Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/58ad0cc2-be6b-3fad-ab18-f24c8742d160.roa
File:                     58ad0cc2-be6b-3fad-ab18-f24c8742d160.roa (raw, json)
Hash identifier:          so89FKeYwnStp1XJZzCcC5kBLIqgaC5/H4qBlJ+mrdU=
Subject key identifier:   D4:24:D6:F1:1E:B0:62:6B:CD:47:4B:2A:4A:EC:7A:F8:7A:1E:2C:2A
Certificate issuer:       /CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234
Certificate serial:       010D0C9F4328584E709F77A1D960E810EB9FAC40
Authority key identifier: BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/58ad0cc2-be6b-3fad-ab18-f24c8742d160.roa
Signing time:             Thu 09 Jul 2026 09:00:13 +0000
ROA not before:           Thu 09 Jul 2026 09:00:13 +0000
ROA not after:            Wed 07 Oct 2026 09:00:13 +0000
asID:                     15296
IP address blocks:        199.216.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:70:9f:77:a1:d9:60:e8:10:eb:9f:ac:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234
        Validity
            Not Before: Jul  9 09:00:13 2026 GMT
            Not After : Oct  7 09:00:13 2026 GMT
        Subject: CN=d09c04aa-14d1-4160-a229-b45eab49a661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ae:97:2a:27:0d:eb:b8:56:74:d1:dd:39:fa:
                    cb:99:a8:4d:99:bd:e6:6b:6f:19:e2:e3:99:56:e9:
                    0e:04:87:66:87:9f:32:44:78:a8:68:64:d7:31:be:
                    c0:c0:8d:75:04:48:10:2d:2b:0b:81:f0:37:9d:b4:
                    6e:21:71:37:f0:e0:10:ae:0f:51:13:a0:36:20:7c:
                    e5:16:37:42:8b:ae:5b:a0:92:49:d5:0f:61:2b:cc:
                    1b:9e:3d:a3:0a:8e:b9:38:5c:5c:31:18:e7:db:25:
                    2a:d5:da:ce:39:d3:d3:0f:e3:c2:0b:17:04:83:f1:
                    fb:40:f5:00:e1:08:6b:49:c5:ec:c2:8b:c0:6e:cc:
                    b6:2c:93:bb:27:81:5a:cd:00:c0:9b:8f:8c:01:26:
                    20:a8:8d:a8:79:9f:33:13:e6:e3:d5:f3:f6:b1:3e:
                    9a:37:38:39:30:e7:22:bb:f7:fd:d4:8f:c3:2c:91:
                    cc:e0:41:a3:d8:5f:a4:cb:71:21:37:d6:6d:51:a7:
                    ae:ad:11:56:76:7a:4d:0c:40:dc:fb:34:52:6e:c0:
                    2e:2c:d6:c9:5a:48:d5:2e:89:8d:3f:5e:6f:b2:dd:
                    0d:c1:b1:e8:a9:60:b9:33:cc:60:f6:5d:b5:c6:72:
                    e9:ec:d4:3f:4a:f9:10:86:d7:01:42:fd:50:18:59:
                    08:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:24:D6:F1:1E:B0:62:6B:CD:47:4B:2A:4A:EC:7A:F8:7A:1E:2C:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/58ad0cc2-be6b-3fad-ab18-f24c8742d160.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl

            X509v3 Authority Key Identifier:
                keyid:BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.216.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:1b:6b:3e:6e:29:47:8d:51:29:e3:f5:a5:5d:7b:ad:35:5e:
         8d:16:fb:ab:0a:72:31:97:cc:f9:5d:54:4f:24:f9:b7:0b:f4:
         5b:37:f6:84:95:1c:fa:c5:19:ab:ce:64:0f:75:7c:ed:f6:a6:
         68:c0:71:d1:e4:12:4e:d5:54:15:0a:ad:8f:f0:60:6e:07:45:
         9c:be:92:52:a4:b0:ad:e5:3b:5a:b0:b6:cd:30:52:e2:93:3b:
         97:74:45:ae:27:cd:da:5a:bb:18:89:3b:7d:a6:a3:62:54:a9:
         0a:3d:cc:2e:6f:5e:a6:0e:99:35:ea:24:89:bd:09:57:5a:0d:
         ca:35:18:f2:41:fd:5e:92:41:40:62:6b:5f:05:29:c7:01:01:
         aa:42:c6:b9:ce:84:91:08:26:de:de:e8:83:f2:6e:ae:43:e6:
         96:f2:3d:fd:e2:57:70:1d:11:22:af:49:53:7f:b8:c4:8a:17:
         b7:23:00:39:b6:b9:8a:cd:97:b6:04:32:8c:f1:ce:a9:8f:53:
         d8:c8:48:82:81:93:34:8e:90:31:13:c0:5e:48:43:a8:39:e5:
         42:ef:49:cd:27:f5:77:6c:ae:3b:90:db:d9:f5:90:3b:aa:78:
         c5:eb:42:82:dd:3a:ea:07:e7:02:d3:ed:f2:59:1a:91:90:b2:
         e6:92:f0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:58:22 2026 by rpki-client