Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/75e36e29-1473-3ff8-be7f-4723b51f9b6f.roa
File:                     75e36e29-1473-3ff8-be7f-4723b51f9b6f.roa (raw, json)
Hash identifier:          PSx8fcX84yWieC7lQP/PmYhl6oTQYccyvyZBpCyuo/g=
Subject key identifier:   44:5D:0A:40:F2:8D:82:7F:92:11:63:CF:7E:7E:E5:4D:6B:0A:F0:AE
Certificate issuer:       /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d
Certificate serial:       010D0C9F4328584EA7972089051144A3A4F8E2C0
Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/75e36e29-1473-3ff8-be7f-4723b51f9b6f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397325
IP address blocks:        199.19.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:20:89:05:11:44:a3:a4:f8:e2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1a3876d0-d917-4f8f-9a01-6a37db4e48a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a0:06:e0:ef:9a:f0:47:c8:55:da:df:7b:b9:
                    b3:ae:a8:47:ca:b4:a3:6c:be:2a:57:01:b6:df:2b:
                    81:76:62:06:fa:94:c7:3c:9d:c7:c3:bf:3d:11:f5:
                    5e:e7:fa:49:b9:35:91:45:3d:b4:3e:23:e9:a8:4c:
                    c2:ff:06:e6:de:68:b3:ab:07:ba:a9:f6:6a:f4:57:
                    6d:34:74:08:62:f1:d5:b2:8f:e0:94:00:1d:cd:5a:
                    d7:9a:56:07:0d:f1:9a:42:cd:e0:d2:f2:a5:dd:54:
                    cb:82:6d:43:af:ae:70:fe:bd:80:a3:2e:e7:8d:fe:
                    8b:82:38:0f:2c:85:15:ad:ff:7f:d3:1a:e5:63:1b:
                    ce:20:60:76:69:e3:53:e9:8e:57:11:56:4b:ca:41:
                    e0:16:22:58:7e:2d:37:09:e4:72:a5:08:f1:9c:50:
                    1c:ec:14:de:fa:89:30:ed:2e:c0:e3:8c:9b:08:62:
                    74:6a:ec:76:4d:61:d7:92:b0:03:55:11:e1:dc:98:
                    ec:34:f7:4a:64:88:62:64:18:53:c4:7c:1c:3f:a8:
                    99:39:35:7c:34:ee:f0:cb:bb:f4:b7:34:73:ca:bb:
                    91:cb:7d:8c:c4:21:1b:17:95:0c:64:0d:8f:dd:0d:
                    e4:11:e7:cf:11:c0:0b:3b:98:3c:f5:8c:3e:90:79:
                    f9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:5D:0A:40:F2:8D:82:7F:92:11:63:CF:7E:7E:E5:4D:6B:0A:F0:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/75e36e29-1473-3ff8-be7f-4723b51f9b6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl

            X509v3 Authority Key Identifier:
                keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.19.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:8f:e2:27:45:4a:c2:e4:e0:ba:02:ef:ad:5c:43:23:8e:40:
         42:4a:61:75:a9:59:32:39:fd:4f:90:cb:f4:9a:7c:aa:9d:81:
         c8:97:51:fc:ea:5a:7e:65:f5:89:e4:e3:a6:13:b0:2d:69:35:
         b7:d7:3b:88:d9:a9:45:b3:04:73:4a:1a:eb:5c:32:ef:23:74:
         39:3e:db:e7:c9:e8:94:e5:b8:e9:b0:f8:ab:50:f4:dc:ce:e9:
         7d:d0:64:83:8f:7c:a9:3a:2b:5c:a5:7a:60:0c:da:7c:ba:99:
         19:5d:18:19:72:c7:e2:5c:b3:24:84:e4:7f:33:1e:9b:aa:b8:
         96:0e:af:e6:c5:b7:7f:8e:22:15:d1:46:9d:55:43:56:eb:3d:
         81:7d:ee:e9:58:9f:e0:f9:20:51:f6:f3:ce:da:cf:0f:72:4c:
         c4:ce:1c:d9:08:55:88:ce:c6:03:d8:40:a5:8f:3a:81:9d:92:
         10:e6:1e:61:b2:d5:1e:8e:ee:4d:1c:cd:7f:d2:bf:ec:7e:65:
         96:96:cc:ba:91:64:eb:12:d4:b0:de:b7:f5:48:bd:c6:65:fe:
         7b:f6:d8:b1:67:ec:5c:61:cd:f5:d8:68:ff:5f:8e:d1:24:63:
         ff:bf:7c:07:49:f3:c0:bb:02:52:52:1b:51:63:9b:ed:87:76:
         d7:94:be:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:43:49 2026 by rpki-client