Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/6c6917a5-c689-3b0f-8d42-0c7d1225ae4a.roa
File:                     6c6917a5-c689-3b0f-8d42-0c7d1225ae4a.roa (raw, json)
Hash identifier:          b6Wws9lu/H9u65KG6awm3gy0tyYkBQk7XUkz5XfLKNY=
Subject key identifier:   DC:EA:3F:07:B5:5D:86:E5:A4:41:76:EA:01:83:68:5C:D0:68:DF:4E
Certificate issuer:       /CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234
Certificate serial:       010D0C9F4328584E709F767F4B8B6EA819CAAD80
Authority key identifier: BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/6c6917a5-c689-3b0f-8d42-0c7d1225ae4a.roa
Signing time:             Thu 09 Jul 2026 09:00:13 +0000
ROA not before:           Thu 09 Jul 2026 09:00:13 +0000
ROA not after:            Wed 07 Oct 2026 09:00:13 +0000
asID:                     15296
IP address blocks:        199.216.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:70:9f:76:7f:4b:8b:6e:a8:19:ca:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234
        Validity
            Not Before: Jul  9 09:00:13 2026 GMT
            Not After : Oct  7 09:00:13 2026 GMT
        Subject: CN=ef29cc03-56b6-481c-b8f4-e0375738ec98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:48:6c:df:77:3b:63:6b:38:1b:09:d6:83:39:
                    d6:2f:eb:d7:cc:3f:aa:b8:50:a4:24:6c:57:44:e4:
                    25:35:2f:8e:d2:b3:54:d5:8b:8b:9e:f8:3b:02:95:
                    cb:98:cd:5d:7a:7f:56:f5:ae:b4:6c:b9:35:e0:95:
                    79:ea:ee:1f:ce:93:22:1d:51:96:7e:55:b5:9a:63:
                    11:df:71:f4:e0:7a:15:64:9d:c0:61:bd:ee:f5:3f:
                    22:5d:54:82:24:cb:c1:af:c5:b3:09:5c:11:24:69:
                    4d:08:d8:a0:a7:62:bb:44:2d:e8:95:f0:c3:e9:76:
                    71:45:56:02:f2:30:3b:f6:6a:03:4b:8c:29:ee:76:
                    47:69:f9:0a:92:f8:cb:24:a8:d1:44:e0:3c:e6:6b:
                    66:f8:06:b8:dc:36:c6:cb:48:60:70:6a:88:95:84:
                    f2:1c:2d:65:d8:f8:22:9a:65:21:19:8a:de:8d:81:
                    5d:f6:4a:1e:ad:a2:75:54:2e:87:01:d7:47:96:b2:
                    59:19:79:b0:d6:ce:f0:f5:20:79:15:3f:fc:2e:50:
                    ac:63:27:0e:a0:4d:c3:34:7a:3e:43:f2:c1:58:ce:
                    90:83:75:34:66:6a:09:50:c3:a0:72:c2:7f:ea:41:
                    40:f7:4e:0b:0f:56:12:f3:32:f1:2d:0b:85:df:c9:
                    30:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:EA:3F:07:B5:5D:86:E5:A4:41:76:EA:01:83:68:5C:D0:68:DF:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/6c6917a5-c689-3b0f-8d42-0c7d1225ae4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl

            X509v3 Authority Key Identifier:
                keyid:BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.216.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:1d:d2:5b:99:26:05:37:84:93:62:87:54:6a:b5:46:74:32:
         be:6d:bb:3d:4d:50:d6:ef:93:b7:6a:39:c3:b9:61:5a:da:23:
         ee:25:83:9f:6c:c0:19:b0:c6:1f:77:87:75:fd:00:c2:b0:93:
         fe:9d:21:35:de:2c:5d:0f:5a:a1:7f:b3:1a:09:3b:34:ee:69:
         31:26:56:ff:59:0b:5f:52:d4:81:c1:49:41:2e:12:0f:6b:24:
         50:3a:11:1c:49:56:64:4a:fe:30:d2:b9:f7:57:69:da:d7:49:
         c9:f8:41:4e:6b:77:1c:c2:93:2a:dd:1d:b1:e9:57:76:e1:eb:
         08:bb:2c:ee:aa:eb:c2:d5:b3:d1:d1:5b:40:c8:80:50:75:8b:
         48:fc:87:50:f9:90:84:39:dd:cd:ce:ea:c0:1a:25:60:42:cc:
         11:f1:4e:5d:dc:8b:a2:f4:e2:4f:67:66:7a:b3:4e:08:75:7c:
         57:bd:e3:9d:14:ce:9e:40:07:68:dd:5f:ec:a0:87:a6:09:69:
         6c:62:20:07:c9:6f:33:92:3c:b2:5c:93:f1:83:62:1b:8f:d2:
         9b:f0:c8:ee:b7:27:35:96:b2:ac:6f:1f:cc:7d:3f:f3:88:75:
         7d:1d:e0:1d:e8:3b:48:6e:01:6b:d5:a8:5f:68:7e:7f:99:2c:
         f6:2a:75:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:57:43 2026 by rpki-client