Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1043217-41b2-4089-81fc-42bf08d56223/0bc8b80a-9fc2-3fb0-821e-098ead48379a.roa
File:                     0bc8b80a-9fc2-3fb0-821e-098ead48379a.roa (raw, json)
Hash identifier:          0hv5KkrHoXTbYg+qzJxkDLIZ8NyxCkOEvt6uCTHMtG4=
Subject key identifier:   4E:88:80:CE:AB:84:C3:E2:AA:27:A3:C5:50:1A:93:AD:F3:EA:86:45
Certificate issuer:       /CN=d1043217-41b2-4089-81fc-42bf08d56223
Certificate serial:       010D0C9F4328584EA7998B0F51C7B535B6E2D440
Authority key identifier: F4:14:AD:6B:33:7F:59:4C:9F:0D:B0:10:E0:A9:A9:C3:FE:96:73:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1043217-41b2-4089-81fc-42bf08d56223.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1043217-41b2-4089-81fc-42bf08d56223/0bc8b80a-9fc2-3fb0-821e-098ead48379a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     401798
IP address blocks:        199.241.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1043217-41b2-4089-81fc-42bf08d56223/d1043217-41b2-4089-81fc-42bf08d56223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1043217-41b2-4089-81fc-42bf08d56223/d1043217-41b2-4089-81fc-42bf08d56223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1043217-41b2-4089-81fc-42bf08d56223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:99:8b:0f:51:c7:b5:35:b6:e2:d4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1043217-41b2-4089-81fc-42bf08d56223
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f05faf5c-cdb9-481d-86e1-ba94f5d0f476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ee:8b:62:2e:b0:93:7e:0f:fb:67:b3:d4:58:
                    3b:58:79:44:59:ba:fd:48:27:02:4d:b2:8a:ac:a4:
                    48:14:00:9f:94:cd:3c:b1:65:d1:35:1b:00:7e:4b:
                    31:77:7e:ae:ee:f4:c1:ad:c0:fb:bd:65:bd:91:2e:
                    9c:bc:e3:29:b2:d7:c3:7b:12:d9:0f:c7:3d:98:42:
                    aa:dc:bf:8f:c5:dc:e1:e9:7a:0d:52:36:33:92:86:
                    e7:e0:3c:9a:3a:40:6a:e9:21:00:d7:9d:e8:b7:b9:
                    03:a9:bb:63:be:ee:dd:32:14:f0:4d:fc:88:3c:95:
                    c3:23:09:9a:ed:4a:e0:66:36:da:8c:79:bf:42:71:
                    cb:2c:b3:8e:ff:db:e1:13:5f:ae:18:2a:fd:b3:09:
                    64:c3:64:c1:f0:c8:02:dd:f5:32:f6:78:e2:28:0c:
                    2b:64:b4:43:12:e7:9f:53:cd:2e:62:8a:0b:82:e5:
                    fd:80:58:aa:cd:16:8b:dd:d8:de:2b:3a:51:c3:8d:
                    8e:7c:17:10:3e:a8:a4:01:48:73:75:ec:69:50:c7:
                    81:ed:9c:d9:78:63:d1:82:a7:53:ae:cb:93:5e:fa:
                    2e:ee:cc:b5:58:85:6b:e5:9f:4b:c1:b8:39:39:83:
                    35:25:d0:91:ad:8d:b5:d1:45:02:96:4a:72:cc:de:
                    15:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:88:80:CE:AB:84:C3:E2:AA:27:A3:C5:50:1A:93:AD:F3:EA:86:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1043217-41b2-4089-81fc-42bf08d56223/0bc8b80a-9fc2-3fb0-821e-098ead48379a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1043217-41b2-4089-81fc-42bf08d56223/d1043217-41b2-4089-81fc-42bf08d56223.crl

            X509v3 Authority Key Identifier:
                keyid:F4:14:AD:6B:33:7F:59:4C:9F:0D:B0:10:E0:A9:A9:C3:FE:96:73:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d1043217-41b2-4089-81fc-42bf08d56223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.241.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:d0:6a:ba:d5:0f:08:43:63:78:79:de:18:9e:12:88:7d:40:
         06:39:45:3f:f3:0b:1b:9f:89:4e:9e:19:a9:7e:0c:9c:d3:1b:
         fd:6f:a0:24:ed:da:a8:be:9f:d5:73:dd:30:6a:88:b5:7e:3b:
         62:d5:7b:ad:ca:bc:26:6a:34:b8:48:df:a1:c1:54:24:53:a5:
         88:6f:45:9b:e0:8f:9e:35:77:e1:83:8a:81:ea:37:9e:30:11:
         bb:8d:05:85:4b:63:ae:1f:42:30:a2:c8:77:c1:94:de:e9:49:
         a8:60:40:3c:57:4b:da:85:d7:3c:02:69:8e:7e:0a:1a:f6:03:
         53:39:7c:b2:49:79:8a:b9:ae:6f:b7:7f:ee:5f:e0:90:3b:f3:
         3d:17:3a:f2:73:0c:f9:0d:2f:8b:29:99:22:57:d8:c1:18:c3:
         94:a9:37:3d:a1:ca:5a:1c:13:32:19:a8:f2:91:b7:0b:cc:bc:
         be:91:3d:86:35:8e:ff:df:7f:ab:5a:40:d1:04:a9:b0:00:e1:
         55:19:ac:dd:c9:d6:c0:00:c7:16:51:e2:ed:45:c3:3e:8c:92:
         3a:52:b5:eb:ad:b2:a7:60:fd:38:01:74:85:bc:af:0e:ec:5f:
         ac:bf:6a:dd:62:ff:e0:a5:4d:07:6b:d2:37:74:c9:f4:4d:73:
         c5:a6:78:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:53:23 2026 by rpki-client