Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/edcf8ab9-9272-3f86-a632-497b04c136a0.roa
File:                     edcf8ab9-9272-3f86-a632-497b04c136a0.roa (raw, json)
Hash identifier:          0qa7kk3ldLeG+N9msDdSDWujM4OZ+w9nQ8z8pWA7O64=
Subject key identifier:   9D:F9:82:85:CB:19:9E:09:5A:B4:9F:EC:FA:7D:A8:6D:26:CC:08:57
Certificate issuer:       /CN=f6a15183-2c23-4d0a-9aaa-fee47f7a61f1
Certificate serial:       010D0C9F4328584E6C19FAE025E81236CAA75900
Authority key identifier: 5E:7D:66:AB:68:3C:74:74:46:85:34:BA:FB:50:A4:2F:7D:CF:A9:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/edcf8ab9-9272-3f86-a632-497b04c136a0.roa
Signing time:             Tue 07 Jul 2026 18:08:10 +0000
ROA not before:           Tue 07 Jul 2026 18:08:10 +0000
ROA not after:            Mon 05 Oct 2026 18:08:10 +0000
asID:                     397285
IP address blocks:        199.58.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6c:19:fa:e0:25:e8:12:36:ca:a7:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6a15183-2c23-4d0a-9aaa-fee47f7a61f1
        Validity
            Not Before: Jul  7 18:08:10 2026 GMT
            Not After : Oct  5 18:08:10 2026 GMT
        Subject: CN=d37dee5e-e2d0-474e-8be5-eadabc0935b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:eb:94:ec:26:79:df:fa:f5:b6:57:dc:ee:70:
                    53:c0:32:97:fd:cc:7c:ef:32:98:21:78:93:45:16:
                    f3:aa:f4:24:f3:0c:9c:76:31:e9:d2:72:f5:67:00:
                    d8:15:e5:8e:9a:47:8d:6b:d1:19:55:d6:14:42:df:
                    9d:fa:c1:78:79:ed:0e:95:dd:f5:5b:2a:f5:54:aa:
                    3a:3e:4a:df:4f:31:a3:94:3e:74:98:0e:98:c5:bd:
                    5c:2f:6f:d6:e3:0c:4f:33:97:80:80:ca:03:3a:5c:
                    68:06:2f:ef:fb:5c:95:e1:e6:22:1a:5f:27:24:2b:
                    ab:33:d6:4b:e5:c9:42:c1:2d:eb:a7:5d:87:e5:d8:
                    c8:08:08:91:a7:4b:a3:4c:bd:89:80:3c:50:7e:f3:
                    c9:78:c1:f1:b9:8d:a7:c8:1e:fd:bb:4a:f7:1b:c6:
                    3e:3e:ee:d0:99:3a:64:bf:f5:08:b3:ee:36:e9:7a:
                    28:a5:fe:28:44:53:cc:cb:9d:16:99:a9:64:b4:81:
                    b0:c0:53:be:36:41:10:9a:d2:56:44:77:7f:89:b4:
                    84:bd:e0:49:da:c9:7a:16:73:f2:4b:b6:29:05:50:
                    7b:ec:b3:a7:96:37:3c:af:d7:a3:0f:f9:c8:c1:ba:
                    33:c6:69:b3:46:f3:f2:0c:49:3f:40:0b:ef:3c:f2:
                    ed:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F9:82:85:CB:19:9E:09:5A:B4:9F:EC:FA:7D:A8:6D:26:CC:08:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/edcf8ab9-9272-3f86-a632-497b04c136a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.crl

            X509v3 Authority Key Identifier:
                keyid:5E:7D:66:AB:68:3C:74:74:46:85:34:BA:FB:50:A4:2F:7D:CF:A9:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.58.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:f6:98:83:96:bd:7c:5a:f7:37:65:c0:f5:84:17:b2:41:08:
         4a:76:09:2c:73:dc:a6:b3:13:67:ec:a6:4b:73:a5:8c:88:6e:
         88:54:dc:16:51:34:6e:0a:67:c8:2d:1c:a6:2c:bc:40:a2:ab:
         c3:a8:c2:23:93:dc:01:17:06:e0:99:2d:86:60:33:07:15:07:
         77:2e:41:a7:7d:96:46:82:cd:24:0c:2d:2b:53:38:59:b5:2c:
         12:27:1d:63:a2:bc:39:91:11:51:4e:5d:4a:c1:a6:71:6c:27:
         84:22:a6:28:88:e7:1f:58:da:7c:32:c4:c9:a0:d0:71:72:a2:
         25:6c:fe:cc:75:81:e7:6f:f9:9e:53:97:e1:5a:a1:42:5b:85:
         12:42:c3:74:84:a5:7f:5f:35:d8:2d:57:05:75:87:f7:97:88:
         d7:dc:fa:b5:1c:f1:04:22:57:f1:8d:31:0d:3c:4c:61:6f:ca:
         01:53:57:01:bb:fb:d3:ff:c9:ba:fa:34:b2:ef:42:e7:fc:56:
         9f:28:40:9f:f9:33:fd:4f:d0:63:1a:0b:53:d5:e5:42:5f:19:
         53:af:9d:a4:ae:f0:37:27:c3:35:e4:cb:8d:db:be:f0:92:c6:
         67:60:e3:3e:b9:82:22:03:67:1c:d4:33:4f:8c:49:32:2b:7d:
         5e:3c:82:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:17:14 2026 by rpki-client