Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/3ddaac33-6988-3df2-9f44-104187f88792.roa
File:                     3ddaac33-6988-3df2-9f44-104187f88792.roa (raw, json)
Hash identifier:          s+8UhllcvKxttPk8zGr8WYvyxb/G2M117jJNdbrisz8=
Subject key identifier:   CF:6B:9F:00:59:F9:AC:4F:93:5F:2F:A9:1C:F0:07:9E:20:77:17:97
Certificate issuer:       /CN=5ddde1fe-7525-49e3-9718-412c13cd42ca
Certificate serial:       010D0C9F4328584E46BF22F0E139D7D4CBA3B780
Authority key identifier: 3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/3ddaac33-6988-3df2-9f44-104187f88792.roa
Signing time:             Wed 24 Jun 2026 09:00:12 +0000
ROA not before:           Wed 24 Jun 2026 09:00:12 +0000
ROA not after:            Tue 22 Sep 2026 09:00:12 +0000
asID:                     9304
IP address blocks:        199.101.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:46:bf:22:f0:e1:39:d7:d4:cb:a3:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ddde1fe-7525-49e3-9718-412c13cd42ca
        Validity
            Not Before: Jun 24 09:00:12 2026 GMT
            Not After : Sep 22 09:00:12 2026 GMT
        Subject: CN=f76c12dd-a67f-4731-b7a8-42ffc692fd13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c4:42:ed:cb:b5:7e:c5:e6:49:ec:8c:fd:ec:
                    0b:df:93:7d:5f:b4:fd:b8:4a:68:e7:10:da:44:49:
                    af:45:06:27:25:25:92:db:71:d8:ad:b9:9a:41:1c:
                    67:d2:e2:80:bf:30:e4:c1:dd:1f:45:bf:33:f7:ad:
                    f2:45:eb:8e:b9:49:2d:2d:73:c4:d6:b3:34:21:43:
                    7d:3c:45:e9:23:f3:ea:37:57:98:92:03:ab:70:cf:
                    a0:fa:b5:7b:d4:f7:76:44:c4:c8:22:2e:a4:1a:07:
                    a1:ca:f4:06:c7:d2:a5:07:06:30:ba:da:4b:a5:1e:
                    46:eb:9d:72:3e:57:0b:8d:6c:99:66:fc:b2:63:45:
                    f1:d4:0c:9e:a7:96:1b:fe:54:a6:88:00:82:59:b9:
                    5e:2a:48:76:ff:98:ff:7a:49:c2:51:25:db:55:ea:
                    de:5b:87:5a:9f:ac:1a:14:c0:56:2b:29:84:b5:8a:
                    ce:a5:f9:38:d6:b2:e1:96:f6:94:8e:b3:09:b4:42:
                    58:1b:23:19:ee:f3:e2:58:45:3d:f1:44:80:97:7d:
                    9a:22:59:1f:79:af:3e:b1:f0:8b:d1:4c:73:f9:f6:
                    17:ca:2b:73:9b:bd:14:d7:bb:2f:f4:d7:7f:26:eb:
                    df:b4:3f:06:e5:aa:7e:62:68:db:9c:d9:38:d9:d9:
                    81:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:6B:9F:00:59:F9:AC:4F:93:5F:2F:A9:1C:F0:07:9E:20:77:17:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/3ddaac33-6988-3df2-9f44-104187f88792.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.crl

            X509v3 Authority Key Identifier:
                keyid:3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:2b:04:0e:04:cf:15:11:bb:fa:8c:97:1c:0c:66:ab:43:c9:
         e3:ba:ae:a5:1c:51:c5:3b:d3:02:ee:8f:df:2a:a1:94:b5:9e:
         ca:64:fb:59:90:fc:63:58:1e:0d:f8:8d:5a:5c:9a:08:db:ea:
         1f:2c:84:0f:79:28:59:9f:07:b6:1f:f6:2d:9f:17:de:79:42:
         fd:20:51:f4:f9:ce:ad:d5:da:e2:f4:9f:68:7f:2d:3c:58:2c:
         dc:a7:dd:88:63:15:92:88:98:eb:2d:38:75:44:05:75:8e:ff:
         ec:67:6a:00:f5:b0:d0:df:05:03:90:e5:ed:6f:06:a9:c0:a2:
         a8:79:03:3d:ba:7b:a4:82:2b:35:29:d7:9f:d3:62:15:3d:b3:
         99:c1:6c:38:50:9f:22:e7:69:e4:1b:4a:4d:4a:93:aa:fc:ce:
         28:71:6a:02:01:6f:dc:dd:8f:90:31:66:b9:2f:62:56:90:8c:
         eb:8c:4e:54:fe:c0:a1:a7:b8:64:fb:f0:f4:1c:a7:ba:fd:42:
         66:e8:05:8d:23:98:71:49:0d:90:3a:97:38:d1:ab:7b:af:85:
         d4:37:7c:7a:88:91:21:ef:f0:d8:bd:e1:66:c3:48:ea:f3:92:
         c5:95:86:e2:ed:0c:d6:f5:e8:73:88:eb:c4:c1:65:bb:5c:7f:
         8c:c0:3f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:59:49 2026 by rpki-client