Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/fb13ca62-fd4e-33f0-a145-521451481922.roa
File:                     fb13ca62-fd4e-33f0-a145-521451481922.roa (raw, json)
Hash identifier:          eVq6K31vHOxDZPHPgCuVtdK9spGXkPv/v5LichKZLtk=
Subject key identifier:   B0:B4:A9:84:0C:4B:06:E6:A9:E0:78:1A:2A:5E:D2:E2:07:D7:D3:E1
Certificate issuer:       /CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234
Certificate serial:       010D0C9F4328584E709F6958D737202D8552DE80
Authority key identifier: BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/fb13ca62-fd4e-33f0-a145-521451481922.roa
Signing time:             Thu 09 Jul 2026 09:00:13 +0000
ROA not before:           Thu 09 Jul 2026 09:00:13 +0000
ROA not after:            Wed 07 Oct 2026 09:00:13 +0000
asID:                     15296
IP address blocks:        199.216.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:70:9f:69:58:d7:37:20:2d:85:52:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234
        Validity
            Not Before: Jul  9 09:00:13 2026 GMT
            Not After : Oct  7 09:00:13 2026 GMT
        Subject: CN=94a296bb-df02-4c97-94ba-79a8258b07ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:65:62:b9:df:26:eb:41:71:a2:14:f5:b1:0c:
                    0a:2b:55:b9:6b:bf:8c:fb:52:be:67:06:aa:d9:9d:
                    eb:64:d4:d1:d6:8f:e7:d1:51:45:77:3d:fb:07:82:
                    36:d8:1b:fa:48:93:12:4c:05:f4:4d:79:34:c2:9b:
                    43:ce:f3:10:15:dc:24:2a:bc:91:24:fb:fe:5d:7b:
                    d7:18:42:93:6d:df:a0:4e:52:fa:10:0e:ce:b8:94:
                    47:78:fe:89:b5:f2:b4:63:d2:e6:d0:c2:91:8e:8b:
                    9a:fa:64:b0:e4:77:6b:5b:3f:f8:bb:ee:16:16:79:
                    2a:bf:ca:0f:aa:0a:bb:bd:86:19:0a:c6:ed:38:c2:
                    fc:5c:67:c2:80:13:e6:97:27:46:38:4e:26:e2:be:
                    d2:f5:da:2a:4b:6b:83:1e:c3:6e:6f:52:4c:67:c6:
                    b9:78:a9:38:4e:60:ef:88:ec:66:8e:cb:19:d4:cf:
                    fe:0f:3d:28:6e:41:a5:8f:b0:3e:01:fb:74:80:4d:
                    20:d4:90:f3:09:f7:e7:45:0a:44:4d:3a:4a:f0:61:
                    7f:fd:aa:83:95:8a:0b:26:0e:02:e1:bb:3a:ea:7d:
                    1d:59:26:e3:d1:c4:6a:6a:22:9c:16:08:f3:9b:53:
                    15:ee:1d:a8:f9:b6:0f:c9:ef:8c:83:6f:e1:80:ce:
                    78:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B4:A9:84:0C:4B:06:E6:A9:E0:78:1A:2A:5E:D2:E2:07:D7:D3:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/fb13ca62-fd4e-33f0-a145-521451481922.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl

            X509v3 Authority Key Identifier:
                keyid:BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.216.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:b5:60:a7:19:67:bd:e5:c5:20:82:de:06:54:b8:34:7e:93:
         a8:2a:a6:61:5c:2b:7d:1f:c2:48:8f:13:8f:9b:e9:f3:47:0d:
         e2:ac:df:5c:e9:00:74:2c:2d:c4:cf:98:24:81:de:a3:1b:e2:
         ef:3b:92:7f:70:63:3b:b1:e6:32:c7:16:7f:9b:9c:26:90:55:
         e7:d5:bb:33:da:49:12:52:a4:18:79:fa:e2:6d:23:5b:98:32:
         d9:05:b9:e5:30:a1:87:5f:e4:68:34:68:5b:69:46:0f:d7:50:
         2d:6e:73:68:c5:be:d4:74:46:a8:e3:53:f1:ae:1a:17:a9:d5:
         c0:86:5d:d7:d0:2a:0a:a5:85:ae:52:d2:7d:ec:43:35:11:18:
         bd:9a:08:7d:57:c7:7d:f0:65:68:4a:ce:2c:0b:73:e0:10:ed:
         a7:81:26:8d:2f:59:06:5b:18:ba:fc:1b:5e:53:7d:6b:39:c8:
         92:9c:3d:04:cb:9e:2f:aa:a6:f7:b8:5d:a5:7b:63:e0:af:ee:
         db:66:98:f2:18:c3:14:9b:ee:b5:19:53:2b:8a:4f:fe:da:d7:
         7a:cc:74:3a:f1:3f:5f:4f:4b:08:bb:b9:01:f6:e8:c5:53:06:
         13:92:b6:71:ff:d4:63:07:32:a7:8f:8b:4f:49:96:cd:c0:a9:
         d7:0c:36:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:57:43 2026 by rpki-client