Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/4fbf2e6d-2935-36c0-8e49-fd5a8e002992.roa
File:                     4fbf2e6d-2935-36c0-8e49-fd5a8e002992.roa (raw, json)
Hash identifier:          VA31oD5eCQBVkpINkcQ0eRMkt+PrT6MnX6/S0w/Mx90=
Subject key identifier:   63:D8:61:F4:9E:5B:74:01:84:D0:4F:4B:D5:A6:B2:AD:72:AA:EE:84
Certificate issuer:       /CN=17e20fae-392b-4b22-b475-c6dff7142fa6
Certificate serial:       010D0C9F4328584E2AD4508CCB46FED9D22B1680
Authority key identifier: A1:92:8C:F9:58:DA:45:07:22:A0:BC:C9:76:E1:3D:EE:08:F7:66:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/4fbf2e6d-2935-36c0-8e49-fd5a8e002992.roa
Signing time:             Sun 14 Jun 2026 09:00:11 +0000
ROA not before:           Sun 14 Jun 2026 09:00:11 +0000
ROA not after:            Sat 12 Sep 2026 09:00:11 +0000
asID:                     715
IP address blocks:        199.120.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/17e20fae-392b-4b22-b475-c6dff7142fa6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/17e20fae-392b-4b22-b475-c6dff7142fa6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2a:d4:50:8c:cb:46:fe:d9:d2:2b:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17e20fae-392b-4b22-b475-c6dff7142fa6
        Validity
            Not Before: Jun 14 09:00:11 2026 GMT
            Not After : Sep 12 09:00:11 2026 GMT
        Subject: CN=315b8d9b-33f7-4473-8ad4-70245e8ef3f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3a:c4:d7:c1:a2:13:fe:89:fc:a0:43:f6:3c:
                    e7:7d:74:ef:d0:ba:75:ab:ae:63:11:14:68:b7:fe:
                    34:bc:9f:f1:56:63:3a:f6:79:38:cd:1e:73:eb:90:
                    db:d7:8c:a1:40:0e:c8:62:73:60:c7:16:d4:3e:c2:
                    2b:59:11:07:55:f4:c6:2a:47:94:c8:80:d4:c6:1e:
                    43:5d:74:be:a2:45:b9:77:81:45:0d:34:e8:e6:43:
                    07:5d:29:b3:42:57:bf:09:ce:29:55:c1:e5:69:52:
                    cd:34:c8:75:09:3a:09:c8:1f:e5:88:6c:17:3b:cd:
                    ce:60:20:5c:8f:4c:27:9f:43:57:65:5a:9b:c1:db:
                    b8:a0:1c:ca:99:1d:bb:8b:cb:79:50:b4:18:79:41:
                    3e:d7:fa:bb:88:8f:9b:10:34:cf:5c:f0:59:8b:9f:
                    55:c1:ae:aa:f6:5f:03:d2:28:91:a1:d1:8d:c7:41:
                    03:49:0f:c3:97:1a:9e:d0:f2:75:6f:9f:1d:ba:2d:
                    77:0d:9d:62:1e:ed:2b:c7:bb:6c:e7:0a:f7:91:79:
                    6d:5a:cb:da:32:9a:e7:48:04:34:e2:ae:d0:d0:16:
                    d0:a3:9c:0b:43:b8:35:da:3a:05:ba:f8:01:18:8d:
                    e3:42:54:2f:94:2d:d4:0e:06:ee:39:6f:9f:69:30:
                    bf:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:D8:61:F4:9E:5B:74:01:84:D0:4F:4B:D5:A6:B2:AD:72:AA:EE:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/4fbf2e6d-2935-36c0-8e49-fd5a8e002992.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/17e20fae-392b-4b22-b475-c6dff7142fa6.crl

            X509v3 Authority Key Identifier:
                keyid:A1:92:8C:F9:58:DA:45:07:22:A0:BC:C9:76:E1:3D:EE:08:F7:66:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.120.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:4b:04:5e:ca:f0:e3:a7:b8:c1:6c:c6:f4:e3:08:48:dd:1e:
         c8:96:18:db:e7:4a:92:0f:e7:13:59:d9:a8:c4:0e:89:21:a0:
         9a:19:23:a4:9b:6c:b1:af:5a:a5:46:6d:95:33:99:ee:eb:76:
         d9:72:82:68:86:6d:c4:73:5d:b0:87:0f:df:bf:a1:0d:fa:af:
         35:a7:75:b6:51:c0:21:fd:d9:c2:4d:fa:1f:0f:40:5c:fe:52:
         60:49:c2:d3:6e:65:d1:bb:dc:c1:86:d2:50:77:98:e5:8c:a2:
         1f:8f:cf:21:c2:da:73:41:59:53:4e:a1:5f:89:af:2b:46:2e:
         67:00:03:f3:37:7e:1c:af:8b:5f:a5:aa:64:be:07:36:02:c6:
         2c:5e:54:27:59:8e:5f:36:82:3d:44:da:85:89:63:d5:12:25:
         62:c1:4b:e2:8a:c4:7a:1b:9c:8e:80:89:8f:fa:ce:53:6e:09:
         e8:4c:6d:fa:cd:47:9c:10:54:c8:1e:b1:82:36:bb:26:71:8d:
         ab:35:18:b4:41:5e:66:1a:1f:49:0c:df:4e:9a:18:d1:31:98:
         ab:c6:85:dc:db:9a:0a:9b:86:07:90:a8:65:46:fb:63:6a:99:
         a5:22:1b:d4:71:bb:2d:61:6c:91:8e:db:64:13:7a:61:55:d3:
         c3:45:71:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 07:00:30 2026 by rpki-client