Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101/24d84c66-fcc3-3ede-b576-e49b2474e984.roa
File:                     24d84c66-fcc3-3ede-b576-e49b2474e984.roa (raw, json)
Hash identifier:          xWroBV4nmMM0jBKWewMHDCT8O2CRaBLu7Md2pXCykeQ=
Subject key identifier:   B1:F9:5D:44:15:76:FC:87:AC:98:07:5A:88:F7:8D:15:41:DD:37:48
Certificate issuer:       /CN=7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101
Certificate serial:       010D0C9F4328584F23C25C0DF870ABD1D491B100
Authority key identifier: 72:40:90:B4:BD:E4:75:37:6E:E6:CE:EC:1D:3F:B9:54:C1:56:E7:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101/24d84c66-fcc3-3ede-b576-e49b2474e984.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     22237
IP address blocks:        199.83.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:5c:0d:f8:70:ab:d1:d4:91:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=d7cee591-3442-45d0-a148-217d6ef9572f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:76:8b:e0:7c:31:7e:4a:a7:06:c3:45:9e:c0:
                    73:e5:b7:a9:b0:a1:49:79:90:60:e9:95:af:4d:52:
                    d9:20:60:a7:93:c4:28:65:92:46:57:6b:b0:cc:d8:
                    85:91:1c:18:f8:6b:e9:a8:3c:f7:69:a6:76:a8:9a:
                    e2:f0:e1:dc:54:fd:bc:4d:8d:01:50:ee:41:04:dd:
                    e1:c9:75:a6:76:92:2b:3a:59:ee:ca:1f:32:12:2e:
                    87:6f:ae:ef:fa:4d:59:2c:bb:2e:7f:57:74:46:71:
                    07:cd:4e:33:0a:99:db:97:cd:94:28:aa:eb:a3:2f:
                    4c:50:16:e2:e2:3f:42:cd:1e:4b:73:37:83:2b:a8:
                    68:79:3a:11:05:e6:12:47:5a:b7:9d:da:7c:9e:82:
                    f0:45:31:ed:4f:55:2f:99:f7:5f:fd:d8:10:2d:af:
                    83:d6:04:4f:2e:64:79:f5:eb:90:8b:bf:e2:a6:68:
                    78:df:62:5c:8e:b8:e3:86:89:b7:80:0b:10:41:92:
                    98:0d:fc:8e:be:39:c9:f4:6a:3c:cf:4a:e4:d4:a9:
                    d6:c0:ac:91:f4:41:c1:2f:7d:11:de:09:6f:52:28:
                    c6:a2:11:cd:41:4d:b6:f2:69:3a:8d:dd:5a:e7:c8:
                    7f:4c:c5:bb:aa:ee:8f:06:ad:77:98:28:48:95:f8:
                    85:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F9:5D:44:15:76:FC:87:AC:98:07:5A:88:F7:8D:15:41:DD:37:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101/24d84c66-fcc3-3ede-b576-e49b2474e984.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101.crl

            X509v3 Authority Key Identifier:
                keyid:72:40:90:B4:BD:E4:75:37:6E:E6:CE:EC:1D:3F:B9:54:C1:56:E7:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.83.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:76:51:42:b8:02:c2:2d:90:c6:5e:6a:9f:a4:c6:f9:68:96:
         db:38:75:67:2f:18:6c:a3:53:1a:8e:2b:68:e5:f1:cb:08:c8:
         85:37:fa:64:3a:dd:41:5a:e1:70:9e:cb:6d:98:7f:77:78:ad:
         58:ea:96:dc:ec:ff:b0:90:61:1d:29:16:1a:58:c0:ac:d7:a1:
         9a:38:db:c1:c7:27:88:c5:bd:74:33:1c:75:77:bc:ac:6b:04:
         4c:bf:f6:6a:fc:5c:b7:f9:15:51:03:f0:76:d4:9a:89:77:c1:
         44:3a:b5:96:c3:5f:fa:45:ab:03:64:3e:3e:87:f4:2e:46:31:
         94:d8:7e:9a:08:a5:5f:ff:bd:3d:82:bf:5d:91:78:c7:9e:0a:
         29:80:d7:46:50:21:e2:f9:4c:76:f3:a8:89:18:a7:09:b0:4c:
         9a:b8:c0:da:08:0e:a7:44:15:73:9a:15:09:ba:4c:43:9d:c2:
         6a:4a:1a:98:16:6a:de:f3:8d:10:d7:71:b3:2c:31:cf:05:00:
         c0:15:10:c4:05:ad:cf:9a:96:07:a3:d4:d9:29:0a:1b:86:c0:
         0a:77:b6:ec:34:68:7a:24:f3:f3:28:ed:f3:30:58:ab:2a:72:
         98:ff:9a:8a:c4:92:52:2e:15:b7:bd:ee:7a:35:14:f5:af:f5:
         ca:21:2e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 10:17:28 2026 by rpki-client