Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/502749fe-3b54-4c5a-a4ae-57651aad3778/fa7f795a-bfe0-36b9-a634-cae53c9da7db.roa
File:                     fa7f795a-bfe0-36b9-a634-cae53c9da7db.roa (raw, json)
Hash identifier:          COdNdVNvpWGl9gQtVKJ9xAKJIjz6IDpHmGmhWHFbhR0=
Subject key identifier:   12:50:7C:DF:BD:CA:85:DA:5F:FE:97:D9:3E:5A:2A:7D:7B:D8:26:29
Certificate issuer:       /CN=502749fe-3b54-4c5a-a4ae-57651aad3778
Certificate serial:       010D0C9F4328584F2CACEE072805117D91B20C00
Authority key identifier: 96:39:4A:26:67:F8:9F:FE:96:2C:61:BF:E7:3E:87:EC:CC:28:D2:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/502749fe-3b54-4c5a-a4ae-57651aad3778.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/502749fe-3b54-4c5a-a4ae-57651aad3778/fa7f795a-bfe0-36b9-a634-cae53c9da7db.roa
Signing time:             Mon 14 Sep 2026 17:39:27 +0000
ROA not before:           Mon 14 Sep 2026 17:39:27 +0000
ROA not after:            Sun 13 Dec 2026 18:39:27 +0000
asID:                     7979
IP address blocks:        199.34.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/502749fe-3b54-4c5a-a4ae-57651aad3778/502749fe-3b54-4c5a-a4ae-57651aad3778.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/502749fe-3b54-4c5a-a4ae-57651aad3778/502749fe-3b54-4c5a-a4ae-57651aad3778.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/502749fe-3b54-4c5a-a4ae-57651aad3778.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2c:ac:ee:07:28:05:11:7d:91:b2:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=502749fe-3b54-4c5a-a4ae-57651aad3778
        Validity
            Not Before: Sep 14 17:39:27 2026 GMT
            Not After : Dec 13 18:39:27 2026 GMT
        Subject: CN=50a80aae-8739-4a84-bf6e-e791cdfa8c6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:25:16:3d:c8:ba:b0:04:8e:8e:dc:bb:92:db:
                    8f:63:a4:86:e0:df:b8:3d:9f:eb:38:24:66:44:18:
                    0e:c5:ab:46:0d:3d:06:0e:c3:7e:97:6b:38:8e:1e:
                    d7:2a:9d:43:68:c5:3b:6d:b8:3d:43:11:7b:d0:8d:
                    ea:87:d0:8d:29:0f:98:b5:49:38:15:8d:87:f2:de:
                    be:3c:63:68:06:07:1c:0f:c1:a3:8a:03:e1:83:e7:
                    6e:62:3e:11:94:b9:30:1e:b7:eb:44:a3:4c:df:58:
                    9a:d9:2d:3d:22:71:d3:11:94:24:b0:13:40:c9:54:
                    10:fa:42:e6:a2:52:4d:06:48:cf:75:f9:63:68:6b:
                    6d:71:de:ec:45:92:7a:33:b9:ca:dc:1b:af:f7:20:
                    4b:7e:d0:ae:63:35:4b:d1:8f:68:8b:1f:a0:54:44:
                    e4:a1:6b:fc:e2:b1:3b:07:67:bf:e3:3f:d5:6a:8f:
                    e3:51:6f:df:1e:ef:60:77:5c:53:e5:50:b2:a7:6f:
                    30:d4:93:2f:a9:b0:28:48:ed:7b:b2:16:1f:0e:78:
                    be:c7:da:2d:7f:a4:57:61:b6:9a:89:11:12:64:13:
                    47:fc:00:15:8c:d7:14:0c:c7:e0:88:69:1e:a9:7e:
                    e2:a1:36:65:2c:12:b0:3f:9f:2c:70:a4:b8:b7:e6:
                    70:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:50:7C:DF:BD:CA:85:DA:5F:FE:97:D9:3E:5A:2A:7D:7B:D8:26:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/502749fe-3b54-4c5a-a4ae-57651aad3778/fa7f795a-bfe0-36b9-a634-cae53c9da7db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/502749fe-3b54-4c5a-a4ae-57651aad3778/502749fe-3b54-4c5a-a4ae-57651aad3778.crl

            X509v3 Authority Key Identifier:
                keyid:96:39:4A:26:67:F8:9F:FE:96:2C:61:BF:E7:3E:87:EC:CC:28:D2:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/502749fe-3b54-4c5a-a4ae-57651aad3778.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.34.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:c2:e8:90:bf:29:0a:93:18:6a:31:fc:b0:2f:5f:be:9e:f6:
         22:13:84:f8:e5:2a:27:75:4d:a2:94:90:89:67:87:f9:5e:5c:
         47:ad:e6:e8:9f:86:b0:7f:45:5d:86:94:e7:4d:53:7e:31:93:
         c1:9d:2f:56:6a:d2:48:11:af:f4:6a:a5:b4:5c:5b:df:bd:32:
         4b:64:ae:90:ea:a7:5c:e5:6f:16:51:2a:38:d4:e7:4f:9f:f6:
         ab:52:f0:0c:6b:9f:1d:7e:0c:96:a5:83:72:23:94:3c:04:6c:
         c4:d2:3e:27:f5:e3:f3:be:83:3d:e8:53:35:d6:07:e4:7b:07:
         59:54:c6:94:f0:35:67:92:a2:79:c1:fe:2f:b4:99:17:b6:69:
         e6:14:38:04:6f:a2:ad:d6:61:45:6e:e7:38:5d:41:86:8f:ec:
         1a:90:66:08:71:9b:3b:eb:0c:57:b7:7f:d8:be:39:ba:c2:08:
         0c:82:5b:b8:ff:97:61:26:01:52:57:c5:6c:b2:92:5e:c0:5a:
         98:58:bd:37:f6:77:27:12:33:5b:39:16:c9:6d:c1:22:b0:81:
         52:1a:5d:ba:c1:24:cb:90:b0:c2:d6:62:3e:a7:9e:b5:e8:55:
         c9:d4:01:b0:f4:73:2f:88:d7:3f:39:a9:50:dd:e4:36:d8:c9:
         08:ac:a6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 19:40:27 2026 by rpki-client