Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/1bb5e9fb-e064-3b69-9c68-01484d39d937.roa
File:                     1bb5e9fb-e064-3b69-9c68-01484d39d937.roa (raw, json)
Hash identifier:          PA7KeILNRIuIgPA79MSI9Ak9nT/mNrIW10mN69hV5ss=
Subject key identifier:   60:8C:E4:E6:7D:D2:CB:A8:0A:27:C3:A7:F2:A6:FE:EB:77:9A:66:F2
Certificate issuer:       /CN=5ddde1fe-7525-49e3-9718-412c13cd42ca
Certificate serial:       010D0C9F4328584E46BF2DFC6EF6B58E0D41C190
Authority key identifier: 3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/1bb5e9fb-e064-3b69-9c68-01484d39d937.roa
Signing time:             Wed 24 Jun 2026 09:00:12 +0000
ROA not before:           Wed 24 Jun 2026 09:00:12 +0000
ROA not after:            Tue 22 Sep 2026 09:00:12 +0000
asID:                     834
IP address blocks:        199.101.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:46:bf:2d:fc:6e:f6:b5:8e:0d:41:c1:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ddde1fe-7525-49e3-9718-412c13cd42ca
        Validity
            Not Before: Jun 24 09:00:12 2026 GMT
            Not After : Sep 22 09:00:12 2026 GMT
        Subject: CN=f6640e0d-a698-4def-9190-37f5402077c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:85:d1:fa:13:dd:7b:36:b7:37:7a:3c:06:3b:
                    6c:35:f4:d2:90:e2:84:c5:01:71:21:dc:6d:5e:d3:
                    60:d9:89:d8:8b:4c:cb:07:1e:e1:12:10:30:11:da:
                    a9:6f:00:50:3e:64:16:dd:0d:ea:1c:0b:06:5d:a6:
                    7c:87:7c:4b:f3:6e:b1:b5:ab:77:8f:e6:f7:e5:af:
                    f8:28:2d:7e:3f:00:cd:3d:4e:6e:92:5b:82:7e:84:
                    ca:31:34:b3:b9:02:00:4e:e0:f3:6a:24:63:5c:84:
                    e0:f0:d9:17:2b:f8:63:ea:65:d8:ed:d5:d0:b6:4c:
                    68:dc:68:05:8d:c3:89:12:99:83:b9:d5:6b:93:e6:
                    43:ee:e4:f8:6d:6f:34:03:be:6e:7f:d7:3f:6e:12:
                    75:44:a1:47:fa:26:f7:ac:8a:20:44:04:e2:1e:c6:
                    71:6e:0d:09:c8:27:9b:31:07:4e:4e:c5:e1:43:fd:
                    db:7a:5e:09:0a:43:45:37:07:de:f8:c9:38:9c:54:
                    33:be:ae:30:75:f4:1a:ba:59:07:42:e3:ed:86:dd:
                    8e:39:35:f5:8b:7f:e4:8e:24:88:64:8b:81:63:93:
                    fa:ee:29:ad:09:89:44:f7:96:d5:d0:c5:2a:67:5c:
                    53:8e:a1:66:41:04:d5:b1:41:d4:d9:d1:d5:69:e6:
                    87:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:8C:E4:E6:7D:D2:CB:A8:0A:27:C3:A7:F2:A6:FE:EB:77:9A:66:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/1bb5e9fb-e064-3b69-9c68-01484d39d937.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.crl

            X509v3 Authority Key Identifier:
                keyid:3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:f3:fc:68:ef:64:40:9e:29:0d:0c:26:f8:ab:28:88:81:f8:
         3a:ff:79:e1:7b:88:88:5d:75:a3:6a:60:40:d3:91:35:ed:4e:
         38:03:6b:cb:42:33:26:65:a8:48:34:fd:ee:ed:e6:a4:2e:96:
         c6:aa:6b:e9:d8:e3:4a:5d:c5:79:38:e2:36:d5:1b:37:94:5b:
         6c:6a:57:70:ff:1f:92:3a:72:93:c5:ef:b6:e7:c8:8e:e0:26:
         c5:20:1d:8d:bd:09:6c:cd:34:78:21:84:11:33:b7:92:04:a6:
         2e:a2:76:6a:ba:cc:e3:3e:b6:cb:0e:fc:8b:8f:7d:36:e8:86:
         09:07:74:7f:0a:e7:28:e5:c5:fc:a3:0e:4c:74:41:b7:30:0f:
         8b:d4:45:28:1c:e5:9e:5f:a0:af:c8:14:d4:38:1b:d3:b4:a2:
         41:25:bf:77:8f:94:68:e6:5d:55:a1:d0:a9:91:1e:bc:cc:1e:
         3e:9c:1c:e2:56:35:96:46:96:1a:5b:69:3e:f1:a1:1d:ec:77:
         6f:d0:b8:d4:56:02:db:00:70:d7:da:46:8a:5b:5e:50:d5:00:
         5f:70:18:b4:a2:0d:2e:2b:98:30:18:87:42:14:90:6f:02:0b:
         59:ef:ba:a2:2a:f2:76:14:21:87:27:0b:ae:4b:fa:e7:fd:d2:
         a8:c0:7e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:03:09 2026 by rpki-client