Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a355dac1-af69-488c-bb83-28eee5ad914b/d63f36ac-1b94-35b2-bc0a-3494746e526b.roa
File:                     d63f36ac-1b94-35b2-bc0a-3494746e526b.roa (raw, json)
Hash identifier:          KDIdHetp+xR0XyfIGb6OiNJnG4rPGS+/fLKsLmIeVX4=
Subject key identifier:   61:25:7F:DC:7C:DC:EF:9A:C7:7F:9B:10:B7:0C:46:83:03:B1:96:8D
Certificate issuer:       /CN=a355dac1-af69-488c-bb83-28eee5ad914b
Certificate serial:       010D0C9F4328584F7BB2E4FF9AE961C4D7341980
Authority key identifier: 12:CA:50:BA:81:52:1A:FE:E9:FB:4C:1A:F4:95:47:BD:8F:1F:1E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a355dac1-af69-488c-bb83-28eee5ad914b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a355dac1-af69-488c-bb83-28eee5ad914b/d63f36ac-1b94-35b2-bc0a-3494746e526b.roa
Signing time:             Tue 13 Oct 2026 01:00:14 +0000
ROA not before:           Tue 13 Oct 2026 01:00:14 +0000
ROA not after:            Mon 11 Jan 2027 02:00:14 +0000
asID:                     401518
IP address blocks:        199.47.142.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a355dac1-af69-488c-bb83-28eee5ad914b/a355dac1-af69-488c-bb83-28eee5ad914b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a355dac1-af69-488c-bb83-28eee5ad914b/a355dac1-af69-488c-bb83-28eee5ad914b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a355dac1-af69-488c-bb83-28eee5ad914b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 23 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7b:b2:e4:ff:9a:e9:61:c4:d7:34:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a355dac1-af69-488c-bb83-28eee5ad914b
        Validity
            Not Before: Oct 13 01:00:14 2026 GMT
            Not After : Jan 11 02:00:14 2027 GMT
        Subject: CN=f868f82b-0880-42ee-a536-d4cc14bbb90c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:58:e0:b6:0f:7a:af:3f:4c:c0:81:33:ee:4a:
                    8f:36:9a:03:75:0b:6a:04:d7:c2:ec:98:33:44:d2:
                    6f:0d:ae:4c:8b:bf:5f:53:b6:8f:ac:32:15:d7:4c:
                    3d:2f:c2:57:28:38:d3:d8:95:9b:5d:29:a9:1d:5c:
                    ff:1b:73:f9:da:9a:d4:33:ae:16:96:1d:41:40:66:
                    8a:5e:e6:14:96:cd:bf:78:a5:7e:66:63:a8:48:57:
                    bd:b2:6f:f2:f5:57:e2:71:31:8e:1c:b5:4e:ac:14:
                    c4:ce:51:ce:f8:06:cf:ef:59:6b:ce:76:d9:67:21:
                    e6:c2:49:27:78:d4:cf:49:74:6c:16:ef:a5:b3:bb:
                    32:b3:67:77:7a:6c:16:a1:12:06:c9:b8:d5:1f:85:
                    1f:39:ea:eb:89:53:91:6b:29:44:69:04:f8:d5:fd:
                    b1:98:1d:ad:72:b8:ae:b3:c3:f7:ae:37:7c:43:28:
                    49:87:f6:ce:23:87:69:56:e6:90:34:9a:bd:3c:a7:
                    5a:3d:af:4c:c6:36:1c:cd:fd:27:cf:07:e2:fa:27:
                    9e:81:12:8d:36:0b:54:a8:30:fc:fe:10:95:0d:26:
                    99:6f:91:bb:e3:80:b8:a1:39:24:ea:e7:02:d5:f7:
                    b4:91:83:3f:4c:60:78:69:1e:af:00:5e:ce:c4:d4:
                    af:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:25:7F:DC:7C:DC:EF:9A:C7:7F:9B:10:B7:0C:46:83:03:B1:96:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a355dac1-af69-488c-bb83-28eee5ad914b/d63f36ac-1b94-35b2-bc0a-3494746e526b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a355dac1-af69-488c-bb83-28eee5ad914b/a355dac1-af69-488c-bb83-28eee5ad914b.crl

            X509v3 Authority Key Identifier:
                keyid:12:CA:50:BA:81:52:1A:FE:E9:FB:4C:1A:F4:95:47:BD:8F:1F:1E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a355dac1-af69-488c-bb83-28eee5ad914b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.47.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:e1:72:32:91:a4:9b:e9:41:48:a1:d3:2f:cb:3d:61:1c:49:
         a7:bc:86:56:d0:7c:f9:19:98:6e:f0:c6:26:50:9b:d4:39:ea:
         cc:c6:b2:d7:4c:dc:13:a6:3e:2e:43:51:df:1a:19:4d:8b:ab:
         4c:fc:31:e1:21:37:90:72:7d:82:76:b4:e0:41:ee:0f:bd:49:
         74:e0:c1:b9:ca:f7:81:4d:df:e4:83:27:22:45:25:b1:70:15:
         ca:48:49:02:06:1d:99:4a:a0:12:66:f1:eb:dd:27:31:5c:5f:
         70:4e:2a:b0:7f:0d:ad:e3:2f:bd:47:93:ff:4c:e7:41:db:04:
         e9:17:5e:b0:c3:8e:fa:79:16:81:4b:da:d7:0b:83:66:79:3f:
         69:f2:81:49:02:f8:73:c7:a4:4b:9a:f0:65:85:18:78:a5:8e:
         67:9d:ec:99:e5:87:f9:8e:88:19:22:27:7e:01:f4:3d:46:42:
         f7:66:ac:97:21:e7:cd:15:a2:6f:24:c9:08:c0:bb:73:03:6d:
         07:04:e5:bf:7c:45:ee:1b:44:8b:ab:af:72:d8:1a:5d:f8:d1:
         75:54:e1:da:ee:89:69:b1:d9:3b:59:99:15:0f:b8:1e:e5:5b:
         02:da:c2:cb:5d:69:d0:b1:b8:2f:48:65:6a:97:1a:0a:a7:ad:
         b9:a8:4c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:28:43 2026 by rpki-client