Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/6c07d824-e2ca-3b76-8b60-54abdb48488a.roa
File:                     6c07d824-e2ca-3b76-8b60-54abdb48488a.roa (raw, json)
Hash identifier:          N0h7oQm4Xcm5RQofgkrylLxtpNFgXjtk4NvlvlkonXw=
Subject key identifier:   D5:7F:B4:18:E7:16:8B:A6:05:C2:38:81:FC:4A:82:BA:87:33:16:00
Certificate issuer:       /CN=42ce9d16-dc85-4007-a59d-6c18d1a42aa2
Certificate serial:       010D0C9F4328584E3B9483B15A9C4EFC29524080
Authority key identifier: B6:6F:B4:68:9E:4A:59:AD:81:FA:69:34:12:82:04:39:33:1F:58:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/6c07d824-e2ca-3b76-8b60-54abdb48488a.roa
Signing time:             Sat 20 Jun 2026 09:00:13 +0000
ROA not before:           Sat 20 Jun 2026 09:00:13 +0000
ROA not after:            Fri 18 Sep 2026 09:00:13 +0000
asID:                     28931
IP address blocks:        199.180.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3b:94:83:b1:5a:9c:4e:fc:29:52:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42ce9d16-dc85-4007-a59d-6c18d1a42aa2
        Validity
            Not Before: Jun 20 09:00:13 2026 GMT
            Not After : Sep 18 09:00:13 2026 GMT
        Subject: CN=1b7ea4ad-8068-4044-b656-20ac859b18ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:54:5b:70:8f:86:38:e0:5c:50:cb:c1:3d:3e:
                    2a:59:f3:83:68:af:f1:c5:8e:78:b1:76:2a:2d:c8:
                    f0:32:69:7a:e9:15:dc:18:ee:60:b3:8a:14:bd:f6:
                    a8:8a:ad:a9:5e:da:51:aa:c6:d4:91:8d:4e:d9:f5:
                    b6:4d:55:c4:9e:f7:ad:7e:6b:4d:27:84:20:75:48:
                    04:f5:7e:43:7e:60:7d:9c:90:c1:63:98:71:46:d4:
                    de:bc:d8:82:b1:a5:af:b7:97:8e:94:ad:35:09:53:
                    74:a0:c7:5c:b3:f0:53:e9:9f:4f:3a:0e:aa:92:cf:
                    72:cb:a0:18:c8:d9:6e:da:1e:4f:31:bf:26:9b:c6:
                    c7:0a:75:eb:d8:90:27:b2:6a:e9:10:9e:8a:17:d8:
                    da:96:23:9b:68:0b:4a:bf:2c:c2:99:7f:31:3d:a8:
                    86:ca:95:bc:ab:71:d3:1b:e3:78:6d:8b:14:34:61:
                    08:4a:7e:06:ae:0b:77:74:59:f1:fc:70:db:f4:f5:
                    c5:31:44:3b:aa:ea:73:25:f2:2e:6c:93:67:b6:d0:
                    12:1a:23:ab:00:38:ba:8a:e6:bc:b4:34:a8:4a:71:
                    88:a7:c6:aa:73:4b:71:2b:ed:82:f8:43:8a:77:aa:
                    8f:4d:c5:bd:c1:bd:ea:72:93:bf:8c:44:53:28:d6:
                    e9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:7F:B4:18:E7:16:8B:A6:05:C2:38:81:FC:4A:82:BA:87:33:16:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/6c07d824-e2ca-3b76-8b60-54abdb48488a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:6F:B4:68:9E:4A:59:AD:81:FA:69:34:12:82:04:39:33:1F:58:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.180.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:8d:83:71:46:14:68:78:1c:b2:46:86:c8:5f:c8:e1:08:be:
         eb:2a:36:70:32:b4:61:cb:31:d0:e5:5b:40:1b:b5:1a:01:c7:
         a0:0b:d7:9a:1a:62:c3:35:eb:ec:d6:81:52:7a:ee:74:94:a2:
         09:d1:dc:f3:1f:4f:c4:9b:4d:27:b4:fc:27:a0:db:3e:07:2b:
         9e:6c:df:ec:30:a0:3e:f5:d4:22:80:a0:6f:02:21:83:e1:1f:
         a4:4e:b6:63:4f:52:4f:29:f8:17:d4:4c:18:10:49:44:cb:51:
         e8:d5:35:26:3b:b1:88:c6:ba:e8:fb:db:9d:61:cb:99:5a:49:
         dd:1d:94:b4:7f:51:59:ab:b0:1b:ea:41:ad:1f:e1:f2:2c:76:
         8d:89:e3:ca:f6:ef:ac:a2:37:24:02:c1:8f:1c:b5:ee:7d:5d:
         28:02:0c:57:fe:92:31:15:d3:19:cf:83:71:9b:68:97:a5:aa:
         24:59:81:36:73:fd:65:f5:44:86:2f:bf:b0:9b:8d:a2:df:79:
         d6:43:6f:75:ea:8f:b2:00:f4:91:6e:28:3e:79:0a:14:ee:33:
         44:62:e4:5a:7a:a7:1f:8c:e2:58:34:ed:3e:0f:f6:c7:4e:a9:
         ef:7c:17:4b:d7:6e:55:8e:23:17:e3:10:41:41:0e:3a:f1:0d:
         02:1a:bd:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 21:37:32 2026 by rpki-client