Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/307496da-fe61-363a-a8e1-2546045308d5.roa
File:                     307496da-fe61-363a-a8e1-2546045308d5.roa (raw, json)
Hash identifier:          ydpTfY7tG74BaMk5FlsfobRE/LaoQUIXX0Aa6kTC6Jo=
Subject key identifier:   0A:BB:74:AD:B8:FF:CC:0E:CF:85:69:05:84:00:34:61:8F:16:50:2D
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F4328584ED9C753F9356A520A04779900
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/307496da-fe61-363a-a8e1-2546045308d5.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     12129
IP address blocks:        199.249.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:53:f9:35:6a:52:0a:04:77:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=7351a974-ecc1-40c5-95fb-0d1d7d789eec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:3c:17:03:8c:6e:69:09:4c:4e:de:8f:c5:c7:
                    91:c0:04:1e:89:f1:e4:50:69:b4:ec:e9:b4:84:74:
                    8f:c5:63:95:b6:d8:93:2d:22:b2:43:3f:e0:db:19:
                    33:87:67:fd:9f:cd:68:92:b1:fc:0e:9e:e8:43:eb:
                    25:a7:3e:3a:c8:ae:81:1e:44:f7:38:d0:cc:09:79:
                    2e:0d:23:1c:72:bc:0f:99:44:93:5d:ee:6c:ca:94:
                    9b:f1:ea:69:ba:75:5c:5d:c7:63:1e:38:9a:10:84:
                    cc:c0:9e:7d:7b:4b:d4:70:18:10:10:bb:e4:d2:00:
                    1c:c2:9f:21:75:62:b2:5a:9f:2e:c4:76:92:d1:e0:
                    b6:b7:e5:6e:5c:c2:74:48:db:1c:e1:08:3d:71:ee:
                    35:43:89:98:06:6c:a2:c4:6b:80:d0:fd:0e:3d:dc:
                    08:16:03:7e:84:e0:18:60:d0:e1:26:1f:2b:08:bc:
                    94:c0:ad:4c:2d:d3:42:78:66:28:a1:c9:19:3f:b5:
                    c8:37:d4:45:23:7a:26:8a:30:e5:d9:da:95:0e:f7:
                    58:54:90:d7:02:4a:75:37:44:fc:7d:3c:62:b9:4d:
                    0e:03:12:63:13:6b:10:2e:25:5e:6b:69:c5:41:04:
                    2b:5f:49:4b:6b:02:8b:e1:01:e7:3d:b9:99:7b:2f:
                    d9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:BB:74:AD:B8:FF:CC:0E:CF:85:69:05:84:00:34:61:8F:16:50:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/307496da-fe61-363a-a8e1-2546045308d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.249.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:8f:60:75:ea:d6:75:dd:5a:c9:0d:66:8c:98:0b:f9:25:3b:
         df:db:e9:00:05:ed:c7:75:43:55:2c:ef:cd:c4:ee:af:4c:3d:
         41:3e:97:c1:c9:76:c9:b1:33:fb:c1:00:a9:6f:a1:c2:16:d2:
         ab:14:05:58:fb:fe:a6:8e:8e:dd:f2:d8:c4:7e:70:eb:a6:fd:
         28:59:94:a5:fc:72:0a:28:9d:ee:28:44:6a:6b:7c:99:54:e6:
         21:84:48:7c:d2:d2:42:38:08:7b:a3:9d:ab:dc:f5:4c:4e:20:
         fb:29:9b:ab:34:59:15:71:7e:98:f8:2b:1e:a7:af:7e:b4:36:
         9e:63:f0:e3:3d:b5:b1:d2:c3:a7:12:96:6e:50:76:cd:d5:59:
         f0:07:46:f2:81:70:13:bf:4b:54:92:9e:46:9f:89:36:14:1f:
         f2:c3:f3:6a:f7:19:ec:4c:51:05:8c:67:27:80:e1:22:9f:e0:
         e2:98:83:0b:bb:08:21:5b:d9:91:91:b3:4b:b5:c9:b4:65:d4:
         52:59:ad:02:02:f1:81:ef:1f:12:b5:57:5f:55:70:4c:c1:1d:
         3c:c5:6d:6a:2f:6d:6b:a3:61:58:24:36:13:9d:6d:d7:cc:30:
         e4:fb:6b:26:8a:c7:fd:2a:01:31:68:26:50:03:b0:55:ae:16:
         58:e4:99:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:56:54 2026 by rpki-client