Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/dd7f374a-32f5-328b-a3f6-3ea8586a9438.roa
File:                     dd7f374a-32f5-328b-a3f6-3ea8586a9438.roa (raw, json)
Hash identifier:          Fr3DzgEg7qjiZNwuIWYFTZNn70X5v0hZxEiAYkQNgGQ=
Subject key identifier:   F5:23:DF:2A:1C:20:07:F7:D1:7D:2E:F7:08:AF:57:93:3E:4B:B7:03
Certificate issuer:       /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial:       010D0C9F4328584E66DA144F6D02EFDD9EAB7F00
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/dd7f374a-32f5-328b-a3f6-3ea8586a9438.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     14618
IP address blocks:        199.45.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:14:4f:6d:02:ef:dd:9e:ab:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=a572a1c5-70d1-4ad9-ba36-2faa421ae257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:79:c0:a4:33:64:a5:00:19:fc:50:3b:86:6d:
                    66:68:7b:d5:14:fc:29:f8:24:85:c3:bc:72:b2:23:
                    4e:67:99:9b:0b:c6:6d:bb:1b:5f:05:8f:f8:29:fc:
                    3f:e5:a5:f7:43:a4:51:47:00:be:82:17:e3:79:a1:
                    26:8d:93:90:62:58:9b:a3:40:8a:aa:2c:7f:35:14:
                    6a:52:58:8a:b5:b5:38:3c:0f:3a:a8:f9:ca:0e:2c:
                    52:e0:dd:07:a3:0f:f1:ad:a8:62:44:00:ff:a1:cf:
                    a4:ce:31:29:46:d7:d2:91:b9:cb:4a:d1:e8:1d:3b:
                    07:d4:af:ac:5e:f1:90:f8:56:70:a4:aa:fc:c8:a0:
                    b9:e6:67:d1:c1:54:c9:27:23:04:1e:a6:af:ed:b8:
                    79:65:14:1a:bf:09:c3:1b:37:25:52:04:1e:76:7b:
                    30:c7:cb:5c:1c:69:cc:86:ee:29:7e:7d:56:1a:62:
                    c2:f2:d6:37:93:5f:37:49:d7:73:16:0a:f4:80:63:
                    96:d0:20:48:5f:35:f4:ba:d4:7e:0f:ab:0d:de:07:
                    45:d6:6e:f2:59:5e:0e:ca:80:35:51:d6:88:2c:89:
                    cf:a2:3c:dd:22:2a:13:ca:75:63:a0:75:66:00:ee:
                    04:05:0a:8d:fd:55:b0:83:f2:3d:0d:dd:c8:3f:b2:
                    ca:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:23:DF:2A:1C:20:07:F7:D1:7D:2E:F7:08:AF:57:93:3E:4B:B7:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/dd7f374a-32f5-328b-a3f6-3ea8586a9438.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl

            X509v3 Authority Key Identifier:
                keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.45.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:c5:0b:05:fc:9c:bc:9c:8a:23:63:92:84:c7:d9:93:f0:4e:
         bb:be:8f:ca:3c:e0:b4:ea:34:fe:95:d5:98:02:22:80:02:99:
         10:fa:79:1a:4e:f2:c0:86:2e:c4:77:3e:ef:4b:3d:7b:1c:af:
         11:84:8e:d4:7d:7f:43:4b:0b:27:74:24:a8:58:17:11:3b:48:
         6c:16:68:a5:e8:ed:e2:b6:a1:01:18:72:60:6e:12:c8:44:d3:
         93:52:ef:59:da:e2:0a:06:f0:6a:6d:25:14:1f:f6:72:6c:62:
         63:71:ee:84:4c:9b:43:89:16:98:29:1d:c6:92:ff:94:97:14:
         a4:65:c4:c1:d1:ee:00:96:d0:f7:22:1c:d9:ef:e2:33:9a:8c:
         76:dc:2a:6a:82:8c:8e:90:8a:d3:de:64:01:65:fb:22:b7:d9:
         87:f2:a7:c5:26:d9:54:45:17:2c:59:f1:b1:94:73:b8:5f:e7:
         82:e7:b5:e7:1a:ac:bf:7c:40:21:46:76:39:70:17:63:70:57:
         55:df:e8:e2:2e:4f:df:3d:cb:73:75:60:3f:25:89:07:b3:e8:
         c4:0c:33:e3:1e:64:e1:90:47:d1:11:1b:f3:71:8f:7f:fc:cf:
         71:38:c5:8d:51:e0:70:28:fa:dc:24:a8:49:d9:8e:83:af:18:
         cc:92:29:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:20:57 2026 by rpki-client