Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/9b2f5a50-2298-35cf-a9de-9e639d6f5cce.roa
File:                     9b2f5a50-2298-35cf-a9de-9e639d6f5cce.roa (raw, json)
Hash identifier:          0x3WRgQMIBx/Q7amrrOVDaxSf/0yYKFPHkRnjOBREiA=
Subject key identifier:   73:14:15:C1:2A:CF:64:44:47:AD:15:AB:61:FF:C2:C3:9B:D0:E4:F7
Certificate issuer:       /CN=9f8abfb1-5f91-4570-a775-7435d3e52012
Certificate serial:       010D0C9F4328584E6B0A151217AF18C1B6EE9200
Authority key identifier: 40:25:3A:F9:1F:A1:03:19:E2:97:8A:59:30:22:60:98:D8:BB:2D:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/9b2f5a50-2298-35cf-a9de-9e639d6f5cce.roa
Signing time:             Tue 07 Jul 2026 09:00:12 +0000
ROA not before:           Tue 07 Jul 2026 09:00:12 +0000
ROA not after:            Mon 05 Oct 2026 09:00:12 +0000
asID:                     53405
IP address blocks:        192.199.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/9f8abfb1-5f91-4570-a775-7435d3e52012.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/9f8abfb1-5f91-4570-a775-7435d3e52012.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6b:0a:15:12:17:af:18:c1:b6:ee:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f8abfb1-5f91-4570-a775-7435d3e52012
        Validity
            Not Before: Jul  7 09:00:12 2026 GMT
            Not After : Oct  5 09:00:12 2026 GMT
        Subject: CN=7fd4a88d-7fce-4102-bf89-1fb1180a8e19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e8:ca:ac:ee:29:51:35:f0:a6:74:51:a0:08:
                    cc:93:c7:ea:f2:38:e4:9a:33:2d:58:f5:0f:31:31:
                    6a:6f:8e:c2:e6:74:27:b0:63:4b:68:76:d9:07:c1:
                    59:4c:8f:06:57:19:a1:8f:78:3b:c2:a9:86:7d:2f:
                    5f:29:35:2f:53:50:e6:07:d2:41:6b:89:47:43:2e:
                    58:dc:98:11:00:16:4c:ff:58:d6:1c:fb:36:8b:c9:
                    59:83:3e:bb:c3:68:7a:20:ae:2a:d5:c5:21:be:90:
                    19:75:5a:27:23:e2:f4:8b:11:8a:95:57:b7:69:05:
                    42:9b:bb:36:90:00:c4:8f:f1:e9:fd:1d:b3:29:39:
                    38:ae:38:5b:5a:84:44:49:7c:92:35:36:52:2e:0f:
                    cb:19:66:75:54:b4:20:a4:39:de:58:3a:60:15:77:
                    ce:d6:25:a4:96:1c:c1:75:57:61:d4:95:d3:0e:f1:
                    6b:12:93:4c:52:2e:e8:b4:f2:60:a3:70:a5:cf:13:
                    ce:1c:79:e6:ab:0c:56:75:88:af:5f:ed:35:54:a0:
                    58:cc:99:45:c1:b7:82:8e:24:c5:4b:3d:bf:d4:4b:
                    cd:a2:1a:73:7a:fd:7c:5e:20:c5:f1:f0:c8:34:b3:
                    6c:43:96:28:c1:a5:b8:7b:86:2e:95:39:00:de:72:
                    75:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:14:15:C1:2A:CF:64:44:47:AD:15:AB:61:FF:C2:C3:9B:D0:E4:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/9b2f5a50-2298-35cf-a9de-9e639d6f5cce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/9f8abfb1-5f91-4570-a775-7435d3e52012.crl

            X509v3 Authority Key Identifier:
                keyid:40:25:3A:F9:1F:A1:03:19:E2:97:8A:59:30:22:60:98:D8:BB:2D:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.199.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:ee:9e:e1:c3:02:7d:81:60:e3:49:da:37:1f:85:8a:6b:84:
         31:ad:9a:2a:0d:8d:da:dd:15:20:ef:e9:28:f8:57:d5:a7:3d:
         ec:2e:42:24:3a:55:49:de:bf:a2:21:1d:3d:ae:15:97:f6:51:
         d2:ee:06:1e:74:3e:35:6b:72:9e:f3:4d:16:9b:06:9b:d8:7e:
         20:e5:67:18:88:c9:7c:ec:1a:97:78:08:ae:82:33:53:e3:f7:
         66:89:f9:28:c3:99:17:eb:37:81:12:31:9c:90:15:8a:9a:8d:
         e4:1a:87:70:94:7f:da:e2:07:e9:f8:8b:29:ba:27:75:0c:df:
         8d:88:08:37:82:d0:0b:b7:26:cf:22:6e:a6:8a:74:fb:e9:a2:
         2c:f2:ad:36:0b:5b:d1:ad:72:5a:ae:c8:b5:65:e6:15:83:40:
         52:ac:08:a7:e3:cf:8f:cf:c1:24:d2:af:02:dd:fe:dd:22:42:
         49:3e:7f:3a:9c:e4:e1:63:92:6d:8b:76:d0:dd:b4:d1:27:fd:
         1c:63:b9:17:87:77:e3:95:c1:57:30:7d:dd:50:c8:c5:d7:15:
         88:55:29:b8:d9:e1:75:94:93:9b:b5:14:2f:f0:ee:4a:3d:b7:
         86:7f:d2:c1:86:99:e1:2b:ba:65:fd:21:98:df:4b:7f:21:65:
         d7:57:29:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 20:07:00 2026 by rpki-client