Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/c5885067-49f4-3a7f-bf2e-4f3c31808739.roa
File:                     c5885067-49f4-3a7f-bf2e-4f3c31808739.roa (raw, json)
Hash identifier:          icFoEIATlx2kZQJEW3V9IdjTvDqQUKwC5NDPmmfFmws=
Subject key identifier:   62:9F:43:A1:CC:61:DF:4A:92:5F:0B:37:59:37:AA:D3:09:FC:4E:5C
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584F6F22E4363DC3867C3844AE00
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/c5885067-49f4-3a7f-bf2e-4f3c31808739.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     25899
IP address blocks:        199.182.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:22:e4:36:3d:c3:86:7c:38:44:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=be3d2b8a-365e-4ba1-b682-f5d000da61f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:81:fb:a7:41:18:63:75:aa:ba:2b:7d:d2:bf:
                    37:a5:fe:ff:f7:e3:e8:e1:70:1d:c3:f7:cd:31:3e:
                    c1:08:38:78:a1:ac:fd:f0:43:17:78:00:d9:36:47:
                    2a:08:48:4e:5c:d1:7a:f2:fb:93:05:88:8e:4b:9f:
                    83:1d:dc:aa:6e:4f:65:b2:b6:bf:56:48:4b:57:1b:
                    dd:2c:81:82:91:25:f9:28:2f:d8:55:09:ff:98:5a:
                    8c:73:89:40:d5:fc:27:b3:58:21:cf:e6:d4:07:e5:
                    f9:1d:3a:db:b8:4a:b3:cf:d5:a5:dc:2e:c8:d3:03:
                    67:4d:d7:3b:ba:a8:66:6b:28:c6:8c:ad:4a:d3:09:
                    8d:c0:5b:1c:0e:a9:be:63:31:44:92:4f:03:7c:9f:
                    bd:5b:53:97:6b:bc:b4:ed:49:c4:e5:90:46:80:b0:
                    91:f5:56:c5:f6:97:87:56:14:b1:89:eb:b5:17:12:
                    aa:c3:91:2d:d9:6d:23:8d:b1:fe:1c:9d:40:50:35:
                    99:56:36:45:55:d4:20:46:74:39:4f:69:b4:dd:81:
                    2a:c9:40:a2:ea:6f:3d:00:1d:6c:f6:54:a3:7b:7a:
                    2c:df:1e:ff:27:d5:ef:e1:3f:4c:ab:98:0d:f5:64:
                    b6:b4:53:9f:81:10:96:5b:b9:4c:f0:45:07:8d:8e:
                    c2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:9F:43:A1:CC:61:DF:4A:92:5F:0B:37:59:37:AA:D3:09:FC:4E:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/c5885067-49f4-3a7f-bf2e-4f3c31808739.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:dc:7c:42:25:6c:6d:71:cf:6d:fa:df:5b:a9:6c:b1:06:82:
         52:04:39:32:91:18:b6:00:11:a4:fb:94:e0:9d:08:90:2a:61:
         6b:31:a6:bd:a1:71:f1:1a:a4:a0:29:96:8a:41:31:0b:2c:18:
         e7:fa:5b:d1:a3:a9:af:58:b8:cd:34:fe:65:4a:2b:2d:d9:15:
         17:7e:25:57:0a:18:59:f5:d5:23:a3:53:61:cf:28:13:f8:12:
         91:b7:5b:6f:f2:f8:11:6c:34:a7:b3:51:59:8e:c3:4e:34:af:
         d9:c0:dc:dc:7a:11:49:8c:8e:c8:7d:c4:da:d2:3f:41:66:7e:
         97:f5:e8:26:3a:6a:0d:d9:8d:22:a2:ce:7a:48:2b:a8:0d:40:
         3e:ee:0f:aa:30:e9:31:4a:fd:13:be:3f:1f:09:0e:5e:73:60:
         17:c7:8d:4a:71:04:5a:6e:d6:72:fa:e3:8d:7d:96:f6:32:ad:
         a1:36:94:89:e6:19:27:6f:85:63:39:46:28:02:b7:cf:6c:a6:
         17:97:aa:97:4c:9e:d6:a4:31:bd:b3:95:0f:b1:6c:4f:7a:b5:
         98:43:c9:74:ab:82:0b:83:df:8d:b3:54:b7:d8:22:8f:0c:36:
         e9:7b:7c:87:5d:11:83:f5:7a:31:e9:3e:83:6d:d5:f8:c5:d8:
         23:e7:2a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:12:35 2026 by rpki-client