Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d04b3221-0f02-460e-b2ff-6c56b0392ea6/71d8d59c-ca99-34a4-b76b-bd2249a55dcf.roa
File:                     71d8d59c-ca99-34a4-b76b-bd2249a55dcf.roa (raw, json)
Hash identifier:          +Ir357fWaSCAmLXLipaH7a5xvOCyuRxySuRTePvNABU=
Subject key identifier:   78:94:DC:F8:A3:F1:30:3C:E9:9E:F1:7A:A6:7E:EF:08:72:9B:D4:FE
Certificate issuer:       /CN=d04b3221-0f02-460e-b2ff-6c56b0392ea6
Certificate serial:       010D0C9F4328584F498A040E8F886E50D454B740
Authority key identifier: 11:76:27:91:FC:EF:4D:4E:3F:73:83:14:90:3B:CC:2E:F5:5D:00:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d04b3221-0f02-460e-b2ff-6c56b0392ea6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d04b3221-0f02-460e-b2ff-6c56b0392ea6/71d8d59c-ca99-34a4-b76b-bd2249a55dcf.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     10558
IP address blocks:        199.19.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d04b3221-0f02-460e-b2ff-6c56b0392ea6/d04b3221-0f02-460e-b2ff-6c56b0392ea6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d04b3221-0f02-460e-b2ff-6c56b0392ea6/d04b3221-0f02-460e-b2ff-6c56b0392ea6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d04b3221-0f02-460e-b2ff-6c56b0392ea6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 25 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:04:0e:8f:88:6e:50:d4:54:b7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d04b3221-0f02-460e-b2ff-6c56b0392ea6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=4e3959d4-0c74-420a-a6e4-ff3c35b62f22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:43:1e:80:e2:e9:e9:25:82:49:f1:4a:e6:65:
                    3b:cb:a3:90:5b:8e:d3:15:9e:0b:34:c9:19:2b:36:
                    4c:12:6c:75:bc:1d:f3:df:69:67:ef:4e:33:71:a5:
                    fa:46:e9:60:bd:75:e1:f6:d9:51:82:74:c8:49:f4:
                    87:ae:ce:17:5a:b7:2d:f6:a7:9d:09:2b:5b:06:34:
                    2f:c4:7c:2a:d6:c1:57:9f:6f:b5:7c:9a:bd:0b:a0:
                    f4:8e:37:6a:06:81:c3:0e:85:7a:1c:5f:91:44:1a:
                    bc:7b:a0:d1:c4:3b:ca:6d:d8:d0:a4:28:de:80:07:
                    f9:c3:ca:2a:2d:b2:bc:c3:94:9e:8f:9d:d1:2d:e3:
                    eb:a9:48:94:e7:ed:60:a2:d9:a8:76:55:f9:ee:bf:
                    b3:18:69:2c:3e:5d:36:74:a7:8a:fb:78:c0:4d:3f:
                    ef:b0:9c:0e:84:2c:f7:ae:34:5a:19:95:4a:11:33:
                    b2:58:e6:94:8a:97:09:7f:0f:4d:a3:7d:68:b1:f6:
                    1d:81:81:91:2f:38:a1:5d:74:53:0b:75:68:a9:0d:
                    7d:43:c4:09:70:b6:6b:bb:3e:6c:13:5d:4e:23:4f:
                    71:d4:e3:26:0b:6f:f1:6e:8e:83:6a:1d:2a:36:27:
                    5c:76:fb:ff:3d:43:50:cc:30:73:19:97:ff:1c:66:
                    a5:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:94:DC:F8:A3:F1:30:3C:E9:9E:F1:7A:A6:7E:EF:08:72:9B:D4:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d04b3221-0f02-460e-b2ff-6c56b0392ea6/71d8d59c-ca99-34a4-b76b-bd2249a55dcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d04b3221-0f02-460e-b2ff-6c56b0392ea6/d04b3221-0f02-460e-b2ff-6c56b0392ea6.crl

            X509v3 Authority Key Identifier:
                keyid:11:76:27:91:FC:EF:4D:4E:3F:73:83:14:90:3B:CC:2E:F5:5D:00:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d04b3221-0f02-460e-b2ff-6c56b0392ea6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.19.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:63:ba:46:e0:d6:f9:cb:60:a4:73:3d:44:aa:ed:c1:b4:55:
         0a:64:12:8a:fa:3f:8a:a5:37:44:1d:8e:53:95:c0:4e:d4:c3:
         51:70:6e:af:27:ac:c6:44:0a:27:70:0e:59:8f:18:d2:55:8e:
         98:d4:db:06:cf:30:3c:9b:9a:a6:bd:2f:07:03:5e:a8:68:bc:
         0d:23:72:15:34:07:25:05:4c:30:08:73:5f:38:16:9b:ec:c0:
         40:29:c8:7a:f2:c9:36:5d:2b:14:fd:af:b3:2c:5e:31:4e:e8:
         54:15:25:b5:6c:bf:e9:ee:a7:2b:6f:c6:9a:e8:30:6e:1f:ba:
         ee:47:5f:b8:50:bf:af:ab:78:a5:a9:37:96:3a:6b:93:57:b3:
         8e:48:4a:eb:ad:24:4b:d2:11:a3:b3:2f:c1:2a:ec:91:fb:23:
         02:d8:9c:25:36:df:9e:b3:72:5e:cd:36:bf:47:7d:ec:a6:70:
         3d:70:6e:7b:fe:8d:f9:1f:04:e8:2d:d2:9d:2c:aa:04:41:c9:
         e2:57:75:08:6e:ad:bd:60:48:7b:35:a2:bd:4a:10:02:ae:9e:
         e9:86:7e:47:d7:8c:eb:25:83:33:ed:eb:cd:b9:33:10:92:11:
         40:de:64:d0:ec:e9:8e:59:be:79:b9:b3:45:c8:b1:f2:f9:aa:
         c5:ca:5e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 22:57:16 2026 by rpki-client