Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0fe82fc7-2614-4323-834d-49d5cfc7fe59/afed8dfa-5a6c-3cef-ae31-46f1e7029b55.roa
File:                     afed8dfa-5a6c-3cef-ae31-46f1e7029b55.roa (raw, json)
Hash identifier:          kYmZ0D4BVTjdU7RTrBboQcIHhrV4VOsxbefRyV8+uYw=
Subject key identifier:   14:DC:1F:81:CE:73:D4:BA:E6:E9:88:D9:EF:7B:68:D0:D4:84:95:FE
Certificate issuer:       /CN=0fe82fc7-2614-4323-834d-49d5cfc7fe59
Certificate serial:       010D0C9F4328584ED5FCFBEBCC545BC59D0F24C0
Authority key identifier: F5:AF:D9:7F:44:87:5F:A6:9E:80:CA:D3:34:43:B1:D2:0F:4D:13:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0fe82fc7-2614-4323-834d-49d5cfc7fe59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0fe82fc7-2614-4323-834d-49d5cfc7fe59/afed8dfa-5a6c-3cef-ae31-46f1e7029b55.roa
Signing time:             Fri 14 Aug 2026 16:25:25 +0000
ROA not before:           Fri 14 Aug 2026 16:25:25 +0000
ROA not after:            Thu 12 Nov 2026 17:25:25 +0000
asID:                     27631
IP address blocks:        199.59.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0fe82fc7-2614-4323-834d-49d5cfc7fe59/0fe82fc7-2614-4323-834d-49d5cfc7fe59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0fe82fc7-2614-4323-834d-49d5cfc7fe59/0fe82fc7-2614-4323-834d-49d5cfc7fe59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0fe82fc7-2614-4323-834d-49d5cfc7fe59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d5:fc:fb:eb:cc:54:5b:c5:9d:0f:24:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fe82fc7-2614-4323-834d-49d5cfc7fe59
        Validity
            Not Before: Aug 14 16:25:25 2026 GMT
            Not After : Nov 12 17:25:25 2026 GMT
        Subject: CN=d93e36b6-a337-4feb-b02e-ea3162055e5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:48:f7:ad:cf:7a:65:b9:83:1c:8c:9d:d7:7c:
                    7a:82:80:d1:3d:32:e6:eb:ab:4f:fd:21:d6:6a:5e:
                    bf:76:dd:ee:78:ad:ca:8d:6a:fd:69:c2:5f:c8:6c:
                    20:f4:49:af:d1:6b:32:93:1b:bc:95:d1:48:32:ea:
                    23:94:50:53:fd:1c:ae:3c:6b:61:f0:27:db:09:1c:
                    5c:13:c6:a9:f1:ec:e5:76:aa:1b:4f:c6:65:a5:97:
                    c5:d3:62:e5:bd:2f:c9:a4:89:ed:ff:9a:42:8d:68:
                    f5:01:44:5b:2e:10:81:6f:df:42:5e:e8:4c:30:0f:
                    9e:f8:21:85:56:fa:ab:f0:58:13:f0:cc:ae:16:99:
                    6a:5e:13:d3:49:2f:54:fa:48:7e:36:b0:e0:06:1e:
                    23:c5:f4:2a:cc:87:bb:83:84:91:40:d9:a0:2a:e2:
                    bb:92:69:7d:99:ff:ae:42:5c:22:5d:56:11:ae:3e:
                    b2:e7:c5:9f:7d:b0:bc:8b:9f:3e:85:66:2c:9f:66:
                    f6:39:2c:ce:88:2f:b9:3b:23:a2:55:dc:18:d1:73:
                    cb:41:9a:c7:02:cb:83:e6:55:1f:48:65:a1:28:78:
                    37:9a:7d:16:48:ed:c5:cb:24:ad:c7:46:cd:6b:f1:
                    d8:18:ec:12:1d:93:6b:61:6e:28:1b:c0:26:79:9c:
                    c0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:DC:1F:81:CE:73:D4:BA:E6:E9:88:D9:EF:7B:68:D0:D4:84:95:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0fe82fc7-2614-4323-834d-49d5cfc7fe59/afed8dfa-5a6c-3cef-ae31-46f1e7029b55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0fe82fc7-2614-4323-834d-49d5cfc7fe59/0fe82fc7-2614-4323-834d-49d5cfc7fe59.crl

            X509v3 Authority Key Identifier:
                keyid:F5:AF:D9:7F:44:87:5F:A6:9E:80:CA:D3:34:43:B1:D2:0F:4D:13:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0fe82fc7-2614-4323-834d-49d5cfc7fe59.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.59.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:c6:61:d3:45:18:32:50:79:be:fb:ab:0b:96:0b:75:0c:e1:
         c6:aa:4d:1f:be:4d:ce:ce:5b:2b:98:cd:f2:1e:b2:32:e1:0d:
         b3:c3:e7:c6:3d:74:87:7a:a7:ea:56:02:a0:f2:25:0a:19:01:
         22:68:e5:7d:1c:38:af:33:6e:5f:0b:87:38:a8:61:94:0a:ed:
         92:96:6f:62:17:5d:e4:6d:f6:26:ac:dd:47:a7:33:a4:c7:f0:
         b7:ff:38:be:6c:27:b0:c3:16:c9:3f:fc:72:61:8a:3b:2a:c6:
         a3:fb:bd:f8:ae:83:63:cb:d0:86:af:fd:d5:a0:da:32:40:1f:
         9d:03:e7:b0:dc:3c:1c:85:8f:b4:53:9b:c9:cd:4a:18:af:a2:
         4d:59:80:8c:f4:6f:4b:0a:3d:87:10:cf:20:5d:d9:09:64:28:
         ca:70:dc:6a:ee:bc:b7:ed:18:82:b6:95:03:24:ba:24:8e:f2:
         e2:c7:24:82:8f:24:7f:81:13:30:d7:d2:82:81:7b:d3:24:a0:
         b9:bc:dc:8e:c9:e1:e7:0b:90:2a:90:61:38:e6:22:eb:1c:70:
         47:ac:94:00:1f:7e:a4:85:93:fb:4b:17:c5:c1:d6:a3:5d:4f:
         90:86:2a:fb:0c:0f:3b:bf:6e:a3:2d:51:59:47:c4:de:0a:96:
         0c:fd:44:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:53:12 2026 by rpki-client