Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/f83947ab-f36a-38be-9a4b-09bba7867eff.roa
File:                     f83947ab-f36a-38be-9a4b-09bba7867eff.roa (raw, json)
Hash identifier:          8Dv/lF3meJXg8RXPI92D/vAjH6OMdtCJigTEcoeyO1Y=
Subject key identifier:   32:0A:0E:52:92:B4:F5:5B:C1:2B:04:FC:C4:E8:64:1A:0C:31:5E:3C
Certificate issuer:       /CN=00856c65-b5f4-4666-91c4-407d890d4494
Certificate serial:       010D0C9F4328584E3E5F361DF696F8A7AA156900
Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/f83947ab-f36a-38be-9a4b-09bba7867eff.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     174
IP address blocks:        199.48.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:36:1d:f6:96:f8:a7:aa:15:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=daebd88b-9020-4ae2-ad8e-da2f8a6c3ebf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:0b:81:61:79:4f:42:72:14:63:e5:f1:0f:ff:
                    43:db:e4:a0:86:f9:6f:fd:ad:68:de:1c:bd:62:a5:
                    b3:71:4e:3a:d4:bd:97:f1:c8:ab:87:4d:06:65:d6:
                    78:bf:e4:a0:4a:3b:10:e3:f1:c4:84:23:ca:d0:a0:
                    ef:a4:78:0e:16:5b:86:2f:52:75:30:b8:3f:a2:4d:
                    10:be:c1:9f:41:16:a9:84:bf:c5:ce:b5:c9:25:45:
                    83:e1:b1:b1:ff:2f:ca:65:30:7d:29:92:a1:5a:eb:
                    59:92:b7:fd:fc:26:e1:55:99:5d:3b:18:05:cf:ef:
                    bb:a5:12:06:61:3c:48:16:fa:ad:27:1b:99:08:86:
                    0f:96:5b:cb:42:74:b4:bb:78:7b:ce:ca:c8:c0:85:
                    77:21:79:d4:0e:43:c6:01:da:c0:f4:ca:73:06:66:
                    9f:f5:77:28:8e:dd:0d:1b:ab:17:53:5c:25:db:05:
                    1b:0f:f1:44:88:66:b6:0b:c6:17:c3:63:01:b2:32:
                    3d:05:58:ff:54:15:f1:40:f9:53:61:0d:81:d3:7b:
                    a3:5d:27:77:d9:09:b7:d0:23:35:44:e7:12:77:01:
                    be:76:22:c2:d6:b7:4e:4f:ae:26:3b:e6:de:9c:1b:
                    32:f1:4e:90:c4:c8:ec:e0:ae:79:6b:65:03:a2:48:
                    80:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:0A:0E:52:92:B4:F5:5B:C1:2B:04:FC:C4:E8:64:1A:0C:31:5E:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/f83947ab-f36a-38be-9a4b-09bba7867eff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl

            X509v3 Authority Key Identifier:
                keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.48.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:5a:72:c7:db:ab:bf:b2:84:ca:58:87:26:1d:26:56:df:6d:
         27:78:9c:d5:84:54:12:84:c2:c1:ad:70:25:d9:f5:04:41:73:
         22:06:17:b4:0d:b9:cf:d7:17:ca:62:4e:ac:d3:2f:9e:f6:98:
         9d:20:87:34:d1:89:5b:ff:15:37:5e:d6:19:4e:fe:75:ad:9e:
         c2:7d:ec:5f:7c:33:09:b0:c0:2f:7f:62:36:44:ed:33:91:b2:
         03:0f:95:60:14:f4:a6:6f:6c:47:04:91:bd:e2:0e:6b:fb:86:
         f9:d7:3f:db:3c:ac:d9:99:d1:6f:e6:31:fa:ff:93:fc:d4:3a:
         92:80:b7:7e:bb:f6:54:82:d3:98:4c:19:85:d5:50:45:a9:97:
         2f:58:6f:28:57:26:b3:dd:0d:ce:95:33:5c:98:10:05:6b:48:
         97:52:d0:7b:48:89:46:9b:92:a4:72:ab:18:b7:d0:d7:0c:7c:
         bb:ca:90:4a:8a:da:c0:4f:26:97:ea:af:2f:72:42:4a:77:d2:
         cd:e3:f1:b7:d4:d9:4a:2f:62:7b:ef:55:91:d9:09:74:f5:d6:
         d5:52:47:a7:72:c4:ff:69:7c:6b:5d:3b:a6:30:e0:a6:b2:11:
         97:07:28:7d:07:c1:b7:99:da:24:62:62:73:81:2b:4a:e3:ab:
         51:d2:65:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 13:19:15 2026 by rpki-client