Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/701f340e-c110-3b6e-aeec-2b1f3d5c626e.roa
File:                     701f340e-c110-3b6e-aeec-2b1f3d5c626e.roa (raw, json)
Hash identifier:          nXkZ/FoJXDqa4wQawaOzHhIsWTgkNdY+WxJcM8rn7Gs=
Subject key identifier:   21:A0:8D:DF:31:DE:C4:0C:7B:30:B6:D0:16:2C:75:CB:48:96:BA:C8
Certificate issuer:       /CN=ee74c799-7d4c-4df3-b711-296c34338ef5
Certificate serial:       010D0C9F4328584DFA707F6A34E411FB3A199580
Authority key identifier: 6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/701f340e-c110-3b6e-aeec-2b1f3d5c626e.roa
Signing time:             Thu 28 May 2026 01:00:10 +0000
ROA not before:           Thu 28 May 2026 01:00:10 +0000
ROA not after:            Wed 26 Aug 2026 01:00:10 +0000
asID:                     53264
IP address blocks:        199.96.80.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 31 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fa:70:7f:6a:34:e4:11:fb:3a:19:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee74c799-7d4c-4df3-b711-296c34338ef5
        Validity
            Not Before: May 28 01:00:10 2026 GMT
            Not After : Aug 26 01:00:10 2026 GMT
        Subject: CN=4a433f78-680b-442b-92a5-c0aef89d42f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8a:dc:52:30:82:e8:ca:fe:7a:39:21:15:5c:
                    3a:06:19:5f:0f:be:fb:19:6a:0f:01:86:d0:0d:4c:
                    3c:df:bd:89:50:6f:df:3c:f3:b6:5a:ee:42:6f:5e:
                    fd:6d:ed:70:dd:2f:bb:69:bb:d1:61:99:fd:a9:92:
                    0d:4b:be:39:92:0e:38:0c:b9:c2:1f:31:40:92:be:
                    ac:00:ba:78:15:39:b7:e4:e7:bb:c1:7a:18:04:77:
                    bb:43:5d:e4:e2:ad:88:87:52:f2:18:a5:22:0d:69:
                    af:ca:ea:1c:36:ef:67:cb:74:d4:fb:9c:29:21:51:
                    92:13:c3:c2:d8:fd:04:b7:fb:ba:ea:fe:76:5b:3b:
                    8d:c3:3a:a1:4e:7c:07:5c:8c:cc:5c:96:27:59:d4:
                    95:73:5b:80:96:7f:93:7c:30:6e:72:da:26:37:e8:
                    27:8d:bd:30:da:e9:66:6e:ac:5c:78:b2:12:76:dd:
                    ed:17:c6:19:63:8c:be:6d:ee:cc:14:9d:c1:e0:61:
                    0a:8f:7b:25:ce:ba:9a:b1:88:cf:8b:6a:85:c9:bc:
                    07:aa:76:ba:95:ad:54:74:b4:9e:be:1b:57:a7:d4:
                    96:ce:f1:e6:f6:5a:6a:42:3e:ef:e3:dc:50:bb:f5:
                    11:08:ee:fd:72:d1:85:6c:80:14:b9:b6:a0:77:a6:
                    8e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:A0:8D:DF:31:DE:C4:0C:7B:30:B6:D0:16:2C:75:CB:48:96:BA:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/701f340e-c110-3b6e-aeec-2b1f3d5c626e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl

            X509v3 Authority Key Identifier:
                keyid:6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.96.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:ff:d1:0b:1c:cd:5a:b6:86:62:0e:4a:e7:b5:5a:4f:47:19:
         bd:88:bd:57:be:56:6c:30:b1:fd:61:02:ab:8e:fa:e7:19:49:
         19:68:7e:99:96:32:f8:38:84:85:a3:b1:86:b1:56:f6:68:ae:
         bb:23:e9:d8:4e:71:17:dd:82:40:1e:ef:5c:06:84:13:bd:cc:
         01:9f:0f:8d:42:48:0d:17:a2:8f:4a:95:53:4b:a4:8a:78:c6:
         e8:64:d4:8d:7c:d7:f9:27:0d:d7:0d:8b:a7:50:56:4e:93:fe:
         03:cb:5c:33:33:6e:f0:36:04:4e:ec:bf:53:ba:95:d0:79:62:
         f4:dc:e6:27:0f:41:2f:54:f1:f5:82:36:ff:9c:3a:99:a8:8c:
         d2:6c:5b:4d:4d:91:f3:60:fa:cf:0d:6e:2f:ec:f4:fe:0e:c3:
         63:ec:09:36:02:8f:34:a3:03:a9:f8:d8:91:7d:ca:2c:f6:a0:
         5f:eb:50:4d:72:d7:8a:fe:51:b0:46:02:e5:eb:9e:54:84:fa:
         d3:4e:3b:fe:27:e0:87:a0:30:0f:42:70:a7:6c:48:12:7b:ad:
         45:2e:69:25:ad:df:6b:1b:76:1f:63:b5:96:7e:98:1a:15:d1:
         79:a6:3e:61:52:dd:a7:19:30:24:74:33:21:ac:ca:b7:2b:14:
         39:f2:d7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 16:25:41 2026 by rpki-client