Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/d0fcc039-2f32-343e-aa66-e2094066ddfc.roa
File:                     d0fcc039-2f32-343e-aa66-e2094066ddfc.roa (raw, json)
Hash identifier:          /FJ/MB7lO+O4isY+ITM+abubqWiSMs+Hh/ZrAoQIngU=
Subject key identifier:   8D:D5:40:FF:54:CA:6F:8D:33:AF:4A:61:67:B3:94:A0:87:A3:45:CC
Certificate issuer:       /CN=3104c204-288d-4f87-83c2-99a30908dea3
Certificate serial:       010D0C9F4328584ECD3725E92BDCEB070110DEA0
Authority key identifier: 76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/d0fcc039-2f32-343e-aa66-e2094066ddfc.roa
Signing time:             Tue 11 Aug 2026 13:00:11 +0000
ROA not before:           Tue 11 Aug 2026 13:00:11 +0000
ROA not after:            Mon 09 Nov 2026 14:00:11 +0000
asID:                     394353
IP address blocks:        199.9.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Sep 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cd:37:25:e9:2b:dc:eb:07:01:10:de:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3104c204-288d-4f87-83c2-99a30908dea3
        Validity
            Not Before: Aug 11 13:00:11 2026 GMT
            Not After : Nov  9 14:00:11 2026 GMT
        Subject: CN=b25fb80e-7076-4491-93ef-e3691cdaae05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ff:ac:b8:b3:9e:93:6f:37:51:35:db:66:24:
                    2c:fe:ba:7a:cb:32:64:da:17:fe:dd:ca:11:6a:dc:
                    85:bf:63:9b:0b:37:97:76:8e:21:02:c9:05:05:2f:
                    13:1c:ef:fe:97:4d:db:22:e5:89:61:16:0f:d7:f9:
                    cb:fc:e8:9e:3e:29:bb:cb:e6:8d:48:9d:f1:25:b7:
                    a7:63:c9:e8:9a:ed:97:53:c7:7d:97:48:a6:3f:16:
                    a0:3b:5a:b3:88:0a:8f:f0:ad:9a:4d:60:60:c8:74:
                    62:1c:c2:52:e3:3c:ed:9e:b9:da:cc:21:b0:7c:d6:
                    ce:6e:7d:23:e1:70:c1:04:6e:b4:82:cc:a8:07:39:
                    1b:a2:fd:62:23:68:40:60:f6:d7:c9:14:87:54:7c:
                    9a:c8:c1:ca:a0:a6:dd:7c:bb:07:24:9e:4f:f7:b9:
                    c5:27:c3:88:b0:d6:e7:fb:9b:c3:47:9d:d9:d9:22:
                    20:9c:10:db:6f:51:4d:e9:db:d9:a3:29:88:75:cd:
                    49:9a:7f:2d:46:58:98:ff:89:a8:fd:c2:62:8e:1c:
                    4b:1c:b7:15:e9:78:7a:0b:f0:7e:44:c7:b9:93:20:
                    d0:7a:d9:b7:46:e0:87:44:c7:75:43:cb:fe:90:d4:
                    99:67:9f:c6:d4:cb:6c:9e:50:2c:8f:dc:13:bb:ad:
                    06:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:D5:40:FF:54:CA:6F:8D:33:AF:4A:61:67:B3:94:A0:87:A3:45:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/d0fcc039-2f32-343e-aa66-e2094066ddfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl

            X509v3 Authority Key Identifier:
                keyid:76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.9.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:74:94:8e:e9:8e:b2:15:f5:12:aa:57:38:ef:5c:75:89:96:
         40:05:bb:1c:55:f0:03:2d:ea:57:67:0b:88:6c:68:25:99:03:
         54:0d:5b:f4:4c:9e:ba:1b:cf:66:76:18:77:69:92:0c:37:4a:
         3e:16:47:d5:2c:3e:32:72:b1:20:0d:48:13:bc:aa:39:f3:f3:
         9a:79:18:0d:b2:91:ba:f5:46:4d:c9:28:dd:3d:b5:da:d8:5c:
         71:fe:ba:21:5e:fa:f3:ab:fb:0b:a4:de:f6:5e:b9:99:0c:5c:
         ec:85:44:4a:77:81:83:8f:e5:57:bf:a4:8f:5a:55:de:70:d3:
         95:98:27:30:b6:9e:0b:c7:9b:30:4f:4c:23:9f:f0:ae:b5:66:
         a7:c4:65:c6:89:e2:83:9e:9f:07:e9:d0:21:e2:af:c6:1e:72:
         b3:0e:4d:32:6d:3a:63:ce:ee:55:fe:ad:a2:c0:ee:7d:25:5d:
         2c:5a:56:4e:4c:ff:22:43:c8:a9:f2:38:50:66:35:d4:ed:06:
         b4:38:bd:5d:24:15:c2:af:d1:ca:86:d3:78:86:de:0a:77:95:
         ad:89:25:ea:1c:b9:1b:0e:2e:24:bd:8d:e5:77:a5:f6:8c:e0:
         60:58:bd:69:40:3b:8f:3e:a3:3a:63:d8:9d:9e:63:e8:93:60:
         02:1c:ae:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 03:28:35 2026 by rpki-client