Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38/82be32f8-6a7c-3ac5-9559-807dea4ec27d.roa
File:                     82be32f8-6a7c-3ac5-9559-807dea4ec27d.roa (raw, json)
Hash identifier:          JD4BhMUNRIMYhsbDEXqpTevKKBQMmSuMOZ/Gd4L71GU=
Subject key identifier:   E9:FE:AF:DD:8A:71:52:12:FC:16:C5:51:EB:D0:F1:75:E1:43:CE:4A
Certificate issuer:       /CN=a856eb04-e27d-4da2-8c39-a38263828e38
Certificate serial:       010D0C9F4328584EF2E7707D0B19EDF5626C2100
Authority key identifier: 7A:DD:97:21:BB:C0:9A:10:69:15:FB:59:5D:D0:69:D7:A9:9A:79:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38/82be32f8-6a7c-3ac5-9559-807dea4ec27d.roa
Signing time:             Tue 25 Aug 2026 01:00:12 +0000
ROA not before:           Tue 25 Aug 2026 01:00:12 +0000
ROA not after:            Mon 23 Nov 2026 02:00:12 +0000
asID:                     11700
IP address blocks:        199.71.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38/a856eb04-e27d-4da2-8c39-a38263828e38.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38/a856eb04-e27d-4da2-8c39-a38263828e38.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f2:e7:70:7d:0b:19:ed:f5:62:6c:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a856eb04-e27d-4da2-8c39-a38263828e38
        Validity
            Not Before: Aug 25 01:00:12 2026 GMT
            Not After : Nov 23 02:00:12 2026 GMT
        Subject: CN=d3b1f024-ca53-4cc0-bb37-2707e6c881d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:db:4c:ca:0a:6b:2a:a6:be:71:7c:01:38:23:
                    22:56:cb:9d:5a:4f:a9:d5:39:9b:20:ba:7a:38:9f:
                    61:a6:44:67:c6:cb:35:9a:61:b4:77:8d:46:f8:31:
                    ba:15:ae:0f:9d:9e:6a:d0:1c:e6:53:13:c4:72:34:
                    ad:40:47:63:ce:f4:ac:7a:fe:38:11:0b:9b:2f:03:
                    c9:f7:a9:c2:2f:e5:5d:df:38:2a:ca:93:7d:2d:06:
                    10:b3:67:0d:78:84:37:fe:f0:4b:4b:83:83:1f:db:
                    ea:28:38:d8:70:d6:d9:01:1d:4b:5c:dd:0d:c2:73:
                    b9:2f:c2:f6:38:b2:20:6b:f9:eb:16:3b:51:93:2f:
                    21:9f:6d:bb:68:5b:2e:93:dc:90:f0:b2:c7:44:bb:
                    e9:81:15:1e:ec:4a:98:92:8c:1a:c0:56:ed:e9:24:
                    7c:e4:1f:5e:7a:c8:05:78:41:ba:19:fd:01:62:ea:
                    82:60:37:65:fa:ab:55:8c:56:2a:92:a3:1f:a9:30:
                    1d:6f:bd:81:ee:c8:f2:ed:e5:7c:0a:fa:15:1f:a5:
                    ea:e3:20:92:df:00:a9:dd:09:4c:80:02:6e:c8:64:
                    f5:bc:b5:93:ec:22:dc:86:7a:5a:3d:ee:db:e3:ca:
                    9b:7e:f9:4a:1e:a8:f0:0a:af:4d:7d:62:3b:89:a8:
                    e8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:FE:AF:DD:8A:71:52:12:FC:16:C5:51:EB:D0:F1:75:E1:43:CE:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38/82be32f8-6a7c-3ac5-9559-807dea4ec27d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38/a856eb04-e27d-4da2-8c39-a38263828e38.crl

            X509v3 Authority Key Identifier:
                keyid:7A:DD:97:21:BB:C0:9A:10:69:15:FB:59:5D:D0:69:D7:A9:9A:79:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.71.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:67:12:8d:ba:3e:9a:e3:e9:84:19:34:62:48:49:0b:b1:96:
         f0:b3:8c:3c:ff:18:c8:91:ae:95:7b:e5:bc:3a:2a:71:b3:7d:
         c0:29:ee:93:00:80:90:99:24:a8:fa:d8:12:35:fe:70:72:fa:
         db:bb:dd:bc:36:44:dd:68:04:49:cf:41:69:4d:ca:3c:af:c0:
         08:6d:98:b3:c1:1b:a5:be:7d:27:22:29:b5:0b:c4:cf:59:c8:
         5f:0c:da:a3:9a:23:28:6a:fd:dc:0a:e1:48:c8:d2:12:66:33:
         c9:15:f5:f6:32:51:51:13:a8:90:db:b6:f3:ed:b3:c5:72:a4:
         5e:35:b8:e6:61:e3:31:fc:14:d9:c7:5b:e4:3b:fa:e0:97:4a:
         32:86:db:91:ac:17:f7:35:29:c2:e4:78:e7:8b:3e:a9:77:dd:
         d0:19:a6:8a:15:c5:32:44:b0:06:23:7f:31:f3:89:be:f8:5c:
         c3:50:98:b7:9d:55:43:ea:dc:5c:53:6a:3a:c1:a2:d9:40:b7:
         51:5d:b3:f3:a3:e8:ec:8d:fd:35:fa:cb:97:25:81:45:69:eb:
         f3:4e:f1:92:13:a0:73:04:4a:bf:25:bf:b1:8f:76:ab:60:53:
         2b:91:16:69:06:03:45:20:84:8d:48:72:00:82:0d:1c:62:7a:
         b1:76:01:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 22:58:50 2026 by rpki-client