Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/dc442485-e1e1-32df-b067-e09e5cdece8f.roa
File:                     dc442485-e1e1-32df-b067-e09e5cdece8f.roa (raw, json)
Hash identifier:          7jxh5d2O8X9SoPzV9svx8aM99BoEZ+ceHhzw7P+Qpuc=
Subject key identifier:   71:AF:69:DF:D5:33:F7:5B:12:C2:C1:19:07:C5:FA:2C:8F:6F:4A:F1
Certificate issuer:       /CN=5d1f7581-692a-467e-ae71-d3c4921d0765
Certificate serial:       010D0C9F4328584EC7A1C88A21AB2184FB2D5580
Authority key identifier: FC:4F:B0:55:3F:45:E2:8B:81:B6:D2:90:B2:34:BC:DD:04:70:25:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/dc442485-e1e1-32df-b067-e09e5cdece8f.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     1299
IP address blocks:        199.83.232.0/23 maxlen: 23
                          199.83.232.0/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:c8:8a:21:ab:21:84:fb:2d:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d1f7581-692a-467e-ae71-d3c4921d0765
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=2b821dcd-8c40-475e-aff3-20b056bc4402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:90:6f:16:c2:b9:ec:eb:d6:34:88:d9:9e:f5:
                    12:ca:99:eb:ce:0e:d0:26:4e:24:8a:2e:88:c6:8b:
                    3c:ef:77:00:77:3d:95:69:00:77:c0:c7:47:25:cb:
                    33:d9:87:d9:23:3e:fa:e4:06:cf:84:a3:25:61:ba:
                    31:47:d2:27:47:93:46:54:8b:5c:6b:36:f5:95:88:
                    13:04:1d:bd:42:61:fe:b0:a1:cf:87:e2:69:4f:0f:
                    ee:3a:ee:15:54:21:b7:e6:a2:b0:46:fe:e4:90:d0:
                    d6:3e:a2:15:be:b4:ba:28:94:38:02:66:0a:79:a1:
                    06:5b:43:7d:60:47:55:60:90:36:6b:28:24:e7:80:
                    3e:eb:34:88:30:21:ae:b9:42:57:45:f2:ea:64:58:
                    a4:09:cb:28:8b:f5:20:6b:32:95:99:ae:0a:5e:a3:
                    e8:8c:65:d2:f6:9b:5d:b4:0e:87:6f:fe:f0:37:ca:
                    21:e8:fb:30:91:1b:b5:dc:b9:40:f0:95:1f:ee:24:
                    c8:9e:23:d3:d2:57:fc:5c:44:d3:f1:76:d1:6f:8b:
                    6c:a0:bf:7a:74:15:01:73:a1:22:ea:d9:f7:eb:09:
                    35:82:d7:77:75:d3:78:66:51:07:9e:6e:61:bb:30:
                    1e:f1:a8:26:6c:7a:55:4d:09:67:13:5f:2d:a8:f9:
                    b2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:AF:69:DF:D5:33:F7:5B:12:C2:C1:19:07:C5:FA:2C:8F:6F:4A:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/dc442485-e1e1-32df-b067-e09e5cdece8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.crl

            X509v3 Authority Key Identifier:
                keyid:FC:4F:B0:55:3F:45:E2:8B:81:B6:D2:90:B2:34:BC:DD:04:70:25:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.83.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:18:db:9f:94:bb:e1:e4:ad:0f:e9:a5:3d:ba:a2:60:79:0e:
         65:c7:95:db:66:2a:fe:d6:95:e9:f5:b8:a1:73:91:1d:2d:a2:
         c1:36:32:fa:26:72:d4:56:53:9a:80:d7:93:6f:14:c3:0a:25:
         03:bf:f8:a2:e7:dd:99:07:c7:dc:50:d5:ea:7a:ed:40:45:f4:
         7b:f9:4d:1c:a2:2a:6a:db:0f:9b:de:8c:59:41:7b:98:cf:48:
         4e:b2:16:72:69:79:94:58:76:d5:d8:f5:be:a6:a4:aa:88:21:
         bb:35:1b:cf:ec:ce:e5:79:5e:6d:4d:94:ac:20:c5:6a:5a:ef:
         74:44:38:a4:79:b1:d2:3b:8a:f3:e8:fc:37:22:b0:69:70:32:
         8a:d6:00:4f:75:39:d0:aa:39:09:ba:b3:47:61:fd:8f:b6:5a:
         12:34:4c:5e:06:09:71:09:30:6f:7f:6e:20:8b:da:05:b1:85:
         cf:d2:61:3d:b6:4e:47:50:8c:53:84:f2:86:c7:6a:32:41:5f:
         e6:ef:69:82:8d:ed:a1:21:99:94:bb:bf:73:cb:ea:92:07:dc:
         52:93:6a:5c:b0:a9:8b:b7:02:37:58:c6:0d:14:d1:1f:ff:64:
         14:4b:5d:04:fc:14:79:70:47:87:80:d6:4e:2b:c5:bc:67:dc:
         9f:31:ef:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:26:11 2026 by rpki-client