Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/bb19269d-3510-38f5-9589-0b117cf4dc1f.roa
File:                     bb19269d-3510-38f5-9589-0b117cf4dc1f.roa (raw, json)
Hash identifier:          yrz909jjAipvZFbPSuP4SrOFC2NVPY/AbnFdlOKqZGM=
Subject key identifier:   2E:FF:0C:CB:5E:54:3D:79:6B:A9:1A:C2:89:AD:1D:38:94:37:80:8F
Certificate issuer:       /CN=dc598c19-9d8e-4650-abce-c34c5146591f
Certificate serial:       010D0C9F4328584EA78739E342A6FD9712460F80
Authority key identifier: 64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/bb19269d-3510-38f5-9589-0b117cf4dc1f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     5650
IP address blocks:        172.85.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:39:e3:42:a6:fd:97:12:46:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc598c19-9d8e-4650-abce-c34c5146591f
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=8bdd3ef9-099f-43bb-8f6f-2f7d9e2908ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e6:dc:16:27:a2:49:1e:d7:7d:96:ea:0f:33:
                    db:7b:e7:10:39:ca:5f:4a:1e:97:64:42:49:19:69:
                    60:cf:c1:f9:bd:83:3e:48:17:89:b8:b6:bc:d7:32:
                    2f:32:ec:84:51:1e:1b:10:0b:85:b7:ea:55:67:8a:
                    62:6b:4b:61:fe:3c:a6:ac:23:89:fb:c4:41:80:0f:
                    db:77:af:1b:56:74:d4:30:e8:02:f8:b6:45:0b:c5:
                    fa:f7:d7:0c:89:51:a3:77:f3:0f:7b:a0:50:60:24:
                    0f:76:8a:60:5c:25:77:c7:69:32:4a:1b:b0:e7:85:
                    16:e9:bd:20:18:8e:4c:d9:21:95:f7:21:4e:e7:62:
                    ff:80:29:70:da:3b:5c:91:0c:c0:5e:c9:7b:28:7e:
                    24:0e:bf:c8:e9:72:02:a1:89:41:15:d0:f5:ff:9d:
                    91:fe:61:f4:03:e3:f6:72:ab:ca:d4:4d:57:a1:6f:
                    32:78:2e:65:4c:91:97:5b:d3:ef:f6:4e:4d:c4:ba:
                    87:99:6f:c4:29:da:3d:93:12:ca:81:db:35:20:81:
                    83:18:8a:fe:56:5a:06:e9:87:68:4a:b4:ae:56:b8:
                    32:ae:91:b9:17:54:f9:57:e4:8c:7b:b0:ac:f3:5a:
                    06:23:57:0c:e6:5e:76:51:6d:56:fe:c2:1f:be:97:
                    06:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:FF:0C:CB:5E:54:3D:79:6B:A9:1A:C2:89:AD:1D:38:94:37:80:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/bb19269d-3510-38f5-9589-0b117cf4dc1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.85.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:e4:14:62:51:3c:ea:0f:55:94:0f:c7:86:77:f0:b2:df:76:
         3d:cb:f1:bd:a9:b0:a6:22:06:22:2a:cf:27:fc:cd:a6:99:f6:
         a8:6a:f9:4d:17:56:2c:8c:e0:31:df:3c:82:49:ae:11:49:80:
         e9:51:fd:b1:b7:29:fb:ca:e0:61:80:8b:91:09:3b:51:4d:0c:
         69:5a:2c:4a:60:ac:65:90:eb:b0:63:ee:ae:4e:13:b6:06:8f:
         c0:e0:f3:52:fe:20:0d:4b:f8:fc:0f:6c:19:67:a5:3d:55:18:
         a0:d9:51:08:6d:c7:28:bb:63:c4:b8:33:38:d7:7a:a2:dd:1a:
         b9:98:93:41:45:0d:d9:b6:4d:f9:7d:38:24:48:cb:2e:69:15:
         ec:cc:e1:84:1f:2a:b4:fb:fc:1e:5b:e4:32:dc:94:e8:4d:be:
         df:d5:f4:5d:24:fd:c8:bf:1d:85:d5:05:a0:42:cc:ec:c5:bd:
         48:21:7f:8f:47:ae:39:5e:c9:38:0b:0b:b0:e7:34:66:cb:12:
         a9:aa:d3:c3:db:01:9d:34:aa:14:65:4f:0f:ef:da:aa:ad:70:
         76:f1:b1:3d:36:0c:a5:11:2a:23:e9:a8:32:9e:05:42:14:b1:
         ca:84:f2:83:b0:21:5a:0a:9c:8e:5e:ec:b7:e0:50:fd:a3:e9:
         65:41:63:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:24:12 2026 by rpki-client