Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3a897dcb-8200-3442-a76b-4fec09f925ce.roa
File:                     3a897dcb-8200-3442-a76b-4fec09f925ce.roa (raw, json)
Hash identifier:          Ul9D7C7eOUOggldn8l3AUZmN36I71K6Nkj6iCrELlxk=
Subject key identifier:   30:DC:AB:A1:C5:95:94:89:46:6F:4F:09:AB:46:66:DE:8E:86:5B:53
Certificate issuer:       /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial:       010D0C9F4328584EA798190B50291DD2F9A8E380
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3a897dcb-8200-3442-a76b-4fec09f925ce.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     11090
IP address blocks:        199.192.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:19:0b:50:29:1d:d2:f9:a8:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=043f53a7-3b45-4032-ac0d-8dca50c2702d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f1:7a:2f:59:9f:96:4b:27:01:88:43:81:46:
                    96:95:ea:2e:21:b4:e6:c4:53:27:9c:06:1f:13:5c:
                    e2:34:ce:f0:bb:c2:36:32:4d:c4:d1:13:4c:bd:09:
                    0b:1d:c0:9a:b5:8c:67:61:13:3f:74:4d:99:cb:ed:
                    80:fc:72:19:0a:91:82:e5:54:97:6d:31:52:0c:80:
                    96:f2:ae:08:a4:47:a6:bb:ed:e3:38:2d:86:35:b4:
                    f9:ae:8b:d9:58:13:3e:f9:e8:e7:99:22:e3:5e:6f:
                    4e:eb:45:c4:51:e4:5b:c2:52:44:72:6a:1e:0d:5f:
                    b8:9d:23:89:e6:05:b2:f8:19:52:7f:8a:fa:e0:0c:
                    89:02:8f:b3:9f:ed:ff:60:f9:aa:cd:5d:f8:42:cd:
                    81:c9:8c:68:ab:5d:aa:31:e7:49:84:37:ec:21:4b:
                    64:0c:e5:76:eb:b3:3a:3b:be:6c:bc:65:7d:39:60:
                    6d:15:6e:bd:31:71:9b:27:5b:91:93:64:6d:75:41:
                    88:3c:83:20:32:da:40:ae:d0:e7:ce:f6:7e:9a:8c:
                    60:78:e6:db:c2:9c:e6:b6:d9:f3:f9:46:b7:cc:7f:
                    d0:a1:8b:68:9b:e2:e2:86:7a:a9:20:95:ad:43:8f:
                    cc:43:23:6b:cc:7e:dc:04:8a:6f:ae:10:08:d9:7d:
                    24:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:DC:AB:A1:C5:95:94:89:46:6F:4F:09:AB:46:66:DE:8E:86:5B:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3a897dcb-8200-3442-a76b-4fec09f925ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl

            X509v3 Authority Key Identifier:
                keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.192.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:fb:3b:34:ff:76:11:c9:8a:c0:ba:7f:31:9d:7a:81:70:8f:
         6d:df:0e:f6:e7:b9:76:72:01:48:f7:55:cb:52:d2:dd:7a:e5:
         a7:80:e8:4f:c4:93:b0:e7:71:21:bc:1c:0c:38:cb:78:4d:08:
         a8:45:88:52:8d:6e:d0:1e:11:ef:ca:53:cd:4b:30:df:c5:17:
         a9:67:60:50:77:07:1a:a7:3f:f1:34:87:21:ea:1a:ae:16:52:
         5d:5a:e2:ca:c5:91:4e:36:36:64:cb:a4:ef:c7:03:85:0a:4c:
         b2:d6:84:a6:ce:0e:4d:4e:2d:32:78:cb:ea:92:2b:ce:88:c8:
         d5:29:87:2a:75:63:9c:d8:89:9c:44:f4:24:30:d7:ca:d6:4c:
         e4:02:e2:87:3d:b5:d7:47:34:4d:a6:61:7b:a0:18:a1:01:4f:
         7c:73:34:6e:58:f2:ad:df:9e:b5:0b:09:7a:c6:1f:4c:19:20:
         0e:3c:55:d6:06:11:68:24:8f:f9:4b:ff:55:44:07:66:91:2c:
         47:c2:4e:1f:40:9d:4d:2a:81:f8:3d:14:f4:8d:1e:e4:5b:c1:
         9f:e5:66:c1:4b:9f:8c:69:f8:7a:9f:f5:b8:36:39:13:c4:0a:
         30:20:48:5c:9d:cc:ed:99:af:b4:2c:9d:d9:9f:d3:f4:95:cb:
         f8:5e:ef:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 21:54:49 2026 by rpki-client