Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ed490fc3-0ec2-3ccd-8bcd-fc9942007083.roa
File:                     ed490fc3-0ec2-3ccd-8bcd-fc9942007083.roa (raw, json)
Hash identifier:          5sUOi3WAV5Eb7QX5oP2U4DdubWNZgrq3zE3Nww2BNlM=
Subject key identifier:   A4:B9:C3:89:39:F1:75:2A:1D:67:68:54:0E:EF:D3:A2:12:40:B6:33
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EBF9929A801D1035E3D14BAC0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ed490fc3-0ec2-3ccd-8bcd-fc9942007083.roa
Signing time:             Thu 06 Aug 2026 15:56:31 +0000
ROA not before:           Thu 06 Aug 2026 15:56:31 +0000
ROA not after:            Wed 04 Nov 2026 16:56:31 +0000
asID:                     25987
IP address blocks:        199.97.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bf:99:29:a8:01:d1:03:5e:3d:14:ba:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Aug  6 15:56:31 2026 GMT
            Not After : Nov  4 16:56:31 2026 GMT
        Subject: CN=2dc33305-4a5d-4936-9aae-ca35782aaacf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:00:39:cd:fd:63:5a:d9:4c:9a:c7:67:6f:74:
                    e0:98:a3:e0:09:50:7d:d2:b6:2e:78:d5:c5:42:2a:
                    46:60:54:72:11:b8:05:e2:8b:e5:5b:ce:bd:e3:12:
                    71:53:78:71:35:1d:c4:92:e2:bb:a5:d9:f9:e0:96:
                    bf:41:db:0f:b9:f9:61:cb:06:1f:5d:80:c1:bc:3d:
                    b3:60:88:21:dd:95:20:ee:38:b1:36:d4:01:b7:bd:
                    ec:28:82:0a:24:2e:24:89:37:b5:8f:2c:8e:6a:52:
                    c4:51:3d:b9:6b:41:d5:fe:fa:6d:9b:32:c2:1c:af:
                    f9:97:09:8d:67:37:0a:bc:28:a5:db:67:33:12:a3:
                    54:47:16:5e:be:2f:44:99:e1:f0:1a:fb:d5:95:1e:
                    39:c5:e5:38:ef:f1:56:9e:fd:17:11:cc:7c:23:27:
                    84:3a:d0:b3:08:1c:52:2a:6d:05:3d:0d:ad:b7:a0:
                    58:d5:c5:3b:e0:4f:87:73:c2:fa:dc:ec:5e:10:b3:
                    08:a4:44:6f:08:0f:f0:1b:c4:34:5a:2a:cf:90:18:
                    af:66:65:73:a3:f4:fd:32:0f:de:e6:b5:1f:2a:20:
                    b5:f3:9b:fc:af:a9:59:97:b1:34:60:e9:b6:cd:4e:
                    5c:b9:e5:5d:78:7c:d0:92:3a:bc:ff:34:32:0e:c4:
                    8e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B9:C3:89:39:F1:75:2A:1D:67:68:54:0E:EF:D3:A2:12:40:B6:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ed490fc3-0ec2-3ccd-8bcd-fc9942007083.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.97.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:68:0b:25:52:26:6a:4e:c9:74:7a:04:3a:32:14:ef:a8:e1:
         eb:60:d0:e6:c6:f8:c4:c8:5b:3e:a3:ae:7b:85:cc:9d:a9:88:
         c7:26:b4:94:fc:f4:5a:bf:c4:ee:a2:cf:12:61:80:54:09:d2:
         a4:b0:eb:2e:02:51:8d:c2:bc:78:4d:e2:75:3c:0a:f8:18:3d:
         3b:ea:47:d5:36:90:42:50:78:61:e7:d4:9a:06:df:f8:1b:09:
         7e:94:25:a3:69:f6:d4:5b:0a:16:9e:60:51:9b:ea:a1:8b:31:
         65:71:2e:94:d8:5a:2c:8f:8e:ab:ff:85:7a:1f:34:8e:87:7c:
         6a:23:28:eb:a1:f7:ba:d2:fa:57:c9:f8:38:d8:0d:7c:d2:5c:
         73:9f:36:68:67:14:a8:0f:9e:89:ed:9b:a8:32:73:6f:c4:e6:
         1e:05:ed:52:d1:3a:73:fa:a9:3a:f8:cc:85:23:5c:b3:c1:9a:
         39:81:10:a2:80:1f:dd:84:63:76:ec:5f:a4:82:02:ab:45:a4:
         f2:ce:75:49:3e:cc:7a:db:85:c5:1a:26:0f:97:39:d6:cc:87:
         03:e4:f9:8f:38:ee:25:bc:89:94:bc:ba:51:9d:43:54:11:13:
         d1:e2:c6:f8:e6:ea:c9:70:42:09:83:72:a0:39:05:53:19:e3:
         63:29:65:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:05:12 2026 by rpki-client