Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/f10dfbf5-eaf9-373a-9d5a-18534f287e39.roa
File:                     f10dfbf5-eaf9-373a-9d5a-18534f287e39.roa (raw, json)
Hash identifier:          lNsIiE0c36vyvvX48sfjN0OE1BR/s2ZTq1Y3ShCUDOI=
Subject key identifier:   CB:8A:8E:71:A6:AB:17:18:B6:D7:A2:99:B7:34:1A:64:08:67:51:A7
Certificate issuer:       /CN=ccfe663c-8878-4cc0-a772-17e76a493040
Certificate serial:       010D0C9F4328584E3B94776FB46AE9D2CB012300
Authority key identifier: FF:62:FA:82:57:51:D3:39:FF:4E:2C:90:21:55:BE:D4:A8:D8:DE:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/f10dfbf5-eaf9-373a-9d5a-18534f287e39.roa
Signing time:             Sat 20 Jun 2026 09:00:13 +0000
ROA not before:           Sat 20 Jun 2026 09:00:13 +0000
ROA not after:            Fri 18 Sep 2026 09:00:13 +0000
asID:                     0
IP address blocks:        199.176.72.0/24 maxlen: 24
                          199.178.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/ccfe663c-8878-4cc0-a772-17e76a493040.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/ccfe663c-8878-4cc0-a772-17e76a493040.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3b:94:77:6f:b4:6a:e9:d2:cb:01:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccfe663c-8878-4cc0-a772-17e76a493040
        Validity
            Not Before: Jun 20 09:00:13 2026 GMT
            Not After : Sep 18 09:00:13 2026 GMT
        Subject: CN=e1ed9e95-e2f9-44c1-941b-3380cf8c4f97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:9c:2c:26:6d:0d:35:92:43:4a:71:40:fd:e3:
                    c2:2c:4d:ab:25:61:e9:2d:da:36:92:25:a9:91:51:
                    b7:94:ed:72:d9:6b:e5:0b:f9:92:04:38:16:ab:f0:
                    5f:2f:f9:a9:72:c0:b1:b2:ec:e0:c4:95:5e:64:dd:
                    cf:76:71:77:59:35:27:ee:13:d0:89:ec:9a:f8:27:
                    fd:a5:97:f3:95:c5:a8:73:2d:b5:e5:c0:7b:77:21:
                    e0:77:63:b4:1b:f5:81:19:3f:b8:bb:7a:69:37:cc:
                    b0:1c:91:3e:42:63:23:b8:c9:fe:96:95:04:00:73:
                    4f:4b:d0:a0:c1:22:48:c3:e6:13:ff:5e:6f:12:1a:
                    a8:20:4b:46:43:68:e3:26:6f:94:d9:b6:bd:6a:89:
                    89:97:ae:c8:57:2a:f8:f9:43:9e:5f:c0:83:9c:50:
                    8c:b6:d3:b2:82:67:5b:29:da:c6:bb:29:36:39:eb:
                    e7:92:c2:65:2a:7a:c0:b3:91:5d:50:75:c7:47:7f:
                    33:6f:8e:14:82:4f:b8:2a:78:f5:ee:6a:db:af:95:
                    53:9d:d6:36:e3:df:14:35:ec:2d:a5:e3:96:2b:4a:
                    8e:cb:58:72:c4:24:bd:cf:6a:90:47:86:00:96:55:
                    5b:34:3a:c9:df:9a:54:0c:67:1d:65:a6:01:26:a4:
                    11:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:8A:8E:71:A6:AB:17:18:B6:D7:A2:99:B7:34:1A:64:08:67:51:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/f10dfbf5-eaf9-373a-9d5a-18534f287e39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/ccfe663c-8878-4cc0-a772-17e76a493040.crl

            X509v3 Authority Key Identifier:
                keyid:FF:62:FA:82:57:51:D3:39:FF:4E:2C:90:21:55:BE:D4:A8:D8:DE:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.176.72.0/24
                  199.178.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:b6:25:f2:ad:5f:f8:71:23:c5:02:5a:11:00:89:fd:71:22:
         f9:8c:af:43:0c:34:88:b0:30:40:e8:7c:2d:e0:5e:ef:bc:68:
         18:85:9b:96:23:2c:e7:38:24:91:a7:ed:1a:94:13:b1:46:9c:
         0b:a7:7a:9b:97:f2:21:33:27:98:a9:3b:fc:18:cf:db:53:c4:
         82:52:b1:fc:04:0e:44:57:d9:bf:22:a8:46:b6:28:51:10:9f:
         77:7f:79:ce:27:11:4a:4b:1b:3d:77:6f:c4:f7:a8:1a:a9:9c:
         5f:f3:f4:34:a1:fb:89:ee:db:27:a3:4c:74:9a:88:d9:9e:95:
         16:50:9f:a5:c1:7e:0f:93:17:de:01:33:02:9c:db:f4:c4:b5:
         be:ad:8a:0d:08:a8:32:aa:7e:3c:ed:e3:b4:b5:d1:83:d2:cd:
         03:0b:62:c4:2e:f1:6a:1a:b1:b9:28:a2:37:44:16:ea:a2:89:
         7d:d9:b3:41:da:8a:39:f4:75:87:dc:79:3e:f1:72:a7:e5:f7:
         8a:48:52:3e:f0:45:ec:9c:b8:72:59:f5:48:b6:be:8d:d5:3c:
         bc:92:f1:8a:73:e9:62:01:d4:e9:47:83:d5:bd:f9:76:d4:61:
         46:68:1f:dc:c2:e6:35:33:cc:b0:5d:81:73:99:a7:9c:04:f9:
         10:95:bd:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:31:20 2026 by rpki-client