Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e2b4ecca-caa0-3a55-90c7-dce1eda9a458.roa
File:                     e2b4ecca-caa0-3a55-90c7-dce1eda9a458.roa (raw, json)
Hash identifier:          Zusx+3LTw0y9Bd0c5t2SIhj3K7YmqWvNUJv7G/LLbIY=
Subject key identifier:   88:27:93:F4:4B:74:47:1A:06:6C:21:FE:EB:C3:72:1C:89:AC:1C:8E
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584EC90719D010D05F37AFC81F50
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e2b4ecca-caa0-3a55-90c7-dce1eda9a458.roa
Signing time:             Mon 10 Aug 2026 01:00:12 +0000
ROA not before:           Mon 10 Aug 2026 01:00:12 +0000
ROA not after:            Sun 08 Nov 2026 02:00:12 +0000
asID:                     3949
IP address blocks:        199.237.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c9:07:19:d0:10:d0:5f:37:af:c8:1f:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Aug 10 01:00:12 2026 GMT
            Not After : Nov  8 02:00:12 2026 GMT
        Subject: CN=ea4848cb-ab63-4031-bb6a-80603d7e8678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:be:17:be:ea:d9:82:83:ea:3e:04:e3:51:4c:
                    83:bb:fb:bc:d0:82:97:0a:66:13:53:a0:be:fe:f5:
                    e2:42:ae:e7:0b:85:20:ec:49:9d:dc:01:30:ce:02:
                    e3:e4:fd:08:70:ef:84:69:bb:b4:d1:d2:e2:01:66:
                    30:43:d2:c7:99:b8:e9:19:c8:d3:ce:a2:96:92:c5:
                    be:5c:19:88:be:06:4a:72:c7:54:91:b6:2f:1e:25:
                    64:aa:fb:dc:25:4d:32:6d:95:03:c7:12:ff:4b:e2:
                    c1:19:95:3f:05:b2:07:8f:45:e0:08:96:54:41:07:
                    93:1b:77:f7:0b:0c:76:48:49:e3:55:82:fc:30:90:
                    d0:64:a7:04:ed:a7:f0:e5:be:d7:0a:53:61:8f:45:
                    b5:ba:3b:51:41:a4:78:a5:6e:4b:47:b1:1e:a1:4e:
                    36:59:ad:f1:16:b6:06:11:0f:07:ee:37:ca:ae:3d:
                    d2:a9:34:b8:93:7e:79:aa:a7:9f:50:dc:91:75:c3:
                    3c:aa:41:fb:ad:02:c7:65:a5:8f:96:4f:e0:ea:0b:
                    94:7a:0a:86:b5:4e:37:da:e9:42:4d:8c:f6:97:ae:
                    fe:34:1c:0f:71:c3:67:91:ff:4b:28:3b:27:37:06:
                    66:25:36:0b:95:ee:bd:29:c2:76:82:e6:33:00:c3:
                    59:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:27:93:F4:4B:74:47:1A:06:6C:21:FE:EB:C3:72:1C:89:AC:1C:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e2b4ecca-caa0-3a55-90c7-dce1eda9a458.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.237.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:7f:3a:e3:0b:7e:ae:53:5c:28:6e:17:69:f5:e1:56:3c:0b:
         61:a8:30:3e:f6:ea:18:de:e4:05:2d:be:bb:ae:79:22:99:e9:
         7c:1d:82:20:d3:72:f5:05:7e:b9:0e:dd:42:fc:88:ae:9b:60:
         68:78:dc:20:c2:3f:17:47:f2:54:70:97:13:95:4a:46:12:fa:
         28:19:01:0e:44:4e:aa:9b:02:fa:6c:0f:65:a8:ac:69:78:26:
         d3:6a:0d:a6:96:a6:63:94:8c:87:0a:60:50:c8:ce:cd:08:72:
         8b:a3:41:70:7b:1d:c0:09:2d:fa:ee:ab:f3:89:9a:7f:b4:d6:
         58:0b:da:25:b8:af:18:b4:8f:c6:c8:19:ae:f5:8c:63:37:2b:
         a9:6e:f2:44:bc:b5:0a:93:89:61:5f:47:40:46:75:40:4e:64:
         28:16:0a:2b:31:3e:82:c4:35:52:55:5a:f9:bf:a5:0d:17:03:
         e2:9f:4c:5d:a3:49:5d:1d:a6:ac:c2:6d:b0:b5:69:ef:ca:0a:
         da:e1:1d:3b:a7:45:34:b3:a8:13:7d:0e:97:f1:de:33:9e:61:
         1b:f9:6b:57:a1:aa:70:64:74:6d:f8:ae:4e:57:1e:3d:a5:5d:
         09:23:d1:8b:90:3b:65:6d:28:5c:a3:13:5f:95:77:98:da:4f:
         77:39:b8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:44:34 2026 by rpki-client