Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/847c9b72-6e9d-338c-9075-6296dfabe62c.roa
File:                     847c9b72-6e9d-338c-9075-6296dfabe62c.roa (raw, json)
Hash identifier:          uPNRhzZiCor1g4A63a3Noto6IdDjGf37fZSgXxqdO5w=
Subject key identifier:   24:76:97:17:9F:15:FF:CD:8A:55:72:A8:FC:53:3F:FE:E3:70:D5:D5
Certificate issuer:       /CN=601de417-7cdc-45d3-8d80-7279489a39e0
Certificate serial:       010D0C9F4328584EDC9F8BE2754A0703E1738400
Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/847c9b72-6e9d-338c-9075-6296dfabe62c.roa
Signing time:             Mon 17 Aug 2026 01:27:49 +0000
ROA not before:           Mon 17 Aug 2026 01:27:49 +0000
ROA not after:            Sun 15 Nov 2026 02:27:49 +0000
asID:                     63023
IP address blocks:        172.99.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:9f:8b:e2:75:4a:07:03:e1:73:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0
        Validity
            Not Before: Aug 17 01:27:49 2026 GMT
            Not After : Nov 15 02:27:49 2026 GMT
        Subject: CN=d12233e7-1ffe-484b-8a40-8bcaf8bac951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:25:f1:48:9b:09:81:1c:72:84:c4:be:31:f9:
                    b3:1e:6d:ec:b6:65:fd:54:16:47:7b:5f:d6:5a:99:
                    43:eb:99:25:34:e8:1a:d4:d9:41:20:c9:0e:04:34:
                    52:27:11:73:2b:41:56:27:7b:f1:a8:d9:ba:6e:d0:
                    f9:b5:ef:81:56:9b:13:7c:e1:fa:49:43:35:ab:80:
                    cb:e4:2e:e1:b4:03:39:af:4b:3e:dc:26:be:35:6f:
                    0e:10:fb:5b:78:e0:8a:35:6e:a3:e2:51:be:25:93:
                    eb:70:67:17:39:85:5e:b2:d2:58:15:40:92:cf:b3:
                    75:28:f9:88:1a:cd:6c:0a:76:e9:94:5c:e1:28:35:
                    41:50:f9:4c:95:97:16:da:99:92:72:c9:fd:19:63:
                    37:11:86:43:fb:04:a0:a1:38:d7:e1:aa:4d:84:27:
                    47:75:ed:1d:90:13:ed:94:e6:df:fb:72:63:f2:8e:
                    a6:92:0a:80:b6:0e:09:d6:69:e1:9d:45:69:55:72:
                    11:4a:48:e7:9e:f0:39:1b:02:d1:c7:a8:90:52:45:
                    21:0f:19:fc:e2:5d:d7:ef:ce:53:bd:6c:24:21:71:
                    e8:a8:62:75:06:88:05:86:5b:95:2e:ee:8b:bf:02:
                    ed:3c:d8:c4:f7:8f:6a:26:ae:21:b2:74:3c:e9:fb:
                    67:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:76:97:17:9F:15:FF:CD:8A:55:72:A8:FC:53:3F:FE:E3:70:D5:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/847c9b72-6e9d-338c-9075-6296dfabe62c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.99.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:1e:c9:b2:ca:a5:e7:b3:58:23:c7:ba:6e:a5:17:da:97:97:
         cf:a6:b2:42:2f:bd:58:c7:c2:c3:df:0d:a6:a9:e0:d0:72:ab:
         f1:50:76:80:66:4e:a6:f2:38:49:fc:f3:3a:7e:18:a5:86:ff:
         31:90:89:8d:d0:ec:10:be:03:9e:1a:a6:34:bb:1e:ac:93:16:
         0b:03:28:ff:df:51:be:9a:94:d8:62:0f:8f:7b:69:2b:c3:18:
         39:aa:51:45:46:ea:b5:dd:a4:a2:c7:63:79:b7:4d:8b:89:04:
         f2:e2:79:5a:74:4c:6c:81:e3:9b:ef:15:a7:31:b3:ff:b1:22:
         00:44:fa:20:53:b6:31:17:dc:2b:64:31:35:7e:29:4d:a3:ec:
         d7:80:b7:9f:7e:0f:4b:e1:85:48:d1:c5:0b:c7:30:30:63:c3:
         39:14:76:76:ec:11:12:ab:8d:6d:3c:c2:51:49:68:c4:1c:85:
         23:9c:24:9d:68:c7:e6:30:37:19:f6:39:06:1f:7b:2a:bc:fb:
         2e:98:bc:50:ea:46:1e:fc:20:a3:1b:df:cb:75:ad:59:be:b5:
         11:4c:f0:98:28:4a:b8:d9:ac:1a:13:36:e2:26:0f:bf:85:d4:
         2c:5c:3e:59:d7:bc:46:ba:ef:70:13:4a:b4:97:58:72:1b:a4:
         0d:60:34:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 18:28:45 2026 by rpki-client