Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/fbebcb6e-1b07-44f5-ab89-04e964f4e4b1/b532451e-1a63-34cc-9a9d-71ae2c3c9370.roa
File:                     b532451e-1a63-34cc-9a9d-71ae2c3c9370.roa (raw, json)
Hash identifier:          vax8ijcTizkrEfSyz6bLVHBzbb9bZUDqUDeD3pTgkEM=
Subject key identifier:   B0:6B:FE:04:EC:45:55:7C:4D:36:1E:D9:F5:22:C9:34:E1:F4:B3:76
Certificate issuer:       /CN=fbebcb6e-1b07-44f5-ab89-04e964f4e4b1
Certificate serial:       010D0C9F4328584EDF5C881D0787B8FC626E3C00
Authority key identifier: 49:09:48:E2:FE:38:8E:92:5F:91:12:6C:D9:36:13:C7:6E:19:33:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/fbebcb6e-1b07-44f5-ab89-04e964f4e4b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/fbebcb6e-1b07-44f5-ab89-04e964f4e4b1/b532451e-1a63-34cc-9a9d-71ae2c3c9370.roa
Signing time:             Tue 18 Aug 2026 01:00:12 +0000
ROA not before:           Tue 18 Aug 2026 01:00:12 +0000
ROA not after:            Mon 16 Nov 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        199.34.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/fbebcb6e-1b07-44f5-ab89-04e964f4e4b1/fbebcb6e-1b07-44f5-ab89-04e964f4e4b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/fbebcb6e-1b07-44f5-ab89-04e964f4e4b1/fbebcb6e-1b07-44f5-ab89-04e964f4e4b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/fbebcb6e-1b07-44f5-ab89-04e964f4e4b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:df:5c:88:1d:07:87:b8:fc:62:6e:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbebcb6e-1b07-44f5-ab89-04e964f4e4b1
        Validity
            Not Before: Aug 18 01:00:12 2026 GMT
            Not After : Nov 16 02:00:12 2026 GMT
        Subject: CN=d240ad44-1746-4ce8-a0a6-1c6b78ef4c2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a4:0b:c3:42:c3:0e:b0:44:11:ec:9e:0e:a4:
                    a8:47:27:f2:41:ef:45:b4:fc:23:09:54:07:14:74:
                    d4:e3:af:7c:d1:56:8c:f0:0e:8a:27:54:32:88:c2:
                    34:6c:36:55:b8:58:05:85:94:aa:8b:f4:1b:08:1b:
                    80:51:58:8a:cd:aa:78:37:76:72:d9:6c:19:58:e0:
                    82:06:d4:8f:e8:c1:4b:1e:e3:a4:8c:42:ef:15:ef:
                    a0:92:67:fe:87:10:21:be:7d:aa:62:9e:a2:78:7a:
                    61:89:5a:75:92:88:5e:34:dc:6a:55:68:89:7d:b0:
                    21:14:72:57:cb:be:a5:ec:fc:ce:79:c0:0d:46:ff:
                    ef:8c:ef:1b:49:92:24:9c:e4:2e:bb:ab:4d:d6:9e:
                    b9:21:b6:08:3b:dc:a1:3f:b9:20:67:dd:4d:48:68:
                    7c:17:10:3f:3a:43:2f:12:b9:43:09:ba:54:4c:2a:
                    75:2f:96:2b:83:8a:90:9c:c1:19:5a:21:8a:e1:01:
                    f6:ad:e0:14:e5:7c:c7:11:3b:a5:64:06:a9:22:2d:
                    12:5b:44:8f:6a:31:1a:ed:83:76:14:a7:cc:06:25:
                    62:7b:fc:39:6c:41:80:e2:b0:da:f0:da:e8:cc:70:
                    7e:4b:14:f7:dd:48:2e:15:a7:13:3f:37:6e:5b:c7:
                    a7:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:6B:FE:04:EC:45:55:7C:4D:36:1E:D9:F5:22:C9:34:E1:F4:B3:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/fbebcb6e-1b07-44f5-ab89-04e964f4e4b1/b532451e-1a63-34cc-9a9d-71ae2c3c9370.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/fbebcb6e-1b07-44f5-ab89-04e964f4e4b1/fbebcb6e-1b07-44f5-ab89-04e964f4e4b1.crl

            X509v3 Authority Key Identifier:
                keyid:49:09:48:E2:FE:38:8E:92:5F:91:12:6C:D9:36:13:C7:6E:19:33:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/fbebcb6e-1b07-44f5-ab89-04e964f4e4b1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.34.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:61:98:62:e4:1e:56:f9:e8:9b:b0:c2:13:f8:80:5b:40:a3:
         99:70:ac:fc:f9:7e:12:b1:a6:8d:1b:d8:19:85:43:3e:f0:b6:
         b1:7d:c4:55:20:5a:da:40:82:56:9c:87:4f:f5:0c:97:f1:6d:
         16:d0:28:d0:3c:d9:34:01:93:f2:60:03:2e:3b:b5:cf:29:62:
         53:34:38:73:5c:fb:eb:5b:da:02:1f:9e:a0:c9:10:16:38:63:
         86:9e:2d:ea:a7:c5:7b:59:ff:ef:53:b0:e5:a1:35:2f:95:20:
         ef:2c:b9:4a:60:ab:ca:59:0f:b6:6c:9a:d0:52:1f:3d:8b:63:
         a5:1c:2b:34:b4:42:4d:1e:ad:70:0d:b0:5e:b1:bd:7e:a8:8e:
         38:e8:ba:24:a4:95:3c:eb:2d:d3:79:a2:39:57:37:cb:78:83:
         a2:bc:48:97:36:f7:5b:ce:06:3a:16:f2:40:99:af:68:4b:f3:
         dd:c5:dd:da:3d:65:8e:fe:df:ab:23:f0:7b:b9:ba:2c:c6:5f:
         7a:80:60:d2:23:fa:a4:75:ff:da:b5:75:ce:b1:8f:c1:8b:74:
         d5:46:34:ad:c6:fc:8b:a8:02:0b:f6:31:0e:20:dd:47:22:71:
         4a:fe:f1:a7:15:ed:3e:08:6f:a8:87:75:39:92:4c:0a:27:c2:
         9e:fc:a0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:13:05 2026 by rpki-client