e4b829a7-1824-38b5-9c7d-3155a26aaa4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee/4dfb879f-7966-496a-b35e-d766981846ee.crl

            X509v3 Authority Key Identifier:
                keyid:47:A0:89:91:6C:7F:47:53:FB:B8:28:FF:43:4D:96:C5:0F:02:A5:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4dfb879f-7966-496a-b35e-d766981846ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.60.226.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:00:61:b8:5b:76:6f:27:75:5a:d0:b4:f9:ff:d1:17:5b:54:
         b4:06:12:e3:1a:d2:18:6f:6f:b4:3e:ab:c8:0f:5e:64:89:ad:
         82:26:b2:52:6c:9a:f7:38:7a:7c:85:73:96:51:06:79:dd:06:
         db:c2:51:4c:ec:49:e6:ba:7c:59:7c:e9:e4:c1:77:62:6c:87:
         95:7f:5f:a2:f7:07:f3:a7:20:d0:49:c3:df:21:4c:80:1d:a5:
         04:53:3a:f3:2d:0d:7d:86:e4:1a:9b:0d:dc:a0:07:6d:50:14:
         60:23:50:dc:07:a9:1f:d9:e0:b1:7e:3f:d0:b0:51:38:2c:18:
         5b:c2:48:f4:e6:53:cb:fd:08:4e:a8:98:4a:25:a4:c2:6d:59:
         5c:18:35:15:f7:26:cc:4d:eb:b7:2d:d1:2a:d0:db:ba:6b:f2:
         c4:26:8d:c2:aa:0f:39:4e:81:20:02:27:33:d0:7e:01:b7:68:
         7d:b1:c7:6c:ae:bb:64:a5:a8:bd:d8:0d:ab:75:d6:df:70:68:
         bc:1f:de:07:3a:d2:52:a1:2f:f4:17:f3:9b:7f:4c:6d:f5:c0:
         25:05:03:ea:1b:99:53:55:c3:30:34:95:f2:e8:09:92:88:7e:
         ad:77:50:6d:09:86:33:02:1f:6c:44:84:a8:2c:4b:aa:67:10:
         89:d4:c5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 23:37:53 2025 by rpki-client