Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/35f5672e-7bb9-344a-a0ac-f8c8023e9a6c.roa
File:                     35f5672e-7bb9-344a-a0ac-f8c8023e9a6c.roa (raw, json)
Hash identifier:          C50iEpud0VGlnouIXzdDyDS7Mt/sU0wGk8Hb53ohH0I=
Subject key identifier:   6C:C5:68:81:A0:A3:1D:DE:B4:0C:FD:B0:65:F8:F2:9C:46:27:F1:07
Certificate issuer:       /CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f
Certificate serial:       010D0C9F4328584ED001D3589C2873C250CC1280
Authority key identifier: F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/35f5672e-7bb9-344a-a0ac-f8c8023e9a6c.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     15830
IP address blocks:        64.112.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:d3:58:9c:28:73:c2:50:cc:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=048a49d4-923d-419f-8647-b113e0a16f9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9b:8a:b7:46:7e:97:ae:e5:ae:00:bd:e5:f7:
                    9a:d1:45:c5:90:11:1b:97:e8:04:a9:22:5f:87:de:
                    bf:08:de:49:15:9d:8c:47:33:f0:f5:2d:a5:5d:3a:
                    29:f4:c5:31:ed:ca:2e:bb:4f:22:36:98:1c:78:6c:
                    1e:64:68:2a:8b:cc:58:60:31:c2:23:a1:81:8d:d3:
                    a1:ae:38:9f:32:f9:da:76:3a:31:bd:b7:c9:11:d1:
                    0a:62:df:71:32:38:dc:75:6a:e2:43:cd:04:ba:83:
                    cf:84:53:85:0d:03:5a:78:8c:e1:fc:39:5f:11:4c:
                    8a:03:1e:01:96:5a:3d:53:ad:1b:07:8f:d9:68:15:
                    3d:cb:4d:ea:0a:af:71:b2:04:02:9e:f7:ef:00:a4:
                    48:5e:60:06:e0:34:31:0b:0f:f1:f6:fa:da:c6:89:
                    6e:a3:04:87:3c:12:47:fd:5e:b3:af:7a:ba:a2:06:
                    5c:fb:7d:37:4d:7b:f1:5a:d0:69:44:de:81:f4:29:
                    2b:ee:60:97:69:d6:67:4f:de:44:85:50:b0:41:3d:
                    57:b5:2a:0d:f2:63:ad:33:ca:ef:92:15:db:c6:99:
                    c5:5e:09:46:99:e4:39:0e:b3:c6:10:3e:aa:1d:32:
                    12:8a:28:61:b3:d9:47:eb:be:f2:37:27:bf:ef:13:
                    26:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C5:68:81:A0:A3:1D:DE:B4:0C:FD:B0:65:F8:F2:9C:46:27:F1:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/35f5672e-7bb9-344a-a0ac-f8c8023e9a6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl

            X509v3 Authority Key Identifier:
                keyid:F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:dc:8d:4c:87:a6:70:b3:58:bb:e7:62:c6:4a:ad:aa:a0:19:
         15:ae:c0:bb:b4:16:3e:31:98:ee:79:ec:5b:40:75:bc:18:c3:
         54:19:4c:16:76:87:57:24:14:91:7b:92:85:35:70:86:22:14:
         dd:e2:2c:07:00:0d:0c:c6:7b:73:c2:55:e5:85:34:ec:94:3a:
         59:17:36:24:6e:7e:f1:c8:de:f8:69:2a:af:49:ea:49:26:97:
         72:92:18:bb:92:59:d3:39:1c:ef:94:56:4b:37:b8:d3:2b:45:
         60:c0:02:c1:54:f4:d8:e8:07:dc:b7:51:12:12:ad:68:e2:89:
         ac:c8:2c:3e:67:1b:19:5a:d5:1b:e6:ef:06:0e:ec:42:7b:48:
         ff:2f:bd:b1:54:49:0e:b2:4d:8f:b8:86:6c:51:88:6f:0c:a4:
         6a:3f:c8:95:be:7a:01:bc:27:42:27:3e:f0:21:31:53:26:c5:
         ab:45:d9:af:1a:52:f6:b4:b0:07:5b:e1:4e:1e:27:48:8c:17:
         e7:0d:8b:d7:2e:8a:2f:c0:f9:d5:3f:33:fc:06:2a:c9:67:21:
         09:12:75:21:75:49:28:3d:0d:cb:17:20:58:45:45:83:b0:e1:
         34:49:f7:82:20:3c:80:6d:05:f1:32:0b:ad:2c:c4:54:d3:fb:
         fc:e0:30:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:42:40 2026 by rpki-client