Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/892fdf53-8d98-3430-af33-08660cd96851.roa
File:                     892fdf53-8d98-3430-af33-08660cd96851.roa (raw, json)
Hash identifier:          YD8zS6HCKZho+sOwSGk3ncp4u7YAHbkidlps00J3/Qw=
Subject key identifier:   8C:0F:D7:EA:E6:3E:D2:E6:57:D5:56:D3:45:87:39:3E:3A:41:31:0D
Certificate issuer:       /CN=aae4f0de-2296-435c-b411-b16981804498
Certificate serial:       010D0C9F4328584EB57C4DC10A0A8C01F3ED7C80
Authority key identifier: 1F:D3:27:64:4D:58:B9:AF:C5:7F:44:82:4D:FB:8F:B7:1E:18:CF:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/892fdf53-8d98-3430-af33-08660cd96851.roa
Signing time:             Mon 03 Aug 2026 01:00:11 +0000
ROA not before:           Mon 03 Aug 2026 01:00:11 +0000
ROA not after:            Sun 01 Nov 2026 01:00:11 +0000
asID:                     215605
IP address blocks:        199.58.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/aae4f0de-2296-435c-b411-b16981804498.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/aae4f0de-2296-435c-b411-b16981804498.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b5:7c:4d:c1:0a:0a:8c:01:f3:ed:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aae4f0de-2296-435c-b411-b16981804498
        Validity
            Not Before: Aug  3 01:00:11 2026 GMT
            Not After : Nov  1 01:00:11 2026 GMT
        Subject: CN=e00ade35-c2f2-406c-83dc-1815d59fc5c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a4:a0:2b:c4:db:02:d3:ce:49:eb:9a:0d:9e:
                    68:8f:f5:96:c9:29:c3:f5:02:4a:c1:21:79:49:c1:
                    61:8f:15:35:ea:7a:a9:59:7f:db:b0:ca:f0:d0:d2:
                    93:51:97:d7:1a:c0:a9:85:d3:0b:c6:07:33:67:bd:
                    2e:22:52:53:9d:ce:1f:cc:29:3b:41:77:d7:50:c3:
                    e9:63:ee:f2:fb:49:a6:82:6b:28:6f:72:df:17:86:
                    35:83:6b:8e:ee:63:af:0e:94:ce:ea:7a:c4:62:31:
                    e8:87:c8:91:ce:4a:27:76:70:18:16:9b:b8:39:fe:
                    3a:e0:d3:20:58:c4:f3:53:a3:48:7a:96:a2:4e:a0:
                    c0:97:a1:e5:f8:17:25:bb:93:a5:e9:75:35:3a:8a:
                    aa:fa:6f:76:50:ee:50:f8:b9:04:54:36:f4:56:ce:
                    20:ed:c8:f0:c7:4e:ea:8d:49:13:69:ff:0f:e4:3e:
                    61:2a:3e:80:58:fb:eb:1b:8b:79:9b:b4:4b:be:2a:
                    c1:2b:74:0b:0c:11:9b:ff:77:a4:89:9e:bd:40:23:
                    02:83:3f:65:be:8b:79:16:66:c0:00:ad:19:66:d4:
                    28:a2:e2:cd:25:02:d6:e5:31:76:00:aa:a7:55:aa:
                    11:52:60:46:ac:ee:f3:47:ff:6b:df:0d:f0:44:63:
                    83:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:0F:D7:EA:E6:3E:D2:E6:57:D5:56:D3:45:87:39:3E:3A:41:31:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/892fdf53-8d98-3430-af33-08660cd96851.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/aae4f0de-2296-435c-b411-b16981804498.crl

            X509v3 Authority Key Identifier:
                keyid:1F:D3:27:64:4D:58:B9:AF:C5:7F:44:82:4D:FB:8F:B7:1E:18:CF:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.58.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:3b:02:0e:94:ad:51:0e:2a:0c:4a:f0:1d:c6:bb:87:3a:c1:
         a8:f5:e0:19:28:c0:76:12:e2:87:16:e0:1c:8c:7a:13:03:81:
         57:f4:4e:ab:53:81:c8:a6:b8:53:a9:04:5c:04:da:03:10:51:
         63:7e:36:42:b4:4a:f8:2a:9e:a9:b7:66:1a:86:9f:9a:40:33:
         58:2c:55:46:5e:6a:f0:1e:e2:8c:87:ee:93:55:a0:f1:9a:a4:
         f4:91:8f:8c:52:cf:63:50:9f:01:b4:e5:ba:2a:1b:55:85:d4:
         03:03:b4:8b:b0:2d:95:4b:a6:ea:a7:f9:c9:3f:0e:60:6d:8a:
         9d:d5:32:9d:8a:2d:6f:8c:39:3d:c1:98:55:ec:cd:3f:e2:0b:
         1b:fc:e5:19:13:02:3d:32:82:62:33:48:70:3f:a2:4c:ef:c3:
         08:21:6e:55:97:68:63:ba:6d:d9:ce:d8:f2:7e:bd:15:18:92:
         76:a2:31:da:e4:2e:2f:c2:c3:5a:d7:ce:05:48:13:c0:f8:ec:
         99:80:25:2c:45:77:df:b6:04:12:41:9b:49:be:9a:ff:c2:a4:
         ca:af:44:47:85:3b:6f:f6:7c:70:4c:75:ed:13:a9:e4:7d:51:
         f4:48:1b:10:56:11:7f:93:e7:32:70:de:da:99:ee:2b:78:89:
         c5:54:b2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:46:03 2026 by rpki-client