Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/0e5e71cb-d477-3691-8e8a-0345ecd197fb.roa
File:                     0e5e71cb-d477-3691-8e8a-0345ecd197fb.roa (raw, json)
Hash identifier:          17d9M4t8ECh+8cmn+M186hGKHp5W/qzzrxKgyFe9jDU=
Subject key identifier:   EE:9A:C7:9E:DD:64:4C:9B:29:41:A9:19:1F:42:35:7B:CA:A2:77:33
Certificate issuer:       /CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234
Certificate serial:       010D0C9F4328584EA787920350EFC6F726FB1B80
Authority key identifier: BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/0e5e71cb-d477-3691-8e8a-0345ecd197fb.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     54941
IP address blocks:        199.216.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:92:03:50:ef:c6:f7:26:fb:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=fceb5394-73fe-47ef-831d-39076697f2cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:79:94:3b:af:5c:0a:3d:14:d5:0f:9d:ef:e2:
                    38:5d:e5:23:da:10:c9:8d:49:56:03:ca:28:c7:b9:
                    fe:4c:f1:9c:7a:98:66:6a:8f:24:9f:15:7a:3d:26:
                    fa:e4:38:7d:14:42:fa:0a:bb:dc:c0:6c:47:0f:4c:
                    76:30:b3:4c:23:40:3a:eb:03:0f:80:f4:bd:76:53:
                    e8:b9:ef:dd:2b:47:05:00:b9:2d:cb:34:59:5d:6f:
                    7d:7a:02:c5:cd:c3:38:d3:cf:7b:bb:b9:23:f3:80:
                    1d:d2:5d:1a:3c:7f:ed:de:82:15:6f:63:11:60:c1:
                    12:0f:a4:a0:83:86:e5:be:7c:b1:f1:62:f7:38:93:
                    64:99:02:2a:0c:e3:71:f3:68:d1:86:e8:2a:d8:1c:
                    8e:5d:3c:c3:d4:d5:fd:75:8e:df:7a:d8:13:ea:04:
                    62:7a:c8:73:c3:3a:0f:61:dd:d4:82:e6:dd:5c:14:
                    f2:ba:06:30:06:54:38:f5:9f:89:c4:c2:4f:2f:10:
                    34:d8:89:4e:d9:95:76:9f:cf:8d:05:27:86:c2:8c:
                    b3:63:cd:94:f2:09:e5:37:1e:e3:df:29:d4:c7:7d:
                    aa:08:e1:b9:db:16:29:88:2f:98:80:2f:b6:90:93:
                    ec:b9:ad:02:1c:c6:e6:76:20:d6:66:56:cc:fe:61:
                    7a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:9A:C7:9E:DD:64:4C:9B:29:41:A9:19:1F:42:35:7B:CA:A2:77:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/0e5e71cb-d477-3691-8e8a-0345ecd197fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl

            X509v3 Authority Key Identifier:
                keyid:BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.216.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:fa:c7:e6:46:05:7a:a9:68:42:e5:94:30:a8:7a:fd:12:ce:
         ed:bb:fb:42:9f:0e:60:e0:e2:df:00:ee:82:37:d3:9e:76:4c:
         db:1e:4f:04:32:44:4b:08:c1:49:b7:20:2f:52:81:ed:df:bb:
         c6:d1:24:6b:8c:ea:16:8c:c0:8f:df:f5:b3:b7:94:bb:a0:fa:
         a6:e5:20:bc:69:d6:7f:a6:71:12:97:85:83:8f:c2:e0:c5:31:
         30:ab:08:b6:18:ed:e0:91:d6:98:99:7b:a7:03:14:e6:ed:39:
         e1:53:da:a8:cf:aa:3e:1b:ba:ed:af:db:8b:f8:1b:61:4b:1f:
         73:88:0d:30:21:c1:e9:50:b6:9c:82:37:cc:e0:fc:4a:d1:9d:
         09:21:06:b3:08:9e:c7:92:ad:6d:cb:d7:fb:8f:a2:32:3e:76:
         ee:a4:e5:7c:05:21:06:b5:d6:2e:e9:f1:e3:d2:11:66:ba:7b:
         ab:d1:42:45:09:74:d9:df:9b:b0:fd:db:f1:e0:a4:15:14:fc:
         d6:8f:2c:4e:97:43:a5:7a:c8:dd:3e:8c:95:de:c0:10:74:4d:
         9a:37:09:af:73:93:d2:bb:54:90:22:a1:e7:ce:3e:b7:38:c7:
         4c:c0:f8:82:d9:55:bf:f0:48:8c:75:cf:cb:29:e8:62:57:90:
         f1:5f:92:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:15:24 2026 by rpki-client