Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/136d3f48-00a1-385a-9fc5-b4a142112e8b.roa
File:                     136d3f48-00a1-385a-9fc5-b4a142112e8b.roa (raw, json)
Hash identifier:          OQL9QFjcY7Fm0GaF9qFyM604GQFDC659GNqPo6G9VfA=
Subject key identifier:   1C:DA:B0:67:60:90:61:79:11:83:7D:BD:0B:50:7A:C3:C0:D7:2F:C6
Certificate issuer:       /CN=5ddde1fe-7525-49e3-9718-412c13cd42ca
Certificate serial:       010D0C9F4328584EFA31BF4A46BFF93157007E80
Authority key identifier: 3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/136d3f48-00a1-385a-9fc5-b4a142112e8b.roa
Signing time:             Thu 27 Aug 2026 15:40:50 +0000
ROA not before:           Thu 27 Aug 2026 15:40:50 +0000
ROA not after:            Wed 25 Nov 2026 16:40:50 +0000
asID:                     219075
IP address blocks:        199.101.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 31 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fa:31:bf:4a:46:bf:f9:31:57:00:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ddde1fe-7525-49e3-9718-412c13cd42ca
        Validity
            Not Before: Aug 27 15:40:50 2026 GMT
            Not After : Nov 25 16:40:50 2026 GMT
        Subject: CN=d3dd0a2b-9238-48ee-8e62-01c66c33172e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:27:55:03:ef:c4:52:c6:28:d3:e9:5f:92:4f:
                    36:0b:35:3d:74:5a:8d:e1:bc:c2:6a:f6:c0:e4:1e:
                    cf:fb:52:f1:68:74:76:dd:d7:f1:ef:35:b1:21:4d:
                    b5:6f:53:76:00:97:2b:8f:e2:48:ab:e6:ec:fa:c1:
                    03:24:24:55:74:a9:a2:bb:cb:1d:a3:82:64:5c:2a:
                    d6:e5:c1:69:6a:99:85:ce:ad:ff:cb:59:c9:ae:ee:
                    35:a7:04:57:7f:b8:9c:ce:39:05:d6:a4:cc:fb:7a:
                    f8:34:77:31:bf:49:db:10:d3:ca:4c:5f:86:76:35:
                    86:dd:af:cb:e5:c9:bf:8e:27:98:0c:bc:4a:60:98:
                    e4:e3:71:65:02:6a:4e:ee:f0:48:14:32:1d:60:db:
                    7a:d1:28:3b:8a:55:b7:ef:04:fe:98:51:59:6c:b1:
                    7e:e8:88:67:30:fc:05:43:b5:9a:9f:1e:35:ab:bf:
                    c2:d6:41:cd:07:bc:2a:4e:15:e2:94:9b:7d:90:e6:
                    29:07:67:24:33:cf:f5:f8:33:f6:13:3e:bb:63:49:
                    bf:8e:ee:ad:85:51:4b:9b:0f:09:eb:4a:de:5d:1f:
                    e2:ec:41:54:ee:e2:ec:78:d4:c1:0e:1d:33:eb:d5:
                    d4:ee:45:13:61:81:56:23:8d:a3:d1:51:e9:ee:5f:
                    7b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:DA:B0:67:60:90:61:79:11:83:7D:BD:0B:50:7A:C3:C0:D7:2F:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/136d3f48-00a1-385a-9fc5-b4a142112e8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.crl

            X509v3 Authority Key Identifier:
                keyid:3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:b6:04:e2:16:9c:60:14:1e:86:53:b3:0d:43:28:d8:04:48:
         cc:3c:64:42:8e:7f:c7:6d:97:ee:5a:1b:13:0e:b1:9b:01:86:
         b5:eb:6b:fb:b1:cb:86:f8:aa:53:21:4c:46:71:08:27:d1:06:
         14:f0:be:5c:55:29:49:c8:dc:ce:3c:ed:be:63:b3:ee:cc:ca:
         01:91:fb:3a:af:8e:fb:30:48:4b:a2:3d:1d:d5:33:60:a1:a9:
         08:2b:c1:05:6c:6a:a0:ee:f2:a2:cf:cd:33:55:e1:00:ec:da:
         d9:bd:1e:16:cb:47:95:c4:cd:da:e2:e8:c7:cd:5a:6f:80:b7:
         98:b8:95:cd:cd:57:b6:38:36:9f:8b:2a:9c:4e:c8:28:37:18:
         0e:e3:79:22:35:ca:31:55:3a:29:12:eb:90:16:9a:84:02:1a:
         e2:0a:cd:30:dd:59:4d:2b:eb:49:7e:ec:bf:95:70:28:f3:35:
         c7:83:d2:03:5f:38:2c:2f:50:4a:83:b5:99:e4:be:c9:0c:70:
         71:90:9a:a2:fd:14:8f:df:b9:a9:78:c9:0c:31:8e:99:23:72:
         0f:1b:5c:80:f6:d9:98:a4:6c:38:bf:5e:cf:a3:17:f0:f8:73:
         87:6a:b0:bc:07:50:7a:05:d7:2a:dc:f3:b7:35:d8:22:59:f1:
         87:1a:d0:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 28 21:54:20 2026 by rpki-client