Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c/32de8776-7da6-39ab-8c75-af0061da0ba0.roa
File:                     32de8776-7da6-39ab-8c75-af0061da0ba0.roa (raw, json)
Hash identifier:          c/+QxQF29Ck/vG5kTvbEkuBk1TkZ1MUPlYG7lVPmp7w=
Subject key identifier:   D6:FF:94:F3:63:11:33:18:FA:A3:DB:E4:EA:0E:5C:0E:4E:E2:78:1F
Certificate issuer:       /CN=cce65795-3b77-4225-98f0-89e8bfcf275c
Certificate serial:       010D0C9F4328584EDF5C8F018ADC903162D462C0
Authority key identifier: 3D:C6:5C:AD:F9:44:55:92:95:C0:A5:6C:92:74:3F:00:6A:72:8B:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c/32de8776-7da6-39ab-8c75-af0061da0ba0.roa
Signing time:             Tue 18 Aug 2026 01:00:12 +0000
ROA not before:           Tue 18 Aug 2026 01:00:12 +0000
ROA not after:            Mon 16 Nov 2026 02:00:12 +0000
asID:                     11826
IP address blocks:        199.15.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c/cce65795-3b77-4225-98f0-89e8bfcf275c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c/cce65795-3b77-4225-98f0-89e8bfcf275c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:df:5c:8f:01:8a:dc:90:31:62:d4:62:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cce65795-3b77-4225-98f0-89e8bfcf275c
        Validity
            Not Before: Aug 18 01:00:12 2026 GMT
            Not After : Nov 16 02:00:12 2026 GMT
        Subject: CN=8f56bc4c-372f-4241-909e-64c5b23e308a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f0:03:5a:90:ba:26:ec:91:93:03:c7:b8:24:
                    69:26:84:ff:3c:82:4e:b1:ba:f4:49:94:4f:98:9a:
                    e2:c0:b9:70:f4:46:88:b6:f6:fe:14:66:17:f7:c6:
                    72:72:25:0d:0c:3e:02:8b:b5:41:52:f8:4e:a7:36:
                    73:1f:bb:57:3d:99:81:94:10:24:74:28:62:f8:84:
                    8c:ec:52:17:ac:72:e0:61:7b:40:34:25:ee:8d:7d:
                    cd:c3:a6:eb:a1:c3:6c:9d:2a:fa:e0:5b:60:bf:00:
                    d3:47:df:27:d2:84:0e:79:8d:be:47:56:13:e1:94:
                    3b:8e:4e:74:b5:bc:fd:5d:c3:bd:47:f3:6b:d8:dc:
                    66:f2:9f:b5:46:08:58:28:eb:43:08:ae:11:73:c8:
                    6f:ee:22:d5:6e:4f:9a:7f:23:f0:67:70:f5:ca:5a:
                    10:da:cb:df:1c:42:23:f2:ca:b7:c4:98:0d:f2:55:
                    cf:bd:f1:7b:55:f7:8e:96:71:cd:ab:9a:28:30:ad:
                    8f:13:1a:05:c4:2e:93:9d:ce:39:b0:4f:85:3f:1f:
                    0b:37:5b:d3:3b:f1:48:af:3d:26:95:8c:a3:8f:3b:
                    37:6a:67:7a:fa:bc:00:a2:f9:45:5a:86:2c:2c:62:
                    a7:ac:7f:8a:c9:2e:58:63:e6:54:70:5b:20:e4:8f:
                    b0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:FF:94:F3:63:11:33:18:FA:A3:DB:E4:EA:0E:5C:0E:4E:E2:78:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c/32de8776-7da6-39ab-8c75-af0061da0ba0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c/cce65795-3b77-4225-98f0-89e8bfcf275c.crl

            X509v3 Authority Key Identifier:
                keyid:3D:C6:5C:AD:F9:44:55:92:95:C0:A5:6C:92:74:3F:00:6A:72:8B:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.15.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:2c:78:e7:63:2a:ca:0c:32:60:64:3e:53:9e:84:5a:5f:5d:
         af:68:a5:06:c4:73:0f:36:e4:9c:34:a2:e6:04:ad:7f:8b:cb:
         6e:41:1c:12:22:76:e9:84:c3:fa:93:9e:cc:da:82:83:11:1e:
         41:5d:43:3b:23:c0:bd:99:7b:96:79:9a:c7:0f:49:0c:f6:e2:
         13:4a:31:22:6e:62:27:80:7a:9a:02:81:21:08:53:18:be:e0:
         58:5b:c9:6f:f8:1b:2b:53:2b:13:b0:37:7b:e0:5c:81:33:2e:
         4b:e0:d7:30:e1:e0:ea:02:0a:95:99:49:78:19:35:6a:a8:de:
         d1:5e:62:22:21:04:4a:32:ea:56:cf:32:1f:88:b8:6c:1a:3a:
         66:6a:d1:e0:36:c0:f1:2a:42:04:1c:5f:84:8b:3a:7b:8c:ce:
         be:2e:74:fd:a6:cf:e7:92:e3:71:85:40:47:42:12:cc:67:7d:
         7e:f4:c4:8a:92:a6:24:f9:44:9f:cf:f5:a1:25:d6:19:a4:1b:
         be:e4:47:a1:f9:c2:38:b7:84:fb:a4:0c:03:85:9b:fb:1c:ec:
         41:05:e7:7e:02:c5:ac:ab:8d:69:d5:2f:bc:df:0b:81:a8:72:
         98:b5:1d:aa:a6:1a:28:99:18:bf:8b:60:4d:3e:8b:13:70:7a:
         db:48:c1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 14:23:42 2026 by rpki-client