Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/b3bc687e-3497-360e-ace2-b7af44b9f63b.roa
File:                     b3bc687e-3497-360e-ace2-b7af44b9f63b.roa (raw, json)
Hash identifier:          YZAKS9bUKGGwGYp9SCNgKzHQMPKZTceDujGLghyWQ24=
Subject key identifier:   68:13:FA:DF:31:52:04:91:D7:5B:4E:94:F7:76:59:87:24:0F:8C:23
Certificate issuer:       /CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234
Certificate serial:       010D0C9F4328584E709F6B66AC747A554FD70E40
Authority key identifier: BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/b3bc687e-3497-360e-ace2-b7af44b9f63b.roa
Signing time:             Thu 09 Jul 2026 09:00:13 +0000
ROA not before:           Thu 09 Jul 2026 09:00:13 +0000
ROA not after:            Wed 07 Oct 2026 09:00:13 +0000
asID:                     15296
IP address blocks:        199.216.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:70:9f:6b:66:ac:74:7a:55:4f:d7:0e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234
        Validity
            Not Before: Jul  9 09:00:13 2026 GMT
            Not After : Oct  7 09:00:13 2026 GMT
        Subject: CN=0c6005cd-8011-4c23-aedc-9a1deccd3c98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e8:1e:de:fa:c5:9f:94:9e:1b:c8:42:2e:9c:
                    09:3f:8b:d3:51:28:ed:93:be:33:6e:99:f7:d6:d9:
                    98:ca:c2:79:92:1c:e1:8c:2c:86:79:0b:40:15:37:
                    9b:2f:7d:5d:b7:4d:86:eb:eb:5e:9a:7e:e4:46:28:
                    c5:73:9e:5b:17:86:1f:9e:e0:48:53:e2:69:eb:34:
                    e2:ff:7b:11:b7:f5:56:ad:75:d8:b0:f8:e9:7b:ff:
                    1f:7e:e3:56:01:ea:f7:d0:f1:92:00:3d:cf:7d:f9:
                    72:a0:5f:27:f8:3c:c9:03:10:87:bb:12:99:45:75:
                    55:53:9e:85:9b:9b:8b:96:e8:3a:83:8d:43:e3:23:
                    59:d5:fe:d0:5d:8a:54:5a:5f:ae:46:f4:99:f9:2e:
                    56:2f:a0:75:0d:49:d5:61:93:20:95:51:e1:e6:d5:
                    0d:7a:ea:7f:f4:6a:85:0c:6a:82:85:15:7e:a0:01:
                    6e:f9:46:d7:00:08:85:41:d6:e2:76:0e:e6:a1:3f:
                    a4:93:f1:6e:1f:cf:60:87:74:04:4e:76:ce:a3:ac:
                    53:d3:74:80:65:f4:5d:25:6a:4d:1b:11:6e:04:a1:
                    5c:56:2e:f8:d7:05:63:21:8f:6e:30:99:bb:68:61:
                    03:fe:de:42:df:09:cc:32:00:33:c5:29:62:b7:bd:
                    2c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:13:FA:DF:31:52:04:91:D7:5B:4E:94:F7:76:59:87:24:0F:8C:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/b3bc687e-3497-360e-ace2-b7af44b9f63b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl

            X509v3 Authority Key Identifier:
                keyid:BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.216.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:ee:cd:fe:6f:9c:80:68:4f:89:1d:8f:81:05:a9:25:81:19:
         e3:f1:e2:cf:27:d7:b5:e4:a9:ca:4d:86:85:b7:a7:16:58:e9:
         8b:63:70:59:48:ec:04:b7:50:dc:07:39:87:6a:dd:ef:82:8d:
         31:ee:6c:f8:2c:71:98:59:47:57:17:5a:03:a4:c3:67:da:fc:
         34:1d:ee:98:ac:a2:7b:e1:be:21:d2:24:a9:62:14:7e:54:6f:
         a3:3c:22:12:f7:d6:d9:82:38:06:78:85:fa:a0:fd:25:16:1b:
         ca:19:07:d4:f1:3e:47:39:ec:41:35:0d:4c:95:80:74:9a:13:
         16:f4:34:35:81:04:52:d0:42:c6:21:57:43:a8:c8:26:1c:7c:
         9b:31:cb:54:25:f5:90:4c:a9:fb:2a:e8:df:52:05:d9:e7:cd:
         08:d6:68:4f:e3:49:7f:57:c3:ef:2d:8f:ff:01:30:40:10:88:
         da:d8:9a:4e:8a:c1:ab:42:aa:dd:0e:6f:07:5d:7c:6f:d1:2f:
         b9:62:77:7b:52:7e:cc:79:19:40:00:a8:36:e9:0f:45:eb:77:
         30:bc:4d:d0:85:3d:4d:74:16:7d:a8:14:ee:d7:02:4f:f9:5d:
         c0:53:8c:21:14:4d:50:94:b0:7f:41:f0:6f:ee:be:bf:66:1f:
         96:56:dd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:56:46 2026 by rpki-client