Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/892fdf53-8d98-3430-af33-08660cd96851.roa
File:                     892fdf53-8d98-3430-af33-08660cd96851.roa (raw, json)
Hash identifier:          ZjMOcOvaupJwYz6kpCnc6Vt2i2lQOB8TNWB8ngQhKBg=
Subject key identifier:   1A:42:95:3D:12:6B:BC:D7:A5:85:5A:89:83:41:88:70:56:DA:A1:14
Certificate issuer:       /CN=aae4f0de-2296-435c-b411-b16981804498
Certificate serial:       010D0C9F4328584E13197F503775FD4E49D19400
Authority key identifier: 1F:D3:27:64:4D:58:B9:AF:C5:7F:44:82:4D:FB:8F:B7:1E:18:CF:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/892fdf53-8d98-3430-af33-08660cd96851.roa
Signing time:             Fri 05 Jun 2026 21:00:12 +0000
ROA not before:           Fri 05 Jun 2026 21:00:12 +0000
ROA not after:            Thu 03 Sep 2026 21:00:12 +0000
asID:                     215605
IP address blocks:        199.58.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/aae4f0de-2296-435c-b411-b16981804498.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/aae4f0de-2296-435c-b411-b16981804498.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:13:19:7f:50:37:75:fd:4e:49:d1:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aae4f0de-2296-435c-b411-b16981804498
        Validity
            Not Before: Jun  5 21:00:12 2026 GMT
            Not After : Sep  3 21:00:12 2026 GMT
        Subject: CN=fdca2231-7ad7-4bd3-8d01-b2d741bc2fb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:49:ef:9b:37:29:be:95:20:b3:55:9b:0f:5f:
                    1c:b5:8f:a7:7d:cb:39:67:e7:13:05:b2:48:e7:7b:
                    8b:7c:75:10:de:4f:b5:9a:94:87:52:d0:3e:88:38:
                    9d:8b:d9:99:c8:07:0f:7a:0d:e0:ea:d3:4d:a9:36:
                    4a:8e:8b:c0:05:91:a0:74:54:75:22:6b:12:fc:5c:
                    18:b8:0e:68:7c:49:a7:81:a4:37:77:0a:a7:89:e1:
                    9a:76:36:eb:68:0c:62:1d:ed:2d:8e:e0:59:c8:14:
                    c5:a4:68:a6:9d:ec:ea:a8:cd:5b:ac:06:46:ca:d6:
                    b9:be:aa:de:be:23:3d:7e:5a:dd:4f:0e:26:1e:df:
                    b1:53:19:cf:62:ea:a7:b4:1b:2d:65:14:a0:a0:0c:
                    1d:10:b8:76:c4:e8:98:63:5b:af:90:09:ea:41:32:
                    6e:80:54:d5:98:a6:58:a8:39:83:c1:bb:59:19:da:
                    da:f3:78:8f:ae:49:a5:53:2d:b5:a2:9d:1f:f8:24:
                    7d:ba:b0:f0:52:f6:f6:17:54:92:d9:f6:0f:4f:0e:
                    a8:75:5c:51:fe:4b:6a:b7:ba:34:9c:c5:2e:7e:27:
                    a8:f4:46:f4:05:5f:68:f9:ba:92:77:99:62:ec:b0:
                    d8:c1:a9:6d:e2:88:1f:dd:8d:f4:59:a6:5a:b8:58:
                    e1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:42:95:3D:12:6B:BC:D7:A5:85:5A:89:83:41:88:70:56:DA:A1:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/892fdf53-8d98-3430-af33-08660cd96851.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/aae4f0de-2296-435c-b411-b16981804498.crl

            X509v3 Authority Key Identifier:
                keyid:1F:D3:27:64:4D:58:B9:AF:C5:7F:44:82:4D:FB:8F:B7:1E:18:CF:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.58.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:ee:f6:48:f0:94:26:92:97:28:a4:68:59:c3:b1:e5:4f:19:
         a7:05:90:2f:f3:b2:6d:5a:de:b8:db:06:67:9b:36:e3:6c:17:
         40:f6:98:80:61:1b:06:41:2f:53:48:35:c1:3f:22:47:69:99:
         0e:1e:9d:cf:fa:78:c6:a0:c1:33:a9:d2:78:b0:88:38:af:41:
         35:61:d2:85:64:6f:fd:da:e8:3a:7e:a8:b7:29:b5:ec:02:21:
         83:ab:9d:71:75:d1:15:85:95:5c:5d:01:d8:62:7a:bb:51:24:
         27:bd:c7:18:33:60:72:82:57:78:01:f3:05:01:44:0b:71:c7:
         dc:af:99:0e:ad:e8:41:de:e7:cb:ef:4e:c6:54:12:61:43:c1:
         fd:a7:d7:b1:ec:b4:2d:5f:52:b8:75:66:ed:7d:c9:f0:7b:29:
         25:41:07:f9:a9:97:2a:33:64:65:a1:49:5b:64:50:26:d1:16:
         98:15:0c:6e:d5:57:22:fc:14:98:52:40:67:85:ab:64:0b:ad:
         3f:48:0d:29:31:2f:fc:93:35:ef:4b:04:a8:bf:a7:72:ce:34:
         5e:83:b6:f2:3a:be:2c:e1:47:f3:e6:f9:4c:c1:81:82:c1:55:
         ca:0f:b2:a3:43:34:f1:4c:46:8c:70:60:9c:a0:5c:41:3c:1b:
         66:49:ef:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:24:25 2026 by rpki-client