Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/fbebcb6e-1b07-44f5-ab89-04e964f4e4b1/2815ec29-2f49-3216-8563-81d058c14538.roa
File:                     2815ec29-2f49-3216-8563-81d058c14538.roa (raw, json)
Hash identifier:          C3xY6Vv52gqXK95NZfia2rdGynwJWvA1IHFHh4r7AGk=
Subject key identifier:   BB:84:CA:82:DD:58:09:BF:32:1A:26:69:4C:57:19:9C:2B:03:12:54
Certificate issuer:       /CN=fbebcb6e-1b07-44f5-ab89-04e964f4e4b1
Certificate serial:       010D0C9F4328584E3CCBF86CADFC633863C36500
Authority key identifier: 49:09:48:E2:FE:38:8E:92:5F:91:12:6C:D9:36:13:C7:6E:19:33:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/fbebcb6e-1b07-44f5-ab89-04e964f4e4b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/fbebcb6e-1b07-44f5-ab89-04e964f4e4b1/2815ec29-2f49-3216-8563-81d058c14538.roa
Signing time:             Sat 20 Jun 2026 19:27:59 +0000
ROA not before:           Sat 20 Jun 2026 19:27:59 +0000
ROA not after:            Fri 18 Sep 2026 19:27:59 +0000
asID:                     14618
IP address blocks:        199.34.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/fbebcb6e-1b07-44f5-ab89-04e964f4e4b1/fbebcb6e-1b07-44f5-ab89-04e964f4e4b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/fbebcb6e-1b07-44f5-ab89-04e964f4e4b1/fbebcb6e-1b07-44f5-ab89-04e964f4e4b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/fbebcb6e-1b07-44f5-ab89-04e964f4e4b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3c:cb:f8:6c:ad:fc:63:38:63:c3:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbebcb6e-1b07-44f5-ab89-04e964f4e4b1
        Validity
            Not Before: Jun 20 19:27:59 2026 GMT
            Not After : Sep 18 19:27:59 2026 GMT
        Subject: CN=90265185-87e8-43ba-9d74-9f5e335c2c29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:09:33:76:2b:ca:7c:b9:35:db:22:5c:e9:d2:
                    37:d0:70:24:95:08:51:50:d9:5c:ef:68:02:be:70:
                    5d:68:11:bd:37:d2:a9:3e:d7:85:00:ff:8b:2e:71:
                    33:a7:72:5b:e2:db:78:d5:0a:b3:f9:bf:cd:f5:18:
                    89:52:03:89:0e:d7:f9:4c:fe:d7:12:cf:d7:bd:fd:
                    fc:c6:6c:8f:bd:88:a5:6d:38:54:48:0d:db:c6:dd:
                    c2:34:41:70:48:b6:59:66:dd:e0:e4:44:75:05:d7:
                    c9:68:8b:09:8c:5a:bf:bd:dd:0a:f7:62:b7:84:c9:
                    01:1d:17:18:a2:06:b4:e5:cf:5a:9e:05:9c:3f:f0:
                    28:07:ae:e4:f4:26:60:e7:ca:07:6d:1f:68:a3:bf:
                    8b:22:34:96:23:4a:f1:e5:21:d0:74:b6:12:1e:a6:
                    64:65:2e:43:90:0a:a1:36:f0:58:b5:4b:27:14:78:
                    a8:63:0c:58:35:09:b4:fe:26:14:1d:25:c1:d9:60:
                    0f:33:e8:04:18:b1:11:a1:63:eb:b1:e6:18:e3:90:
                    2f:26:84:97:ff:04:2c:9c:dc:da:e8:58:2a:5e:f1:
                    20:d0:14:63:ba:ab:3c:ea:d1:38:ee:69:1d:c3:58:
                    58:e8:78:a7:89:41:17:11:17:a8:fb:ca:0c:dc:0e:
                    f6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:84:CA:82:DD:58:09:BF:32:1A:26:69:4C:57:19:9C:2B:03:12:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/fbebcb6e-1b07-44f5-ab89-04e964f4e4b1/2815ec29-2f49-3216-8563-81d058c14538.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/fbebcb6e-1b07-44f5-ab89-04e964f4e4b1/fbebcb6e-1b07-44f5-ab89-04e964f4e4b1.crl

            X509v3 Authority Key Identifier:
                keyid:49:09:48:E2:FE:38:8E:92:5F:91:12:6C:D9:36:13:C7:6E:19:33:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/fbebcb6e-1b07-44f5-ab89-04e964f4e4b1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.34.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:9e:47:0e:fd:b1:6a:48:08:dc:ac:52:ee:b3:4d:9b:b8:cd:
         88:80:05:c3:9c:ff:ce:e8:85:9d:c3:d0:21:1e:11:8c:ed:7c:
         d0:e6:ad:9f:25:a0:16:a2:4b:30:4d:22:58:96:5a:b9:89:96:
         76:0d:ff:e1:09:d2:74:e4:8c:15:d4:6d:cc:e2:c1:61:d9:c8:
         78:72:85:03:fd:4e:b6:1c:42:1b:96:20:e2:c4:87:84:89:8d:
         71:66:e8:b7:e2:47:f7:bb:01:6d:9a:7b:94:db:3c:cf:81:6c:
         4a:79:e2:47:99:b7:10:87:38:e6:94:a6:02:d7:2a:89:4d:e6:
         33:1d:04:06:49:ae:c4:c9:37:50:eb:ce:4e:5c:89:f2:a7:8e:
         b0:67:7c:e7:e1:37:26:35:78:46:08:42:40:27:0b:28:c4:e2:
         bd:3d:c1:f3:14:f0:a7:c9:17:68:21:a4:41:57:a4:b4:3b:b6:
         30:1d:31:3c:b3:08:3e:1d:dd:2b:76:7f:f3:ee:08:e1:ca:7d:
         a1:7e:49:12:cd:e8:cf:1f:3d:2e:01:2e:02:09:43:c5:22:86:
         ac:ab:2f:8e:0b:60:c2:12:d2:0f:26:e6:5f:77:5a:90:75:ac:
         90:3f:07:aa:49:bf:c3:14:4b:a6:2f:b8:36:b8:c3:5b:54:52:
         2b:4a:3e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:15:46 2026 by rpki-client