Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/3b05dcd0-db06-36ad-ad15-8555b393b9d8.roa
File:                     3b05dcd0-db06-36ad-ad15-8555b393b9d8.roa (raw, json)
Hash identifier:          TafDR6z9szooN/m7IIMkN2x+3h5b63rsP3PifHJAs18=
Subject key identifier:   64:4E:5D:A6:A9:5D:33:11:02:94:1C:76:00:74:34:68:19:74:AD:44
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584EA8EC488062C9C0FA4028E410
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/3b05dcd0-db06-36ad-ad15-8555b393b9d8.roa
Signing time:             Wed 29 Jul 2026 13:00:12 +0000
ROA not before:           Wed 29 Jul 2026 13:00:12 +0000
ROA not after:            Tue 27 Oct 2026 13:00:12 +0000
asID:                     25961
IP address blocks:        199.91.230.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a8:ec:48:80:62:c9:c0:fa:40:28:e4:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Jul 29 13:00:12 2026 GMT
            Not After : Oct 27 13:00:12 2026 GMT
        Subject: CN=54b8ad3c-b7cb-49ab-9bc4-ce5d385a2279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:33:ad:2a:69:51:32:d4:79:e9:8f:4f:73:fc:
                    84:1b:ec:76:4c:99:cd:f0:2e:fd:3f:2d:dc:1c:2c:
                    4a:74:b2:26:5d:34:7c:3d:4d:3e:37:5f:eb:77:c5:
                    61:f4:f0:6f:55:e4:10:53:2b:fe:fc:b5:fe:28:be:
                    ae:76:86:d1:e3:83:ea:bf:66:0c:f8:1f:94:de:ab:
                    76:35:b5:06:6a:65:95:66:d2:8b:bb:70:fb:a9:7e:
                    ff:30:79:95:4a:23:aa:56:32:17:0d:9e:5b:79:08:
                    e0:f8:88:3d:37:09:c7:40:1c:b1:e5:3f:e9:9d:7e:
                    f0:70:41:98:0d:7d:95:af:bb:ce:48:3a:86:06:4b:
                    6b:b4:ed:97:29:2d:5a:dd:12:f0:82:b4:72:8b:d2:
                    a3:de:5c:6f:3b:ea:ae:be:8d:09:90:c7:ae:dd:28:
                    ac:0a:c8:34:e1:d6:15:98:b2:5c:cb:6e:c2:9a:2c:
                    7d:6e:5d:78:41:2d:0c:7b:cb:23:8f:c0:a7:a5:b9:
                    37:f4:47:d4:7c:75:5a:63:22:b9:d0:fa:b4:d5:ed:
                    48:13:1a:b0:cc:eb:c9:e4:e5:c8:6c:b3:26:d6:14:
                    a6:6c:63:98:ef:91:c7:89:c0:d2:bd:1d:1d:92:02:
                    01:6a:f1:3d:8a:6c:c1:be:44:1a:fd:ac:2f:c8:5b:
                    e7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:4E:5D:A6:A9:5D:33:11:02:94:1C:76:00:74:34:68:19:74:AD:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/3b05dcd0-db06-36ad-ad15-8555b393b9d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:fb:67:58:b7:a4:88:0e:51:46:a4:f8:c3:48:ca:5f:a4:6f:
         01:cf:81:14:21:cd:2f:93:d4:68:35:43:77:b6:3f:11:c9:3c:
         85:e3:da:a4:75:a3:1e:00:4f:00:72:93:d5:a1:3d:b6:4c:b3:
         12:58:4a:69:f4:67:06:2e:7f:72:0b:cc:7a:1d:23:b9:6b:60:
         e4:9f:cf:b0:82:38:51:84:e4:2f:c3:aa:b4:12:ef:8d:b5:77:
         dd:4e:25:99:02:17:67:ef:0d:8c:9b:ef:04:e4:5b:b0:f3:81:
         f3:0a:a4:6a:0b:2a:e6:11:26:38:a0:a8:9f:98:3c:0b:2d:5b:
         38:b3:b4:af:05:53:dd:8a:36:7b:e8:0c:10:3d:d2:6d:8c:54:
         9b:e1:99:79:6b:a9:bd:11:de:ea:1a:39:eb:50:21:bc:bf:1e:
         66:b6:ee:8a:4b:15:d3:0e:15:cc:23:53:dc:b1:eb:7c:2c:b9:
         17:21:d7:61:c4:95:1b:a4:57:6b:d5:e5:60:b6:3b:6b:f4:b1:
         a2:51:47:0e:74:ef:2f:c3:5f:9e:7e:13:c2:9f:05:ab:9a:ee:
         26:6b:cc:a3:36:7b:31:d3:2c:d5:40:db:12:8b:3e:7d:db:32:
         c0:88:b7:79:c3:cd:99:cd:f5:49:26:bf:8d:ba:75:b6:5a:ea:
         5b:53:3e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 11:23:49 2026 by rpki-client