Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/6f7d065b-e8db-3eae-837a-394398429919.roa
File:                     6f7d065b-e8db-3eae-837a-394398429919.roa (raw, json)
Hash identifier:          7ilBGa905gHcUaUtBPVTocaeMqoHQ1m3xXM4EneUeN0=
Subject key identifier:   C1:0F:A3:E2:7B:8A:8A:C5:D4:83:1E:5D:DF:3F:82:C5:01:00:11:A9
Certificate issuer:       /CN=888d6cc7-0aa2-467e-9649-a453942c2d85
Certificate serial:       010D0C9F4328584F268D084B21727DEAA3C5EA00
Authority key identifier: 85:9E:C9:BC:47:3A:4F:8D:1F:C8:6B:8F:48:E7:B2:AA:BE:7A:56:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/6f7d065b-e8db-3eae-837a-394398429919.roa
Signing time:             Sat 12 Sep 2026 13:00:13 +0000
ROA not before:           Sat 12 Sep 2026 13:00:13 +0000
ROA not after:            Fri 11 Dec 2026 14:00:13 +0000
asID:                     979
IP address blocks:        199.7.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/888d6cc7-0aa2-467e-9649-a453942c2d85.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/888d6cc7-0aa2-467e-9649-a453942c2d85.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:26:8d:08:4b:21:72:7d:ea:a3:c5:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=888d6cc7-0aa2-467e-9649-a453942c2d85
        Validity
            Not Before: Sep 12 13:00:13 2026 GMT
            Not After : Dec 11 14:00:13 2026 GMT
        Subject: CN=350e06f2-ac5a-4cea-bf5c-303c7ad3f386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4f:86:e5:b5:27:43:52:cb:5c:71:a4:8f:70:
                    53:fa:0c:5a:aa:62:bf:5f:fb:f5:4a:16:96:0a:e9:
                    e4:2e:55:b5:4f:44:19:5e:d3:8d:3a:19:b8:a1:3a:
                    8a:4f:07:6b:dd:d2:70:9b:ea:fa:1a:01:d9:0b:f7:
                    e1:ac:fe:27:19:fc:1c:5c:2f:c5:1c:99:3c:25:7e:
                    d8:5b:b3:48:f2:81:7b:4b:67:48:7b:e0:c0:cd:25:
                    3d:0b:0c:25:4a:19:fd:b9:ff:c7:c8:ec:6e:bd:f3:
                    67:b6:64:98:dd:e7:fb:b2:45:16:35:02:d9:0a:71:
                    74:15:99:68:ff:2b:e0:c9:6b:6a:9e:d0:0c:b2:d4:
                    54:a7:ef:11:e2:e2:2e:b1:db:bb:b4:e7:a7:f1:5a:
                    8b:50:cf:1d:94:68:37:b2:4a:18:a4:aa:b3:82:72:
                    43:56:86:65:c3:8a:7e:7a:bf:24:0f:5c:31:bc:f3:
                    50:0b:9b:7b:80:2d:ea:ab:c7:c7:45:b6:ba:a4:1a:
                    fd:4f:9e:49:0b:35:8f:25:87:98:9b:3d:5f:91:b4:
                    f7:81:57:d8:8f:2e:db:8e:3f:c6:1b:05:02:8c:76:
                    2b:ec:fa:db:60:bc:5b:08:f4:14:aa:fb:6c:1d:b7:
                    23:8e:e3:59:43:aa:ce:20:b7:69:8e:0f:c6:8a:31:
                    e0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:0F:A3:E2:7B:8A:8A:C5:D4:83:1E:5D:DF:3F:82:C5:01:00:11:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/6f7d065b-e8db-3eae-837a-394398429919.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/888d6cc7-0aa2-467e-9649-a453942c2d85.crl

            X509v3 Authority Key Identifier:
                keyid:85:9E:C9:BC:47:3A:4F:8D:1F:C8:6B:8F:48:E7:B2:AA:BE:7A:56:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:e3:8a:a8:e3:ad:15:29:c4:43:28:92:36:e8:34:07:41:6a:
         e8:01:04:87:df:b8:7b:89:de:0b:3e:91:95:22:d8:1b:78:87:
         b4:36:c4:b8:37:1d:37:3b:9f:b2:2a:0c:11:e3:11:bc:88:95:
         c3:4f:b4:21:9e:01:70:fa:2c:53:0e:7b:18:aa:c0:87:bf:b1:
         04:70:2b:5c:ee:3d:9c:77:86:e0:65:4e:de:99:ba:86:1e:22:
         b9:fe:15:c5:cd:9b:46:55:00:25:6e:44:c5:e7:31:c4:58:b6:
         ef:31:41:b5:c1:3d:42:8e:13:14:23:86:34:5b:c3:3d:01:c2:
         81:16:d2:84:3d:88:72:11:fd:c5:61:43:24:65:87:b5:f7:4e:
         c0:61:76:72:08:40:97:cf:0d:2f:56:7a:fd:44:30:bf:db:8b:
         1d:0b:58:7c:2f:29:a2:cb:b8:2d:ac:71:c4:ec:0d:3f:ee:97:
         c8:6c:84:8d:e7:3e:08:6c:26:93:bf:68:44:41:c4:9c:6e:f0:
         07:0b:4f:67:5d:0d:1c:fe:be:aa:99:50:68:9f:f9:50:74:0e:
         eb:67:35:40:38:14:89:ae:9a:23:c0:13:57:a4:42:88:3d:52:
         fd:97:ca:12:6b:70:04:d7:cb:9e:5f:d1:9f:b5:ef:83:31:c3:
         17:e3:a8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 11:48:45 2026 by rpki-client