Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/add640e1-3218-3150-9feb-8573100723ed.roa
File:                     add640e1-3218-3150-9feb-8573100723ed.roa (raw, json)
Hash identifier:          JUoIdIZ0xDpcCV9lPBt7wZBwzl16OSxpzvYqZr9Nb5Q=
Subject key identifier:   28:87:F7:75:7C:28:55:CF:CE:DA:CD:ED:A8:3A:20:D5:48:0D:C7:CE
Certificate issuer:       /CN=17e20fae-392b-4b22-b475-c6dff7142fa6
Certificate serial:       010D0C9F4328584EB2B1AAC5F8BD507BC5EA1500
Authority key identifier: A1:92:8C:F9:58:DA:45:07:22:A0:BC:C9:76:E1:3D:EE:08:F7:66:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/add640e1-3218-3150-9feb-8573100723ed.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     715
IP address blocks:        199.120.142.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/17e20fae-392b-4b22-b475-c6dff7142fa6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/17e20fae-392b-4b22-b475-c6dff7142fa6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:aa:c5:f8:bd:50:7b:c5:ea:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17e20fae-392b-4b22-b475-c6dff7142fa6
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=f6586c50-3d4b-4ab0-b0af-ba49051ad18a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ea:bf:be:3c:99:60:98:75:00:33:d2:8a:e1:
                    ca:aa:fa:8b:9b:bb:a8:dd:a2:48:bb:af:86:65:41:
                    3b:3b:bd:71:d3:61:c5:e3:5e:0e:9f:55:7f:44:c5:
                    ea:38:c6:89:4e:9f:69:59:ea:c8:4d:b8:38:ab:e7:
                    e9:be:d5:47:b9:d0:96:e6:7e:c6:23:2e:e6:89:d7:
                    b6:70:0a:94:61:80:df:6b:d2:8c:7d:27:1e:e5:5c:
                    dc:8b:b7:8a:ad:86:ea:0f:82:11:fb:fb:1b:b9:d0:
                    cc:3f:1a:b3:c7:b3:9d:e4:a0:7a:a4:80:da:79:e7:
                    67:29:7a:8d:06:24:5f:61:9c:29:22:fd:3c:0c:93:
                    04:43:cd:ea:b1:4a:3c:cd:a6:02:d6:97:53:00:ba:
                    d9:72:f2:ba:23:a8:20:35:11:f3:ce:5e:60:56:8b:
                    b2:a5:40:9f:d3:ba:36:d1:a3:ca:16:fa:ec:60:96:
                    0a:c9:33:be:05:0f:2c:06:9b:26:d1:77:11:fa:53:
                    85:3f:a7:96:b7:96:9c:72:a3:4a:fb:41:76:cc:3c:
                    aa:1b:08:30:5e:ce:93:77:22:47:bb:c8:25:d3:14:
                    05:08:af:99:ad:91:94:67:35:5a:1a:8a:33:80:58:
                    71:e1:51:ad:a5:a9:bc:a2:cc:2e:40:39:6a:32:ee:
                    fb:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:87:F7:75:7C:28:55:CF:CE:DA:CD:ED:A8:3A:20:D5:48:0D:C7:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/add640e1-3218-3150-9feb-8573100723ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/17e20fae-392b-4b22-b475-c6dff7142fa6.crl

            X509v3 Authority Key Identifier:
                keyid:A1:92:8C:F9:58:DA:45:07:22:A0:BC:C9:76:E1:3D:EE:08:F7:66:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.120.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:08:62:ec:5d:c2:65:5f:14:2f:79:67:cc:a8:f4:53:81:5f:
         b4:87:34:97:3d:c2:43:eb:d2:61:29:0c:09:82:5d:32:3d:0d:
         71:a4:c1:7c:16:9c:98:4a:76:47:d7:dd:5d:91:ff:f3:8c:00:
         f5:96:84:fd:7b:44:e3:6e:0d:0e:05:39:cd:90:6a:6f:50:0d:
         09:b0:6a:d7:5f:3a:78:51:b4:42:11:9b:04:bf:e6:68:2f:3e:
         41:c8:9d:58:dc:d5:2a:5b:06:67:5a:33:3d:09:8a:de:79:21:
         1b:3b:96:ce:c1:e7:11:87:58:1a:cb:b8:d8:47:f5:48:fa:fb:
         dc:c8:40:34:0b:d0:16:5a:64:44:96:ff:33:38:f7:a8:e2:b2:
         7c:8b:57:72:9f:6f:ad:63:3b:0d:98:ec:47:59:8a:5a:25:f6:
         45:85:bd:38:de:d7:5b:34:d0:64:a3:0f:6d:b3:df:9e:93:65:
         c2:1c:7b:c8:3a:2d:25:6a:8d:71:2a:8a:95:4b:52:cd:b0:b9:
         10:2c:49:7b:ed:e8:34:40:19:d4:1c:a1:63:cd:3f:b7:c8:1d:
         05:6b:47:d9:df:b3:f8:19:81:85:42:4e:c3:13:d6:0d:8e:ee:
         3e:3b:7c:3e:59:23:d3:03:a4:11:f7:4a:f4:d1:22:f3:85:f2:
         6a:b0:c3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 12:01:36 2026 by rpki-client