Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d31b4a7d-fdad-44f3-ad1b-35d470b481b6/c299c2ed-fc1b-3bb8-b23d-546ac1f961fd.roa
File:                     c299c2ed-fc1b-3bb8-b23d-546ac1f961fd.roa (raw, json)
Hash identifier:          GMmlKknj1xg2IKkg/exsM80xzCU87xCtnRnDaRtm5BY=
Subject key identifier:   47:E9:99:61:A9:4E:40:62:5E:DF:0C:75:15:D3:3A:89:C1:0D:1A:A3
Certificate issuer:       /CN=d31b4a7d-fdad-44f3-ad1b-35d470b481b6
Certificate serial:       010D0C9F4328584E37646CE591BC9716F5A08AC0
Authority key identifier: 79:2A:B5:D6:3F:8D:27:64:C3:F2:CC:12:4A:94:19:C4:9A:01:EF:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d31b4a7d-fdad-44f3-ad1b-35d470b481b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d31b4a7d-fdad-44f3-ad1b-35d470b481b6/c299c2ed-fc1b-3bb8-b23d-546ac1f961fd.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     396982
IP address blocks:        199.166.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d31b4a7d-fdad-44f3-ad1b-35d470b481b6/d31b4a7d-fdad-44f3-ad1b-35d470b481b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d31b4a7d-fdad-44f3-ad1b-35d470b481b6/d31b4a7d-fdad-44f3-ad1b-35d470b481b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d31b4a7d-fdad-44f3-ad1b-35d470b481b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:6c:e5:91:bc:97:16:f5:a0:8a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d31b4a7d-fdad-44f3-ad1b-35d470b481b6
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=e2ccb98b-0ab5-45d1-bbc7-fa96d5fe0220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f1:e9:66:ff:39:a0:44:3d:ba:32:c5:f3:80:
                    89:cc:34:2d:52:59:90:46:ba:7f:5c:47:dc:68:fc:
                    59:91:15:9b:98:5a:a3:92:d9:bd:5f:6f:92:32:25:
                    3a:04:fd:4b:e7:b6:2e:23:f5:0c:32:f5:4f:5d:c5:
                    1a:fa:20:e7:bc:88:f4:11:e0:b4:2b:bf:53:04:a6:
                    d4:0f:20:af:6d:ee:55:e7:19:f0:f4:49:bb:67:4f:
                    93:81:fb:15:e0:7e:1e:08:aa:87:80:07:e6:1a:58:
                    28:25:9d:b1:d6:69:70:54:64:0c:ec:13:07:17:cd:
                    65:ce:0f:6e:0f:19:f9:81:4b:d9:15:6e:84:ac:4b:
                    b6:ac:d2:14:08:0a:f1:c7:ff:54:06:de:ee:5b:a2:
                    76:ce:70:41:62:2d:8a:06:09:f1:17:dd:0c:11:e7:
                    27:da:d4:de:76:a1:25:4f:31:cf:d5:e0:d9:17:a8:
                    a9:ad:76:dd:60:10:8a:1d:a4:66:6e:33:46:84:9d:
                    ce:d0:13:eb:6c:2a:1e:2e:91:e9:68:5d:62:0e:a9:
                    73:b5:54:31:d3:f4:1e:2f:69:da:39:e4:aa:52:13:
                    5a:21:f9:6e:85:f5:62:14:40:90:fe:fd:66:8a:15:
                    cb:48:0f:ba:c0:cd:83:d5:ee:38:3e:8c:d9:77:dd:
                    26:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:E9:99:61:A9:4E:40:62:5E:DF:0C:75:15:D3:3A:89:C1:0D:1A:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d31b4a7d-fdad-44f3-ad1b-35d470b481b6/c299c2ed-fc1b-3bb8-b23d-546ac1f961fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d31b4a7d-fdad-44f3-ad1b-35d470b481b6/d31b4a7d-fdad-44f3-ad1b-35d470b481b6.crl

            X509v3 Authority Key Identifier:
                keyid:79:2A:B5:D6:3F:8D:27:64:C3:F2:CC:12:4A:94:19:C4:9A:01:EF:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d31b4a7d-fdad-44f3-ad1b-35d470b481b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.166.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:6d:7c:20:b7:05:e7:e4:f2:f5:61:65:07:47:5e:79:87:43:
         cd:4b:d1:5b:30:4f:d3:17:a0:ce:e5:43:56:bc:84:a5:87:a9:
         22:d7:0d:87:68:34:ca:bb:81:25:85:94:53:1b:46:25:b4:af:
         25:7b:b1:98:01:96:42:8c:a5:08:fd:ce:17:88:df:fc:e0:97:
         06:e2:48:5a:54:34:e1:e0:29:32:89:f8:59:d3:24:1e:eb:87:
         5f:85:32:8b:f1:45:58:fc:1b:a3:3f:cc:9b:a4:c7:21:05:68:
         e5:04:50:15:ab:6f:86:f5:95:eb:39:44:de:18:ab:32:e9:ff:
         10:b5:53:88:4d:55:ce:27:a3:bd:2f:8b:d9:8c:32:d8:30:58:
         49:20:4a:36:76:b1:cd:90:31:a6:62:2e:e2:ac:cc:f3:75:81:
         de:ae:d5:95:42:d3:05:9e:b7:bd:5c:e3:73:69:b1:c0:4e:f9:
         7a:ce:66:d8:fc:91:d0:b9:be:d2:f7:1e:76:6c:a8:e8:e6:7e:
         31:85:70:ed:16:85:ac:9a:b2:71:35:07:a2:9f:c0:2b:03:91:
         33:4a:3c:94:47:44:69:3b:a1:08:1d:24:ba:24:9f:d0:4a:c8:
         1f:cb:61:51:df:f4:86:61:1b:47:8f:55:07:36:5a:22:e6:a8:
         bd:f6:8a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 15:51:32 2026 by rpki-client