Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/c2ba32a3-50d9-364a-a440-c7ae9e100f03.roa
File:                     c2ba32a3-50d9-364a-a440-c7ae9e100f03.roa (raw, json)
Hash identifier:          vj998ypS3vTxA0owlYvZvmoxzodnKqiOvseiPHAW18Q=
Subject key identifier:   CB:74:1F:DA:E2:AB:F4:8F:5E:EE:C2:D0:EE:51:BD:C8:95:43:01:A3
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584ED861EC75868BB607413E10C0
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/c2ba32a3-50d9-364a-a440-c7ae9e100f03.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     3477
IP address blocks:        199.242.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:61:ec:75:86:8b:b6:07:41:3e:10:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=e1381b3e-c53a-48d5-80c8-5464eaf95f08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:92:e2:ce:f4:13:20:e7:e1:fb:4b:5a:07:78:
                    f6:5c:65:d3:ae:c3:a5:64:24:ae:e0:ed:5b:8d:60:
                    11:ee:0d:6d:66:56:06:f6:d9:cb:fa:c3:08:86:ef:
                    a7:4a:41:6b:47:53:b7:6c:9f:79:a4:13:f1:3c:33:
                    a6:c7:40:1a:8f:c9:21:89:23:93:47:7d:02:a8:94:
                    47:7b:d7:29:32:81:9e:5e:41:a9:0e:54:cc:b3:ce:
                    bf:83:aa:26:1d:d8:8c:94:c8:6a:a7:33:1c:fb:f0:
                    11:ad:31:e6:e8:1e:95:b3:c3:99:fc:53:76:cd:32:
                    3c:f4:ec:35:b7:49:c9:92:47:c8:bf:8d:05:45:4c:
                    4c:4c:6c:77:01:9c:3f:73:ff:77:10:af:b4:8f:1c:
                    d3:9b:fd:24:a5:3c:47:07:76:43:50:06:a4:97:e3:
                    25:36:89:04:0c:72:29:25:a4:2c:58:06:a4:96:2f:
                    82:fa:94:73:72:d3:de:66:c2:97:bf:3f:1e:2e:25:
                    7a:9b:13:5a:33:e0:c0:b4:4c:1f:9c:76:0e:b4:16:
                    9f:4e:dd:17:62:45:34:ec:8a:26:af:fa:dc:10:ad:
                    b4:e0:f7:6e:2d:9e:0e:22:f0:69:45:05:20:56:20:
                    ad:87:f0:9b:7d:ef:de:10:4a:c8:71:e0:cf:e9:c6:
                    fd:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:74:1F:DA:E2:AB:F4:8F:5E:EE:C2:D0:EE:51:BD:C8:95:43:01:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/c2ba32a3-50d9-364a-a440-c7ae9e100f03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.242.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:c8:5d:7f:03:c4:bc:eb:3f:a7:4e:a5:c7:0f:bf:b6:6c:c8:
         18:30:67:56:a8:be:85:9a:5a:5f:54:24:7a:43:d7:54:d8:49:
         d6:24:e5:18:a8:de:d6:68:81:e8:70:9f:67:26:f5:47:7a:39:
         4e:47:00:7a:6b:ff:d9:24:3f:73:4c:e0:97:24:27:90:77:e0:
         2b:40:04:3d:b7:77:84:8d:32:97:b3:0d:a4:96:b2:1a:0e:17:
         32:64:70:03:d1:7c:3d:69:e5:00:93:8a:26:45:7f:45:e5:56:
         de:32:2c:6c:6e:fb:03:32:fa:d2:c6:c9:a1:e6:ad:fb:f9:36:
         88:9d:c9:ec:90:35:4f:27:96:c6:63:c4:1e:de:1c:40:d4:6b:
         80:ea:e2:7f:3e:4e:16:6f:62:74:b6:e7:df:08:d5:11:ec:a8:
         d6:b7:cd:5d:9f:4a:ee:da:6d:11:0f:1a:75:51:bc:99:23:65:
         88:e2:38:cb:49:42:1f:d3:4f:89:c7:38:b4:5c:fe:7f:98:de:
         d3:9a:ca:66:fc:9e:23:a3:e5:24:2b:40:77:23:50:e2:9a:4b:
         49:54:ff:74:b5:9a:26:61:fd:2e:74:1c:2c:4a:2f:14:65:5a:
         3c:ec:cc:cc:73:8a:51:3b:cb:9a:bb:e0:e5:cb:a1:a9:5b:68:
         71:50:2b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 23:42:54 2026 by rpki-client