Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/90a0df23-8954-3b57-8143-deed024f3a7a.roa
File:                     90a0df23-8954-3b57-8143-deed024f3a7a.roa (raw, json)
Hash identifier:          sIBTAQzu4+Q7Hu3sFk9Wg+DTsXcje6agWP6Bx66NSFo=
Subject key identifier:   91:C3:54:EE:B3:4F:38:9C:A4:BA:0A:7C:E8:5E:6A:84:D5:C9:D7:34
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584F374D4F5C4D4ABB16A810F040
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/90a0df23-8954-3b57-8143-deed024f3a7a.roa
Signing time:             Fri 18 Sep 2026 13:00:12 +0000
ROA not before:           Fri 18 Sep 2026 13:00:12 +0000
ROA not after:            Thu 17 Dec 2026 14:00:12 +0000
asID:                     54113
IP address blocks:        199.232.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:4d:4f:5c:4d:4a:bb:16:a8:10:f0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep 18 13:00:12 2026 GMT
            Not After : Dec 17 14:00:12 2026 GMT
        Subject: CN=d64766c9-f86f-4c07-b24d-dfc255e04612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:5f:09:94:d6:38:f3:34:96:ec:6f:04:bd:9f:
                    e0:fb:09:2c:5f:ae:55:4b:d9:8c:e5:20:6d:38:f9:
                    77:20:7b:05:11:f4:b4:57:f0:19:74:42:bd:ec:9c:
                    01:89:a7:25:f9:cc:c9:f0:62:22:5d:00:08:78:3d:
                    31:93:02:1f:7a:9f:c1:c3:6f:52:76:31:b9:81:91:
                    a3:83:5d:81:be:1f:31:8a:2d:23:80:7c:39:92:c7:
                    7d:06:be:56:3b:5c:9b:cc:cc:6b:25:d3:6e:bf:b9:
                    ea:5d:c3:a6:0b:86:82:c2:15:7e:24:00:ee:1c:a1:
                    c9:65:72:66:20:e3:8c:09:66:c8:0a:6a:66:ff:df:
                    fd:ab:84:48:7b:85:72:72:3e:0c:21:08:98:80:ca:
                    eb:ed:1e:3c:f3:6b:43:d2:e0:36:f0:1a:de:45:d6:
                    94:e0:3f:d6:6d:16:3b:fa:23:82:c3:9d:15:60:35:
                    1d:ad:31:e1:4b:36:3c:91:1c:ca:7b:0d:5f:cd:1c:
                    43:a2:c9:97:4b:fc:9d:22:4e:30:9f:61:55:54:0d:
                    ef:12:f4:cb:45:28:de:75:36:2d:f6:76:58:dd:9a:
                    4d:b9:ca:81:f1:c5:2e:29:5b:a7:14:82:74:31:d5:
                    0f:2b:d0:60:25:ff:a2:f9:2f:ff:88:4d:d6:ea:88:
                    22:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C3:54:EE:B3:4F:38:9C:A4:BA:0A:7C:E8:5E:6A:84:D5:C9:D7:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/90a0df23-8954-3b57-8143-deed024f3a7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.232.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:44:de:8d:3d:d8:b3:15:90:ca:e3:0b:25:93:4a:cb:26:d1:
         67:8a:c5:33:7e:a0:4d:ec:89:8c:f8:73:f9:99:59:a4:38:2e:
         0c:3d:a0:01:f2:ef:41:bc:14:fa:1c:c9:02:76:88:80:d3:b2:
         07:77:d9:ae:61:11:68:45:9c:28:c5:67:93:a3:a3:1a:81:6d:
         1b:80:f2:ab:a3:bf:6d:70:da:e8:46:b3:21:7c:72:56:9c:62:
         73:da:4b:e7:b1:e2:fd:e6:ce:43:ee:ec:5d:a0:03:78:a0:d9:
         66:d5:f2:15:b3:af:09:17:14:92:cf:7e:33:ca:20:fc:95:f1:
         d6:0a:72:a1:31:34:89:46:9d:e9:ec:11:f0:93:32:d7:b8:1b:
         25:62:d9:5c:9d:9b:fc:4e:58:a5:94:04:0e:14:b9:1f:c1:9c:
         a4:48:f9:c8:82:f6:ff:2e:67:9f:90:53:73:55:d7:98:2c:89:
         1c:d2:b0:5b:46:fa:11:89:cf:8a:97:df:ab:b7:f2:ae:c0:de:
         39:36:a1:1b:7f:af:03:9e:f9:00:8b:08:d9:3d:ef:b5:09:b0:
         1e:87:89:9d:7c:f5:52:eb:d0:d1:be:3f:52:77:00:ee:ed:2f:
         8b:7b:c0:a5:8d:15:39:da:ab:cb:51:d2:13:a2:fa:0e:54:22:
         72:07:08:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:47:59 2026 by rpki-client