Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f99dca82-98c3-3995-9ce3-efa6a3a64c30.roa
File:                     f99dca82-98c3-3995-9ce3-efa6a3a64c30.roa (raw, json)
Hash identifier:          IQfcu+fIFvfBhISumQpL7MdhbdelOE44oPgLj6K5wE8=
Subject key identifier:   B7:9D:64:92:22:D7:BC:77:FD:4F:2F:89:D6:E5:3E:FA:98:4A:E7:65
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584EB76BE80516693EFC741A1080
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f99dca82-98c3-3995-9ce3-efa6a3a64c30.roa
Signing time:             Mon 03 Aug 2026 17:38:51 +0000
ROA not before:           Mon 03 Aug 2026 17:38:51 +0000
ROA not after:            Sun 01 Nov 2026 18:38:51 +0000
asID:                     13700
IP address blocks:        192.204.26.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b7:6b:e8:05:16:69:3e:fc:74:1a:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Aug  3 17:38:51 2026 GMT
            Not After : Nov  1 18:38:51 2026 GMT
        Subject: CN=cb688a38-0a2b-40db-9eda-cf6c1ed40c81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7c:3b:79:46:02:16:b6:40:bc:8c:59:ae:46:
                    ab:36:4d:92:97:22:60:b7:63:08:fc:e7:04:9b:13:
                    3b:ed:15:07:dd:74:64:15:1c:87:ad:a8:c9:b4:22:
                    9f:75:7a:2b:a5:88:89:78:74:c9:fa:95:27:47:6f:
                    c8:0b:cf:ac:79:7a:23:71:73:bd:05:f6:3c:6b:1a:
                    75:62:46:84:93:94:4b:8d:48:ae:4b:00:d3:68:0a:
                    be:fe:30:9f:f1:2e:e1:45:31:79:9e:ac:87:ad:c5:
                    69:b1:a3:11:11:04:1e:d9:a8:0e:82:33:55:0a:c3:
                    86:9e:4d:d2:0f:ee:59:d1:20:3d:34:a4:90:13:b4:
                    2d:d8:c3:3c:37:dc:55:1c:a5:68:55:76:e5:da:86:
                    88:53:99:8e:ae:df:c8:01:63:66:f8:bc:7a:58:80:
                    92:f0:4f:71:3a:d2:a3:ae:7d:c2:49:bf:1a:11:57:
                    94:30:7d:8b:7f:37:ca:9d:a4:56:bf:ab:a6:ce:00:
                    87:26:24:8c:85:af:71:89:a1:79:39:04:ce:08:3f:
                    c9:15:91:f5:2f:49:6c:bc:31:1c:f6:3b:f6:bf:97:
                    28:74:5d:d4:92:47:64:af:77:24:66:dc:46:f6:fc:
                    29:7f:26:84:18:aa:1b:22:d0:e3:a0:a0:57:31:c9:
                    7b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:9D:64:92:22:D7:BC:77:FD:4F:2F:89:D6:E5:3E:FA:98:4A:E7:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f99dca82-98c3-3995-9ce3-efa6a3a64c30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.204.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:d9:2d:c3:18:db:2c:41:ca:be:9b:c4:f7:1a:46:e5:87:8c:
         a0:f3:de:0d:8a:ff:3f:df:0e:3f:4b:92:5b:bc:73:fc:f6:35:
         fb:f8:c4:2c:7d:86:4a:4a:ec:f5:4e:ba:85:6a:f5:b2:bd:8b:
         3f:ba:8d:20:3b:d8:f3:91:bf:00:c5:3e:ca:87:16:b7:89:db:
         42:23:1d:b2:7f:6d:65:c0:35:91:0f:4b:8d:e5:f5:69:96:04:
         0c:1d:d4:c1:ae:93:8a:5f:32:87:2d:d1:c7:52:74:34:3b:3e:
         76:87:43:18:20:28:43:0d:19:6c:e3:ae:c3:eb:0c:a2:c6:53:
         97:33:34:f2:25:0c:8d:8b:5c:a1:f1:22:1b:d3:80:00:92:6c:
         ee:6a:6a:31:5f:d1:30:28:b3:43:e2:87:53:f7:dd:75:38:04:
         74:d5:26:6f:50:94:fb:ee:2b:a3:4e:b1:22:68:12:fe:df:ea:
         b7:06:6f:b4:9a:b3:63:9a:39:b8:a3:a9:a0:79:dc:fc:e8:1e:
         4b:66:76:1e:4a:39:93:60:82:5c:19:8e:f2:31:d9:fd:4d:90:
         31:f9:30:20:24:0f:fa:e1:de:da:55:9d:ee:af:77:37:38:3e:
         e2:ae:4f:92:cb:66:2e:2d:a9:f6:5c:e9:8b:a5:86:3e:74:a0:
         5f:32:07:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 04:28:43 2026 by rpki-client