Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/6a1e8861-df42-368c-8533-77252ddb9e33.roa
File:                     6a1e8861-df42-368c-8533-77252ddb9e33.roa (raw, json)
Hash identifier:          Hiv4xRgLUodc79MX2lRXaxqHdH4MvhgvYgiFzTYjJ4o=
Subject key identifier:   F1:C6:D8:89:80:70:5B:35:70:5D:C2:F6:BF:15:34:41:46:A9:3E:5D
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F4328584F90A30AC45BD0C7ED783C4280
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/6a1e8861-df42-368c-8533-77252ddb9e33.roa
Signing time:             Tue 20 Oct 2026 13:00:13 +0000
ROA not before:           Tue 20 Oct 2026 13:00:13 +0000
ROA not after:            Mon 18 Jan 2027 14:00:13 +0000
asID:                     33059
IP address blocks:        199.175.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:90:a3:0a:c4:5b:d0:c7:ed:78:3c:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: Oct 20 13:00:13 2026 GMT
            Not After : Jan 18 14:00:13 2027 GMT
        Subject: CN=35ad9b00-25fd-4087-8613-46d0112ab418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c7:cb:33:be:9e:8a:fd:2c:ef:bc:e1:17:d1:
                    96:28:be:ff:a9:39:60:60:c2:ba:4a:f6:ed:47:26:
                    c0:0a:94:7e:8a:63:92:fb:f3:72:13:e3:ce:98:e5:
                    1e:f7:38:af:40:43:ec:f6:71:cd:1c:5c:6a:d7:08:
                    72:b7:b0:ea:af:0a:31:a0:86:45:ab:68:ee:ad:b1:
                    0f:b2:64:82:67:90:a8:99:59:71:01:2b:d5:76:f5:
                    5b:6a:1a:30:e1:47:51:6b:7c:f4:cd:04:41:e3:d7:
                    17:38:8c:55:88:30:b4:ef:a2:cf:2a:dc:06:f0:1b:
                    10:5d:bb:ac:e6:73:52:e3:18:de:a8:32:dd:5a:71:
                    5e:a9:78:8d:81:57:9b:77:7f:26:ac:2d:50:70:5b:
                    b4:b8:5d:32:54:28:ef:f2:18:ab:ef:73:40:fe:1c:
                    38:ba:ba:bf:3f:68:55:a1:fa:b4:63:bc:a6:34:a9:
                    94:92:7e:dd:89:05:13:a0:38:35:9e:eb:b4:fa:c3:
                    70:5f:1a:91:e1:b0:8e:a7:df:81:99:55:2b:bd:e1:
                    7f:a8:44:e8:f5:0e:16:d1:d0:09:b0:c7:a5:28:48:
                    f8:ca:20:64:61:eb:41:1f:b3:9c:53:e5:08:78:64:
                    59:46:b7:4f:e1:b5:ac:89:d0:9c:a0:6d:b4:e5:8b:
                    ce:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:C6:D8:89:80:70:5B:35:70:5D:C2:F6:BF:15:34:41:46:A9:3E:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/6a1e8861-df42-368c-8533-77252ddb9e33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.175.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:24:e2:a0:90:1e:f4:9f:45:93:3b:0d:8d:8d:15:06:eb:34:
         2d:c9:ff:38:5e:68:c8:6b:14:9c:6d:25:a8:a7:2d:2d:21:d8:
         4d:6e:46:e3:9b:74:e3:36:e7:f8:8d:98:4f:86:1c:e4:d9:66:
         02:a5:8b:0e:3f:e1:bb:34:f0:ce:20:d2:18:4c:44:36:07:e2:
         46:5b:ae:ba:39:65:a8:eb:05:e9:d6:3f:15:1f:24:cc:dd:35:
         46:14:5f:62:cc:da:93:14:a9:94:86:c9:66:6f:50:80:87:61:
         01:9e:7b:49:d7:44:cb:29:01:d3:ce:6b:dd:ad:f5:3f:e2:79:
         8b:c5:05:3a:98:f0:9a:ef:c8:fa:e7:d5:9e:6c:de:21:3f:3f:
         2d:ab:48:8a:58:a0:ea:65:73:0d:c9:35:d0:73:43:03:0e:85:
         1b:b2:b8:f4:60:24:79:ff:fb:2a:62:83:a3:7f:6a:83:e6:2f:
         ba:3f:03:d1:42:9d:01:d5:0a:f3:8c:7e:69:6c:3b:89:da:d8:
         16:66:df:fd:f7:e3:f5:7f:9b:bd:c7:27:f1:b0:02:8f:99:b2:
         f7:db:e9:58:24:b3:5d:90:18:91:73:a6:b5:51:a9:60:30:e0:
         6c:72:16:3a:49:b9:94:1f:76:a6:35:46:82:5a:5e:83:64:60:
         fe:e6:98:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 06:28:01 2026 by rpki-client