Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/bb5807ed-8deb-3938-bc64-5cc7806d002d.roa
File:                     bb5807ed-8deb-3938-bc64-5cc7806d002d.roa (raw, json)
Hash identifier:          /u1IiiIWs7U3FinsMi7+QgZeJntPKtMoU9W8+3H06lU=
Subject key identifier:   64:FB:EA:0B:86:E8:2D:E7:B1:25:BA:15:4D:51:B1:F7:E2:AC:67:CC
Certificate issuer:       /CN=b985122e-f2ff-4349-8e7b-d604ee2577f1
Certificate serial:       010D0C9F4328584F03A78F5D28927EA397DBCD40
Authority key identifier: 32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/bb5807ed-8deb-3938-bc64-5cc7806d002d.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     3356
IP address blocks:        199.249.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:8f:5d:28:92:7e:a3:97:db:cd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b985122e-f2ff-4349-8e7b-d604ee2577f1
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=0f6f1f4f-3f7f-4764-a150-bffdfc4f3bc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8b:f9:8a:e8:c9:ba:63:8d:92:47:52:7d:72:
                    6f:04:ea:75:b0:02:c3:32:34:df:59:d1:25:16:29:
                    ae:a3:92:e1:4d:ea:43:2c:33:2e:f4:95:a8:26:2f:
                    89:02:8a:1e:ae:2d:26:ef:3b:97:46:e2:36:33:46:
                    ce:43:42:00:3b:2f:c8:a9:e8:79:9f:a2:90:00:e3:
                    a0:21:2b:27:b5:a3:97:de:cb:ea:96:fc:96:36:a0:
                    a9:02:9c:7f:ae:68:65:12:47:37:b5:ea:06:34:c4:
                    57:6f:a1:ea:65:ec:7d:52:0d:49:ad:8f:66:bc:6f:
                    d1:67:63:2e:1b:57:77:cc:d0:ee:07:84:a5:88:43:
                    26:9f:db:95:56:d2:ce:ad:f6:9f:79:ce:e6:f6:55:
                    66:ae:2b:fe:da:00:41:79:06:3b:fc:1c:ec:82:e6:
                    6a:4d:93:2e:0f:b2:4c:a8:1e:f5:84:b5:aa:ed:a6:
                    38:d5:fd:ca:9e:fd:c3:ca:f5:b6:c7:50:b4:5c:ea:
                    c4:d2:e0:cb:7a:a3:42:2d:15:cd:9a:ce:bb:21:61:
                    dd:36:2d:5a:04:48:70:99:1b:03:bb:34:35:69:a2:
                    0d:8b:81:83:85:63:f1:2f:88:2b:41:57:18:e4:bd:
                    84:be:7a:1c:78:05:31:db:fc:bd:54:82:a7:c4:b0:
                    14:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:FB:EA:0B:86:E8:2D:E7:B1:25:BA:15:4D:51:B1:F7:E2:AC:67:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/bb5807ed-8deb-3938-bc64-5cc7806d002d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl

            X509v3 Authority Key Identifier:
                keyid:32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.249.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:1f:4c:28:03:cd:50:9a:73:a1:07:10:6d:a3:ee:39:34:9e:
         0a:76:1c:f5:f5:57:61:c2:ba:cb:da:88:68:fe:d3:ef:e0:b9:
         ae:c3:f8:cb:54:06:eb:75:98:f9:e0:4e:3b:5c:eb:9c:63:84:
         5f:6e:0d:0d:ff:d9:94:ac:25:b3:a1:46:96:ba:5d:4d:bd:d9:
         24:6c:99:be:77:e7:aa:a9:01:ce:fa:e1:b7:e7:e1:7e:b5:99:
         e2:7d:34:60:9a:0d:db:4f:87:5e:25:7e:a0:04:6c:c0:cc:75:
         55:03:2d:ad:6c:3e:13:49:ca:08:16:0b:bd:30:fa:b2:98:58:
         4a:ab:ea:3a:f8:0e:13:b0:9c:41:5d:cb:83:b7:c6:b0:f1:3c:
         c7:50:9a:cb:7b:50:7f:d0:63:17:dc:38:e4:28:8e:37:93:35:
         a0:7c:cc:47:2b:0f:88:75:1c:72:ee:18:01:d8:5c:d7:58:3d:
         db:de:1d:e4:c9:fa:da:c9:e0:1b:36:9e:ec:f6:ea:14:bd:89:
         07:cc:c8:6c:55:5d:07:f0:cc:ae:32:76:cb:76:2b:d6:98:0e:
         1b:4b:80:59:5c:d2:2c:58:b9:67:80:b9:1e:29:fb:ac:fa:c1:
         82:2a:da:d5:84:98:ca:e1:04:89:f0:06:53:a6:84:fc:32:99:
         b0:3c:8a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 02:20:26 2026 by rpki-client