Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/710050be-c8f6-4aa8-844f-f652a7f527e6/91d5ba30-c64e-3d05-aa4b-8c9671236e20.roa
File:                     91d5ba30-c64e-3d05-aa4b-8c9671236e20.roa (raw, json)
Hash identifier:          4EvA+U6a1VMTWWK28pX45HijhHjxjAjhPVVIGKgoAZQ=
Subject key identifier:   D2:78:2E:1A:93:5E:BE:0B:C7:E2:38:54:0C:BA:E7:0C:40:BA:AA:B3
Certificate issuer:       /CN=710050be-c8f6-4aa8-844f-f652a7f527e6
Certificate serial:       010D0C9F4328584D6D7512C601F8B2348203F640
Authority key identifier: 24:EE:03:CA:BD:9E:EE:67:23:46:2A:74:8E:14:6C:9D:3F:AC:1F:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/710050be-c8f6-4aa8-844f-f652a7f527e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/710050be-c8f6-4aa8-844f-f652a7f527e6/91d5ba30-c64e-3d05-aa4b-8c9671236e20.roa
Signing time:             Tue 07 Apr 2026 13:00:30 +0000
ROA not before:           Tue 07 Apr 2026 13:00:30 +0000
ROA not after:            Mon 06 Jul 2026 13:00:30 +0000
asID:                     53610
IP address blocks:        199.116.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/710050be-c8f6-4aa8-844f-f652a7f527e6/710050be-c8f6-4aa8-844f-f652a7f527e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/710050be-c8f6-4aa8-844f-f652a7f527e6/710050be-c8f6-4aa8-844f-f652a7f527e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/710050be-c8f6-4aa8-844f-f652a7f527e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Apr 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:75:12:c6:01:f8:b2:34:82:03:f6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=710050be-c8f6-4aa8-844f-f652a7f527e6
        Validity
            Not Before: Apr  7 13:00:30 2026 GMT
            Not After : Jul  6 13:00:30 2026 GMT
        Subject: CN=ddd0c0c3-7ed6-41fc-9a00-d7897e81a9c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8b:50:cb:f7:c0:54:71:e8:45:3b:96:14:74:
                    b2:6e:ee:8c:12:3c:74:6d:30:4c:e6:1e:3b:6b:00:
                    b6:6a:7d:13:4b:e4:29:f1:d9:a6:87:ab:c9:c2:70:
                    fb:79:19:33:25:01:00:7c:a8:5c:4f:0d:09:e3:0e:
                    d7:72:43:77:95:6a:c2:3a:f1:2a:3f:40:70:a0:96:
                    1e:91:9f:14:28:c8:32:b7:c3:2d:bf:41:70:19:46:
                    d0:8e:64:92:e8:5c:bd:7f:b1:54:97:32:be:f1:99:
                    ad:af:43:b9:e6:6e:37:00:c2:73:76:0a:25:14:7e:
                    f1:42:65:3a:de:49:e1:48:b6:ed:33:11:41:ca:a9:
                    98:ab:46:38:99:81:fe:9c:61:15:da:62:9e:9d:d2:
                    5f:e6:fd:51:c0:d1:ca:2e:a0:b4:59:b1:d6:74:5b:
                    5c:7b:8e:7c:be:27:81:a0:40:04:14:9e:59:b2:c6:
                    d2:7a:9c:65:60:a8:12:f9:28:0e:e9:b5:4d:5d:b8:
                    39:cd:ac:88:02:53:f5:95:1d:d0:b4:dc:9a:fc:4b:
                    2d:60:2e:56:90:63:72:c2:e6:d6:a9:4a:f4:f9:64:
                    4a:99:c5:ee:25:b1:84:db:19:c3:35:33:5b:5c:95:
                    f6:fc:12:de:50:fa:fa:9c:51:66:38:bb:fc:dd:6e:
                    77:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:78:2E:1A:93:5E:BE:0B:C7:E2:38:54:0C:BA:E7:0C:40:BA:AA:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/710050be-c8f6-4aa8-844f-f652a7f527e6/91d5ba30-c64e-3d05-aa4b-8c9671236e20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/710050be-c8f6-4aa8-844f-f652a7f527e6/710050be-c8f6-4aa8-844f-f652a7f527e6.crl

            X509v3 Authority Key Identifier:
                keyid:24:EE:03:CA:BD:9E:EE:67:23:46:2A:74:8E:14:6C:9D:3F:AC:1F:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/710050be-c8f6-4aa8-844f-f652a7f527e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.116.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:2b:89:f3:cd:3c:e9:6a:2a:19:15:64:46:aa:5a:41:e1:38:
         4d:37:38:47:98:5c:5d:cb:f4:9b:24:4c:7a:1e:a9:ef:ef:d7:
         b3:66:2a:89:01:d4:1e:81:49:e5:e4:d8:2f:8e:71:d4:fe:86:
         89:85:7f:3d:91:d7:1c:fe:d4:9b:28:f6:64:8d:4d:d4:81:b7:
         37:ca:94:5b:58:4d:b6:12:92:d3:9f:67:ba:fd:c3:28:25:29:
         56:41:8e:5b:a7:16:c8:42:e8:53:7a:90:de:06:19:70:38:28:
         4a:40:c7:18:e9:4c:f8:1a:70:f2:c6:a0:84:53:18:85:66:28:
         d4:58:d1:22:2e:8b:c0:01:22:d3:8d:44:e4:6c:ab:9b:98:7d:
         a0:7f:66:ed:2c:39:f8:d7:85:c1:52:b5:d8:07:2d:70:a2:b5:
         d0:d1:ea:0e:02:7c:74:df:0a:20:30:03:18:e1:cd:71:b5:6f:
         ee:17:2c:a2:0f:9d:8b:b2:e5:89:7e:5e:0f:fd:25:fd:35:a8:
         84:15:36:b0:97:ed:ff:8f:1a:b6:40:cb:38:77:59:7b:0f:6e:
         a4:b4:52:6b:60:3b:28:d8:f1:fe:39:43:bb:51:c2:d2:b6:96:
         c7:96:2f:9d:1b:b5:32:27:60:56:6c:0f:0c:55:d4:1e:45:7e:
         ed:9f:c0:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:10:20 2026 by rpki-client