Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/264b3f1b-91c0-3e8b-9c8f-598dcc635719.roa
File:                     264b3f1b-91c0-3e8b-9c8f-598dcc635719.roa (raw, json)
Hash identifier:          cYW+pC3kipVlUPVK9gdLHXvuPmda9Am92qleSNFVF8c=
Subject key identifier:   E0:1D:41:F3:7B:B5:40:9B:04:32:2A:67:C2:29:5A:E0:5B:56:A3:B3
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EFA4B194EA95CE2368EA7309C
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/264b3f1b-91c0-3e8b-9c8f-598dcc635719.roa
Signing time:             Thu 27 Aug 2026 16:31:55 +0000
ROA not before:           Thu 27 Aug 2026 16:31:55 +0000
ROA not after:            Wed 25 Nov 2026 17:31:55 +0000
asID:                     0
IP address blocks:        199.29.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fa:4b:19:4e:a9:5c:e2:36:8e:a7:30:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Aug 27 16:31:55 2026 GMT
            Not After : Nov 25 17:31:55 2026 GMT
        Subject: CN=44347794-78f9-4a65-a391-991ed7485744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:47:f8:b4:ab:3c:74:90:b2:04:ba:58:58:42:
                    37:3a:11:52:7f:06:52:74:16:91:12:e6:fb:7d:f8:
                    00:d2:2c:58:fd:aa:c0:e6:4e:dc:d1:4c:f8:af:fd:
                    4f:27:d5:2c:40:db:83:d9:51:9b:10:33:a0:93:93:
                    ee:e5:6e:9e:d9:9b:34:fd:1f:c1:9b:a5:2c:bf:d6:
                    1d:a9:f3:9d:d9:53:7e:1e:86:49:5e:67:97:60:cb:
                    bd:4d:d6:f8:44:ff:1f:21:d8:cd:a2:bd:5b:db:bf:
                    23:5f:76:7a:76:39:e8:27:ff:c5:be:b4:65:ea:30:
                    0a:2c:3b:1f:7a:af:f3:bf:0c:e3:2a:28:32:29:76:
                    f9:27:2e:51:41:2a:aa:f3:5b:45:2a:6f:7d:99:4e:
                    76:00:ec:d5:4f:cc:a3:fc:0b:e3:1e:53:a3:5c:c5:
                    92:8a:a5:24:f9:01:19:4e:b1:8b:1a:e9:6d:1c:57:
                    f4:df:d1:5a:8c:de:2e:dc:fd:84:77:e0:70:3f:c4:
                    fd:59:99:7a:b8:61:0c:d9:c0:18:57:ea:bb:69:53:
                    01:75:15:c7:52:fd:b4:0b:37:bb:6d:8e:20:11:5d:
                    a8:1b:5d:82:1c:ef:2a:bd:b4:8c:15:86:4c:3c:36:
                    12:fb:0c:b6:cd:30:11:43:c6:fe:6d:67:d6:e6:18:
                    86:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:1D:41:F3:7B:B5:40:9B:04:32:2A:67:C2:29:5A:E0:5B:56:A3:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/264b3f1b-91c0-3e8b-9c8f-598dcc635719.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.29.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:d0:58:1b:ba:e1:a6:19:5e:a1:81:04:ef:5e:ad:cf:19:c4:
         bd:bf:9a:41:04:69:ed:b2:b5:45:5d:7e:26:af:55:4a:e0:e1:
         d6:f2:54:0b:5c:1f:d9:b8:14:50:9f:62:56:17:ae:cf:9e:f7:
         05:8d:84:aa:d2:e6:74:6a:2a:51:bb:9c:ed:dc:66:68:91:97:
         0b:14:c1:d5:0f:d9:15:e4:71:52:52:90:b9:b0:b9:cc:01:51:
         25:c3:a3:df:6c:48:24:f4:be:a3:d3:9e:04:1c:5e:8f:6c:96:
         43:e2:7d:30:8b:2b:3f:00:9f:92:6f:4a:7d:bd:fa:b5:4c:fb:
         40:39:2a:ba:e5:65:60:97:5e:9d:d9:76:2c:cb:c7:ff:f4:b5:
         77:fc:bf:04:b5:68:26:aa:fc:43:3e:b8:5f:a1:5b:22:4f:4c:
         01:54:2e:61:03:11:04:cc:ff:94:a9:fa:f6:8f:21:75:90:db:
         eb:66:61:a9:17:a2:14:39:63:e9:26:c8:98:a1:e4:5e:a8:e2:
         ba:3f:75:42:f7:94:09:0e:44:61:15:0c:e2:ea:68:fa:77:06:
         57:84:87:de:28:68:47:2c:09:96:4a:53:37:20:f0:d9:b6:2c:
         ec:99:88:93:3d:31:5c:2d:13:24:6d:82:97:e6:c5:e9:18:7b:
         fb:09:bc:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:07:59 2026 by rpki-client