Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/6fa89e34-5c78-3bb1-805e-d5b7191b2199.roa
File:                     6fa89e34-5c78-3bb1-805e-d5b7191b2199.roa (raw, json)
Hash identifier:          MuteFQDKtYCitc6OnRL3NhSPMaypK24NbzfUgMajvro=
Subject key identifier:   63:46:11:51:C9:47:ED:7E:8D:08:0C:69:AB:73:32:85:35:08:02:79
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584E07009A596605769FC284CE80
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/6fa89e34-5c78-3bb1-805e-d5b7191b2199.roa
Signing time:             Mon 01 Jun 2026 13:00:10 +0000
ROA not before:           Mon 01 Jun 2026 13:00:10 +0000
ROA not after:            Sun 30 Aug 2026 13:00:10 +0000
asID:                     25961
IP address blocks:        199.91.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 02 Jun 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:00:9a:59:66:05:76:9f:c2:84:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Jun  1 13:00:10 2026 GMT
            Not After : Aug 30 13:00:10 2026 GMT
        Subject: CN=3b4a7f36-b9de-4af2-b338-656a6cb0d44b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:47:76:9e:f4:9d:81:af:94:cd:5b:c5:70:ed:
                    78:9a:e2:66:4d:42:a9:0a:9d:0b:a0:3d:b3:20:41:
                    d7:54:1a:a0:15:a5:e0:73:67:a6:78:77:4e:23:6c:
                    9d:ad:81:ea:a0:43:3b:ed:35:e2:b7:90:4d:45:d3:
                    38:6d:ff:1b:04:93:37:de:d9:e0:ee:30:75:03:68:
                    b7:91:79:ae:ac:39:6b:96:66:38:b8:ce:26:57:e5:
                    ed:33:4c:eb:7d:39:48:5e:9a:e2:c2:da:4f:2b:49:
                    a7:b0:4a:c6:a5:d8:e2:9a:47:51:ba:9c:dd:ea:84:
                    cb:c3:f2:f3:a9:bb:ef:70:84:a5:41:a7:64:4f:9a:
                    ba:9a:64:a5:3a:65:f6:b3:56:b1:2e:ce:01:46:7a:
                    4a:57:18:f2:94:da:2b:a2:9c:93:fa:dd:cb:38:6f:
                    45:96:fd:22:47:7d:49:b9:01:f6:f7:1d:af:20:57:
                    c7:7d:1f:59:aa:ce:46:05:a3:67:80:04:2f:b6:a5:
                    98:ed:b1:76:53:8a:ae:fa:28:ef:49:4c:11:35:b5:
                    c9:ed:b3:46:1d:f4:33:59:cf:e7:40:f6:34:1c:e7:
                    83:31:cd:87:d2:06:d1:56:a8:71:03:aa:49:7a:ce:
                    9d:92:05:7c:5c:5b:d2:87:d8:1c:b0:e2:6e:63:70:
                    7a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:46:11:51:C9:47:ED:7E:8D:08:0C:69:AB:73:32:85:35:08:02:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/6fa89e34-5c78-3bb1-805e-d5b7191b2199.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:34:5c:d2:7e:e7:c7:98:ac:80:94:02:30:e1:3f:c1:e1:e2:
         b2:9b:b8:12:2a:7e:5b:c4:4d:04:3e:c9:ab:aa:28:ef:4e:30:
         39:35:ef:a5:2e:8a:fc:4a:78:f9:0d:8d:29:0c:6e:87:64:99:
         bb:12:f6:0e:c5:ae:d4:f8:f9:48:c3:b5:3e:fd:f5:70:98:89:
         df:bd:bc:d5:a9:81:e8:7d:07:f9:be:93:65:48:79:64:c4:f7:
         48:fd:b6:3c:a1:55:26:ef:05:63:36:be:2d:e2:5d:ff:b2:a7:
         cd:d9:cc:f6:1e:48:13:c4:ab:f3:93:7c:27:ff:9c:19:fb:aa:
         10:e8:9a:ca:27:e8:43:a4:12:93:60:78:10:a3:26:a0:cd:a2:
         56:e8:f4:1e:6f:30:68:a3:83:8a:7b:78:51:2b:ef:c3:cc:6f:
         4f:56:a9:fa:37:54:f6:04:65:39:3d:2c:d3:98:c9:c2:41:98:
         28:ef:9d:10:66:58:ab:a3:1e:10:c8:36:cb:b1:bd:55:42:14:
         f0:7d:42:34:4a:28:df:d2:1b:0d:2d:88:1c:55:fb:3f:d4:4d:
         07:f6:33:aa:c2:9c:eb:c6:e7:0b:33:2e:2a:26:b5:3c:6d:d5:
         75:3f:7a:39:85:55:90:94:07:6f:74:cd:71:df:9f:d9:80:8c:
         bd:59:97:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 1 22:57:22 2026 by rpki-client