Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/417fe392-3b3f-437a-9ef7-fec32d4cfd8d/9b3eb51b-2dd5-369b-94bc-97a5cb89427a.roa
File:                     9b3eb51b-2dd5-369b-94bc-97a5cb89427a.roa (raw, json)
Hash identifier:          wR3nmUcFN+qoiw+VUnI7fJFsfgUg3MKzsIyeTtF6WBM=
Subject key identifier:   40:93:64:B9:19:97:BA:C5:28:2E:36:08:F2:14:0E:00:16:04:A5:C7
Certificate issuer:       /CN=417fe392-3b3f-437a-9ef7-fec32d4cfd8d
Certificate serial:       010D0C9F4328584EE139456C4493D168C7D241A0
Authority key identifier: AC:74:CA:EF:7E:6A:D9:35:5B:AB:93:3C:CF:83:18:9F:3B:A9:BE:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/417fe392-3b3f-437a-9ef7-fec32d4cfd8d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/417fe392-3b3f-437a-9ef7-fec32d4cfd8d/9b3eb51b-2dd5-369b-94bc-97a5cb89427a.roa
Signing time:             Tue 18 Aug 2026 17:00:47 +0000
ROA not before:           Tue 18 Aug 2026 17:00:47 +0000
ROA not after:            Mon 16 Nov 2026 18:00:47 +0000
asID:                     13737
IP address blocks:        199.79.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/417fe392-3b3f-437a-9ef7-fec32d4cfd8d/417fe392-3b3f-437a-9ef7-fec32d4cfd8d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/417fe392-3b3f-437a-9ef7-fec32d4cfd8d/417fe392-3b3f-437a-9ef7-fec32d4cfd8d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/417fe392-3b3f-437a-9ef7-fec32d4cfd8d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e1:39:45:6c:44:93:d1:68:c7:d2:41:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=417fe392-3b3f-437a-9ef7-fec32d4cfd8d
        Validity
            Not Before: Aug 18 17:00:47 2026 GMT
            Not After : Nov 16 18:00:47 2026 GMT
        Subject: CN=0d25557f-dfba-45a7-a7b5-858f0046cb30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:15:3a:47:a9:f5:38:b9:e3:59:30:d2:92:b2:
                    0b:80:69:03:6c:6c:13:91:9b:73:5c:6e:fe:5e:9a:
                    8b:9e:e0:55:3c:8a:74:ef:11:2d:3e:54:72:39:ac:
                    56:b4:c7:a6:06:b5:eb:c7:81:00:67:4c:0a:8d:de:
                    c0:16:58:2a:c0:ad:82:d5:79:4a:2e:cd:6c:77:c8:
                    17:1f:e3:13:e4:db:fa:be:ce:74:d1:bd:10:59:4c:
                    78:3b:1e:6f:73:e2:8f:3a:4c:fd:c3:9a:93:68:47:
                    a6:69:ca:e0:3c:b4:6e:23:42:8b:ff:40:27:76:3a:
                    71:4b:7d:a6:78:86:12:bf:7b:4e:f9:07:5d:2a:a1:
                    1b:b3:73:3f:65:03:d2:09:27:71:b6:23:21:f6:5e:
                    b7:dc:c4:cb:c8:84:8b:97:ba:c2:cd:1a:88:86:12:
                    17:ce:16:f6:00:d6:e5:ba:80:ab:5e:bd:4e:43:67:
                    9c:e0:99:eb:29:fd:28:0b:e1:d9:8b:32:69:92:90:
                    a3:88:db:4a:84:7a:a5:f7:6b:4c:05:1e:80:ed:0e:
                    41:ea:e1:05:28:08:60:c7:83:b8:2d:12:01:99:60:
                    0e:d9:c5:10:b0:04:02:e6:d6:49:9d:da:ce:eb:45:
                    12:75:6c:42:a1:1d:b1:99:6a:b5:31:56:19:38:b7:
                    b6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:93:64:B9:19:97:BA:C5:28:2E:36:08:F2:14:0E:00:16:04:A5:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/417fe392-3b3f-437a-9ef7-fec32d4cfd8d/9b3eb51b-2dd5-369b-94bc-97a5cb89427a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/417fe392-3b3f-437a-9ef7-fec32d4cfd8d/417fe392-3b3f-437a-9ef7-fec32d4cfd8d.crl

            X509v3 Authority Key Identifier:
                keyid:AC:74:CA:EF:7E:6A:D9:35:5B:AB:93:3C:CF:83:18:9F:3B:A9:BE:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/417fe392-3b3f-437a-9ef7-fec32d4cfd8d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.79.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:8c:94:b9:c2:91:08:bc:5c:65:b7:b1:d6:51:71:ca:01:05:
         06:9e:f4:03:82:31:b2:c2:be:ea:4c:52:21:dd:5a:15:62:8e:
         f0:17:74:ae:77:60:50:16:39:07:ef:c7:37:06:a3:f9:3f:bb:
         c8:c5:3d:6a:8a:df:28:19:09:e1:ce:52:21:03:5a:7e:a1:a6:
         60:c8:05:f7:8e:f8:f0:ba:91:4e:12:19:6b:86:6b:ad:09:c4:
         09:d2:0e:0a:1a:e4:b3:ff:0f:d9:c3:27:73:87:00:56:68:bd:
         9d:6a:7f:af:83:d2:3a:4a:0d:35:8b:84:03:9c:03:f6:44:2b:
         f1:af:04:ab:7f:1f:05:18:1c:a6:aa:e8:50:c4:68:9f:a6:b0:
         a9:76:29:35:ef:4d:ad:1d:bf:29:77:4e:7b:7a:5a:82:b8:30:
         37:7b:48:45:5e:1a:3a:57:3d:07:1d:15:44:de:0c:5a:63:6d:
         93:f3:87:c1:8e:b1:64:48:ad:73:fc:bd:8f:55:bd:2f:b1:52:
         40:6f:3d:26:b8:a8:33:41:f3:d9:85:f5:ce:e1:d7:bf:a1:8f:
         8c:b1:90:d3:01:f8:c5:bc:50:aa:b8:f5:82:0d:4b:4b:23:8b:
         13:9a:1a:87:9c:71:a3:2a:0e:df:fd:9b:d2:1c:c8:67:ae:a1:
         dd:54:e3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 07:52:28 2026 by rpki-client