Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/c4cc816d-0378-3331-bfab-29af1c51cb4e.roa
File:                     c4cc816d-0378-3331-bfab-29af1c51cb4e.roa (raw, json)
Hash identifier:          vPbXUUYvbjCgwIDS3PC/yRHzvtVuKWs3xbLcp9CEQOc=
Subject key identifier:   26:D9:A1:83:5D:B4:31:59:0F:E3:74:2F:7F:8F:05:B1:9C:30:EE:26
Certificate issuer:       /CN=b985122e-f2ff-4349-8e7b-d604ee2577f1
Certificate serial:       010D0C9F4328584F03A78F37C499DB4559B60D00
Authority key identifier: 32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/c4cc816d-0378-3331-bfab-29af1c51cb4e.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     202
IP address blocks:        199.249.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:8f:37:c4:99:db:45:59:b6:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b985122e-f2ff-4349-8e7b-d604ee2577f1
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=30be3929-9c37-493a-934c-8a0b5f58cc6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4c:9a:0f:80:e4:81:1d:f2:6c:55:0c:15:eb:
                    86:a1:f1:36:62:fa:7e:3f:7d:5e:4c:d3:09:b8:13:
                    e3:f9:16:f9:fa:48:a0:e1:d9:4b:42:93:de:5b:2a:
                    27:db:ae:ce:b2:2a:a6:36:9f:35:cc:13:38:5b:17:
                    12:b3:23:a7:07:18:de:83:06:a1:06:3c:24:62:39:
                    d4:fc:7f:dd:f1:30:01:e1:7f:1a:61:48:35:ec:66:
                    f3:16:be:88:15:b6:16:ad:bf:cc:67:08:2e:a9:80:
                    42:55:c9:5b:fa:2f:50:67:59:25:85:b9:af:c1:78:
                    97:e5:90:43:bd:e2:cd:70:ec:67:fb:ff:49:38:36:
                    33:4c:7b:5b:69:93:45:bb:ff:b1:bb:f3:2b:06:cc:
                    3c:72:ee:30:22:90:6f:fd:e4:da:59:37:42:12:ff:
                    dd:10:a7:ea:ef:dd:bf:93:a3:31:7b:36:44:c9:0e:
                    f6:cb:81:40:68:8b:72:05:74:77:6c:da:b2:31:c9:
                    24:77:fb:2b:59:eb:8b:0e:82:26:5f:3f:cd:7c:6f:
                    64:86:08:36:65:ca:e3:4f:6a:47:35:68:eb:0d:61:
                    52:d3:b4:da:89:05:cd:dc:ab:6f:f8:91:91:2f:02:
                    e8:7d:5b:c3:ab:c4:be:79:60:00:d0:57:ca:08:ca:
                    53:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:D9:A1:83:5D:B4:31:59:0F:E3:74:2F:7F:8F:05:B1:9C:30:EE:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/c4cc816d-0378-3331-bfab-29af1c51cb4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl

            X509v3 Authority Key Identifier:
                keyid:32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.249.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:20:7d:8a:7f:b6:88:e3:08:5a:f4:7b:82:ec:7e:76:f8:10:
         67:0e:5d:00:86:23:a5:f9:e5:75:31:fa:f3:dc:85:08:f5:5c:
         17:71:57:fe:c2:10:73:64:03:be:07:35:e4:44:28:69:b3:f3:
         ff:e3:87:91:46:73:2b:fc:8d:cb:5f:b7:43:6e:6b:8a:55:4b:
         5f:f6:e7:fa:bf:36:e0:9d:06:a2:22:2a:4c:6e:7a:98:81:53:
         f0:30:c6:6a:5a:6f:b0:3d:8f:63:53:c5:0d:c5:0d:8a:13:13:
         56:a1:a7:b2:12:3f:d8:54:15:a6:47:1d:fe:d5:b3:b2:c5:f4:
         65:64:2f:a9:c9:ed:d5:59:ea:6e:8e:e9:45:35:b9:c0:d9:07:
         c0:a8:09:53:0f:af:04:b1:48:12:79:f8:c6:09:2c:28:1f:63:
         9e:66:90:cf:4b:02:b9:88:0d:83:71:a9:c3:79:f0:74:ca:e7:
         97:f0:8f:23:9a:1f:4e:cc:1b:06:77:55:ac:3e:ab:3b:0c:0f:
         4e:5c:a4:e6:dd:1e:fa:56:f7:64:c4:76:a8:f1:87:3c:3f:3c:
         84:2d:65:db:55:b9:e3:b6:68:0b:d3:72:da:04:53:ce:e5:61:
         57:de:44:25:ac:f1:90:90:56:aa:54:49:7f:66:1d:ed:ba:83:
         63:56:ac:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 02:20:21 2026 by rpki-client