Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c/d8ffe295-eba3-3fc4-b6e3-632bb2fd0dbf.roa
File:                     d8ffe295-eba3-3fc4-b6e3-632bb2fd0dbf.roa (raw, json)
Hash identifier:          OgVbGGO1iz9KddVzdY7NEyNc594IUYZKRXpoH3+oPfE=
Subject key identifier:   4F:2A:FC:0C:FC:B4:61:AA:58:16:CD:3A:96:B3:6F:66:92:20:BB:D3
Certificate issuer:       /CN=1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c
Certificate serial:       010D0C9F4328584E9BE51887046645E7FC9B7E80
Authority key identifier: 8D:29:3D:2E:77:CE:0D:E4:95:7E:AB:B8:73:87:1E:31:C0:32:FC:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c/d8ffe295-eba3-3fc4-b6e3-632bb2fd0dbf.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     396504
IP address blocks:        199.175.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:18:87:04:66:45:e7:fc:9b:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=46b1e79f-1254-41a2-9de1-b92fbd3d66fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a7:85:24:65:2f:11:7b:a8:55:69:82:6b:31:
                    8c:7e:3b:91:1a:41:80:97:f5:98:d8:eb:6d:4e:c6:
                    a4:e2:d6:ff:02:85:c4:42:d4:ad:e5:0f:d3:f7:89:
                    97:e6:9c:e0:f4:39:ef:f4:d8:12:bd:b0:a6:23:e1:
                    44:f5:21:a0:0e:a9:db:ad:00:32:7c:40:56:a7:9c:
                    ca:37:0e:96:ed:67:18:71:a2:87:0a:c8:86:48:bf:
                    3d:dc:23:dd:23:44:76:4d:e3:87:3d:57:5e:a8:de:
                    0f:1b:ca:81:5e:87:82:75:80:c9:2f:4a:eb:1b:4d:
                    ae:c1:07:f0:e0:4e:fa:bc:ba:9f:27:72:1b:84:2d:
                    54:3f:a2:6b:42:68:ec:15:80:b8:2d:08:1c:55:5b:
                    da:02:a9:7f:cb:6e:c9:f8:31:a3:f2:8d:0b:94:ce:
                    5f:fd:27:62:23:3f:79:1a:a9:18:7c:06:a0:83:44:
                    fb:6a:06:36:0b:ba:2a:ff:f8:3b:b8:3f:61:e9:b1:
                    a2:45:9b:6e:7c:7c:f9:61:45:87:4c:92:1d:79:bf:
                    9f:d4:3e:a4:37:d1:db:e1:be:db:0b:99:31:a5:7a:
                    a6:e1:7f:cc:40:0b:6f:f6:b8:95:1c:8e:e5:98:8e:
                    b5:f0:0e:e7:c9:27:42:c9:27:84:a4:0d:bf:81:fa:
                    2c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:2A:FC:0C:FC:B4:61:AA:58:16:CD:3A:96:B3:6F:66:92:20:BB:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c/d8ffe295-eba3-3fc4-b6e3-632bb2fd0dbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c.crl

            X509v3 Authority Key Identifier:
                keyid:8D:29:3D:2E:77:CE:0D:E4:95:7E:AB:B8:73:87:1E:31:C0:32:FC:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.175.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:82:ed:15:29:98:6b:84:55:9b:b5:6f:be:a7:2a:e6:90:f2:
         e5:cc:c5:84:27:15:72:eb:70:95:14:78:2b:9e:6d:f6:8a:52:
         b1:5a:0c:ef:92:08:11:0e:30:83:a4:c7:c1:90:38:34:36:9c:
         b5:20:24:3d:f8:08:e3:77:e9:26:3c:07:ca:15:20:ea:77:3a:
         ca:06:d3:33:16:cc:79:6b:cc:42:e3:49:3f:9b:d1:68:f5:41:
         7f:a2:9b:5c:c9:e6:14:55:36:ae:83:1b:85:fe:a6:77:e7:09:
         06:dd:7e:62:84:56:ac:47:6d:8c:70:96:95:64:5d:de:b9:e7:
         80:ee:58:d3:4e:5e:66:3f:28:3b:32:14:b2:61:ae:18:48:c3:
         18:c8:22:8e:e7:40:a4:c7:a0:24:91:22:16:b0:17:2a:1f:89:
         af:67:29:9d:57:10:1e:17:4b:26:0c:1a:41:75:cc:20:a7:da:
         bd:b1:bb:3b:d9:17:b4:34:5d:3b:c1:0a:16:a7:3e:a3:87:e0:
         a2:b3:2b:f9:16:48:1b:da:a8:e1:22:9f:9a:75:37:11:fe:e4:
         71:46:4c:57:c0:47:28:0f:cd:f7:fa:7f:99:3a:0f:b7:0d:e8:
         ad:92:42:df:31:a8:ab:99:de:71:66:06:c5:86:68:b7:cd:2f:
         cf:38:39:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 10:49:54 2026 by rpki-client