Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/a5169fba-de21-3d20-b236-278f8f4289d1.roa
File:                     a5169fba-de21-3d20-b236-278f8f4289d1.roa (raw, json)
Hash identifier:          Egu/WlGgg1Qlyy260gz+qv5VKiQ62lm2ydIYNfv27LM=
Subject key identifier:   06:31:78:B9:9E:11:58:DE:C1:4C:82:C3:3D:2F:A7:DA:96:31:BB:75
Certificate issuer:       /CN=d65fef8f-4cd2-4778-9158-f56f30242812
Certificate serial:       010D0C9F4328584F6F230D520CF4499542F53380
Authority key identifier: 7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/a5169fba-de21-3d20-b236-278f8f4289d1.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     2734
IP address blocks:        199.197.10.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:23:0d:52:0c:f4:49:95:42:f5:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d65fef8f-4cd2-4778-9158-f56f30242812
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=d89169de-836d-4ce8-8a3b-79d797a5ab5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:74:51:b0:fc:ec:17:f3:56:7b:16:b9:55:24:
                    9b:e1:e2:50:95:fd:41:cc:90:ea:f3:28:b7:40:2f:
                    14:61:73:01:24:87:36:e7:90:65:3b:65:43:89:de:
                    a3:bd:22:72:ad:30:83:f9:d4:bb:81:d7:b2:92:60:
                    b7:9d:ce:38:ba:cc:ce:bf:f5:3d:b6:ea:72:f0:9d:
                    0a:eb:4c:0a:b3:f6:e3:01:3f:08:8d:3d:77:e0:18:
                    a5:36:58:91:27:58:d5:cf:74:4c:54:f7:61:54:c4:
                    41:57:a1:09:6d:d9:5b:54:c6:36:ce:93:e0:ca:ab:
                    d8:9f:d4:53:26:37:64:57:eb:03:19:96:eb:d0:d1:
                    04:b5:ac:30:4b:6c:2e:67:cc:91:49:64:5c:91:58:
                    8c:26:af:c7:25:3b:22:5c:7b:e6:f2:5d:bf:45:4d:
                    f9:8c:6d:25:61:be:f3:df:8f:c9:b5:ed:ce:0b:78:
                    56:b8:15:c6:72:11:96:70:f1:a7:42:52:82:82:a7:
                    87:92:ff:5e:d3:8b:76:c2:91:dd:be:4a:94:6d:5a:
                    c4:c7:27:84:90:90:4c:0d:fd:c2:b7:c9:d0:ed:1c:
                    b9:cd:48:56:46:bb:14:21:9d:52:b7:fb:99:51:d6:
                    09:5a:be:06:19:f1:e5:5a:b5:f9:8d:e9:9b:d8:0d:
                    5b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:31:78:B9:9E:11:58:DE:C1:4C:82:C3:3D:2F:A7:DA:96:31:BB:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/a5169fba-de21-3d20-b236-278f8f4289d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl

            X509v3 Authority Key Identifier:
                keyid:7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.197.10.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:c5:9c:ff:e8:01:8d:f6:37:44:6e:c1:98:ae:42:c3:b4:d8:
         ba:cc:88:1d:b3:67:6a:98:d0:6c:ae:ca:c8:af:24:b0:19:3a:
         32:f7:59:a1:cc:b4:ef:5b:99:dd:3f:0b:45:56:dc:dd:18:90:
         10:41:b1:96:d2:a7:bb:26:c4:39:63:16:47:71:c2:ca:f0:63:
         a6:21:38:06:1c:c0:3d:60:68:55:a8:8d:a7:bd:bd:b8:c2:b7:
         bb:0b:9d:1b:4f:16:3b:e7:96:ea:e7:dd:52:12:d7:38:67:9a:
         cb:68:a9:f1:ff:05:80:13:6c:e6:35:71:4c:02:2e:29:54:5c:
         df:2a:eb:7b:d0:53:6b:91:de:3d:d0:ab:3a:ea:25:93:cc:83:
         ba:a7:81:bf:33:6a:87:c0:cc:20:cf:3d:4b:0c:66:ea:3f:4f:
         9b:75:08:c1:ca:6e:92:7d:45:4e:78:30:1b:ef:61:0b:f3:af:
         6f:65:35:7f:c3:d7:b1:d3:4b:13:1d:90:d0:07:3b:94:ab:fc:
         6e:4e:74:c4:ba:85:f3:84:55:6c:52:9a:07:a7:d3:06:0c:de:
         80:73:ce:bf:f2:63:dd:e9:41:a9:cf:48:bf:30:15:d3:05:cc:
         ea:a1:46:4d:16:da:65:83:57:d7:bb:44:46:1f:1e:73:d5:cc:
         61:16:47:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 00:24:35 2026 by rpki-client