Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/70b6a415-96fc-3c29-8eb6-87b641b70325.roa
File:                     70b6a415-96fc-3c29-8eb6-87b641b70325.roa (raw, json)
Hash identifier:          UrUgapN29aMz2zAm0/mJe5VbzUkE6gmIOsY3arlpxBo=
Subject key identifier:   84:6A:DF:B5:A4:EF:95:F4:04:9F:A5:2E:E8:D9:37:4D:92:2A:4B:84
Certificate issuer:       /CN=ee74c799-7d4c-4df3-b711-296c34338ef5
Certificate serial:       010D0C9F4328584DFA707F9732BD2378E9F00280
Authority key identifier: 6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/70b6a415-96fc-3c29-8eb6-87b641b70325.roa
Signing time:             Thu 28 May 2026 01:00:10 +0000
ROA not before:           Thu 28 May 2026 01:00:10 +0000
ROA not after:            Wed 26 Aug 2026 01:00:10 +0000
asID:                     845
IP address blocks:        199.96.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fa:70:7f:97:32:bd:23:78:e9:f0:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee74c799-7d4c-4df3-b711-296c34338ef5
        Validity
            Not Before: May 28 01:00:10 2026 GMT
            Not After : Aug 26 01:00:10 2026 GMT
        Subject: CN=1df02032-8b1c-4f6d-8331-956c4587ab09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8d:a5:01:bd:67:d3:46:08:5a:ce:28:ce:82:
                    6f:3a:01:e1:2f:72:24:53:45:24:4f:cb:a0:66:35:
                    2d:78:0c:18:cc:41:8c:db:61:21:f2:bc:c4:3f:89:
                    6a:c0:82:7c:53:da:21:f9:e1:c9:e4:0f:00:79:31:
                    a9:43:8f:0f:db:ad:29:42:5d:29:d0:ae:50:28:2a:
                    d4:c4:70:e9:4e:e0:d4:b1:5f:b3:c8:b0:3e:53:e3:
                    9a:18:01:f6:cc:d4:8d:01:78:64:4f:fa:36:48:d3:
                    d2:c9:96:76:5b:e6:b8:f9:6f:50:c4:f6:19:59:4d:
                    ea:9f:99:e8:f9:53:e9:81:0c:f5:05:a6:6c:49:31:
                    2c:03:ba:a8:86:86:f7:8f:9b:fb:45:7a:a0:72:97:
                    8d:a6:09:0a:f8:e3:93:4d:b6:b0:83:39:b3:6f:a8:
                    f7:29:0f:bb:fd:8c:aa:50:63:22:b2:c3:43:61:b7:
                    63:94:67:d5:1f:c1:70:82:0e:47:78:48:4b:cf:9a:
                    e0:23:c3:5c:fe:70:0c:46:c0:87:25:d4:32:7a:5f:
                    66:15:7c:37:1a:e6:8f:cf:81:98:7a:a0:86:12:bf:
                    aa:3c:ea:4b:d3:e0:e5:ab:26:7e:cb:b0:19:0c:23:
                    22:6e:e2:b1:93:8f:a2:6f:95:01:d9:45:40:63:11:
                    61:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:6A:DF:B5:A4:EF:95:F4:04:9F:A5:2E:E8:D9:37:4D:92:2A:4B:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/70b6a415-96fc-3c29-8eb6-87b641b70325.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl

            X509v3 Authority Key Identifier:
                keyid:6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.96.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:39:35:00:f0:93:ad:92:79:51:11:b9:42:cd:0e:e2:4f:66:
         6d:1d:7a:8d:97:91:38:39:96:0c:30:ef:b9:f4:20:39:27:21:
         4b:1d:f6:01:65:96:36:49:b3:50:7a:ec:52:a6:c3:c5:71:8a:
         3a:fc:a8:f5:71:4d:14:59:f1:6f:4e:cf:d0:a6:9a:25:21:2a:
         ee:23:be:11:ec:04:a3:7b:bb:60:6e:a1:e2:93:6f:d6:cb:12:
         2a:48:97:65:69:52:c3:22:61:78:f6:b1:04:3e:58:5a:bc:c3:
         2e:c6:90:73:9e:4e:3f:7b:de:bc:d4:84:e3:ac:5d:82:ca:07:
         d6:c2:7d:b4:c3:b1:73:c2:fd:81:e5:1f:0f:53:b3:12:be:2d:
         a6:e7:f9:6b:22:39:ee:8e:12:b0:e3:00:ef:a0:91:0a:4b:7d:
         03:c0:92:96:fb:48:e2:30:32:cc:24:ea:1d:46:30:17:fa:38:
         f2:2c:05:0c:be:f9:ee:27:cf:68:91:c2:0f:69:ed:4b:b9:da:
         04:90:85:e7:90:af:9e:7a:7a:eb:58:e9:0a:1a:da:f4:58:dc:
         a8:21:5b:b6:35:56:e2:47:8a:49:44:a0:51:c1:b8:6c:78:7f:
         2d:6a:74:71:69:fc:52:1f:fe:2d:0a:a2:b7:4a:ad:44:32:b6:
         44:45:1e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:33:00 2026 by rpki-client