Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/3fae15e1-900a-373e-b386-d052905c9332.roa
File:                     3fae15e1-900a-373e-b386-d052905c9332.roa (raw, json)
Hash identifier:          ys2jrAfLjxEcuvoPaAvQQbrXMpL5PPIOf+OtKRJ8P+o=
Subject key identifier:   7E:60:90:D5:43:46:43:24:F1:9E:96:5E:69:74:59:CA:F5:AD:B9:6B
Certificate issuer:       /CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
Certificate serial:       010D0C9F4328584E4559D4CCA9D0ECFCCEB88F80
Authority key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/3fae15e1-900a-373e-b386-d052905c9332.roa
Signing time:             Tue 23 Jun 2026 21:00:12 +0000
ROA not before:           Tue 23 Jun 2026 21:00:12 +0000
ROA not after:            Mon 21 Sep 2026 21:00:12 +0000
asID:                     30097
IP address blocks:        199.87.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:59:d4:cc:a9:d0:ec:fc:ce:b8:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
        Validity
            Not Before: Jun 23 21:00:12 2026 GMT
            Not After : Sep 21 21:00:12 2026 GMT
        Subject: CN=81507039-dc22-42e8-82bc-3d4f803c11ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:de:ce:6c:4c:1b:52:3e:7b:77:4d:3b:df:a2:
                    ed:8e:9b:fb:fc:39:60:b3:c2:9d:09:28:a5:08:f3:
                    ae:e7:51:25:2d:89:18:2c:22:b9:a1:d2:69:15:c6:
                    84:24:f5:f6:ff:a2:9f:ce:62:df:34:6a:80:88:08:
                    11:c4:a4:2f:0c:d5:31:a1:fc:5c:d3:17:c3:d1:fc:
                    06:8e:5e:6a:17:03:b9:16:83:0d:da:ab:65:c2:5d:
                    27:04:27:76:ed:1a:d2:22:fe:5b:97:26:9c:9c:32:
                    d2:0a:48:38:12:12:a5:3c:dd:c6:d7:91:7c:6a:1d:
                    bd:70:18:cc:4f:83:eb:bf:95:99:21:0b:72:5e:39:
                    01:63:d2:1b:57:bb:f2:d7:17:f7:0e:c3:69:91:6b:
                    bf:0b:74:4a:14:09:5d:db:a2:81:6d:b6:e8:0c:60:
                    b3:73:f4:0e:fe:8d:d3:95:a0:a3:85:60:f4:ad:77:
                    91:6a:72:9e:db:bd:7a:61:7e:59:19:88:10:c8:d7:
                    e3:d4:e0:47:b2:e2:4e:49:29:8e:f0:a8:51:65:7b:
                    62:ea:10:bd:4f:fa:71:86:86:30:7a:ef:b2:60:89:
                    f7:9f:62:2e:f3:41:43:39:13:3b:df:e4:dd:78:24:
                    87:c4:15:ec:df:ac:a1:c3:28:ea:9a:5a:be:3f:d1:
                    7c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:60:90:D5:43:46:43:24:F1:9E:96:5E:69:74:59:CA:F5:AD:B9:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/3fae15e1-900a-373e-b386-d052905c9332.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl

            X509v3 Authority Key Identifier:
                keyid:FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.87.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:38:4f:2a:49:0e:aa:0e:4e:56:80:6f:13:1e:9e:ae:e8:0c:
         9c:25:30:83:ba:0a:fe:aa:79:89:aa:12:dc:34:dc:db:f4:40:
         05:8f:5d:46:53:cc:db:b0:dc:96:11:bc:75:c6:a5:c2:1b:6d:
         81:cc:bd:7d:9d:77:aa:72:1b:48:fd:fb:cb:73:08:06:46:66:
         c0:62:a0:f0:c6:50:72:9a:74:5b:4e:a6:7b:e4:4a:eb:6f:99:
         dd:59:63:21:1a:c4:a4:75:6f:90:9b:c0:cc:dd:bc:7b:08:49:
         ea:15:fe:da:36:1e:d1:d8:9d:ac:9a:7d:9d:65:d4:d2:e9:84:
         8e:c4:88:27:a5:8e:ea:b2:fa:ba:8c:1d:37:9a:b7:57:92:25:
         4e:4a:2f:b7:c8:d0:f1:2a:fa:9e:83:5a:ba:1f:ba:43:2d:da:
         29:94:69:fc:57:42:02:46:80:c1:c1:90:17:a0:18:ba:fe:73:
         95:16:6f:b1:34:8e:52:c4:6c:9f:ba:40:5f:53:08:73:0b:5a:
         2f:c5:f5:3c:67:d4:1f:0c:c6:0c:02:c5:f3:32:6a:67:74:64:
         5e:08:a2:21:21:52:a1:c5:be:41:08:29:84:b3:1b:a2:fc:23:
         cf:16:f3:c5:e9:f5:cc:ff:5c:39:e3:06:07:9b:da:41:f0:c2:
         96:21:62:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:14:23 2026 by rpki-client