Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/e11fc740-ba35-326a-8f1d-dd0e113c6efe.roa
File:                     e11fc740-ba35-326a-8f1d-dd0e113c6efe.roa (raw, json)
Hash identifier:          8eipGu1MioKYhask2P9Gzd2o3G8ThB18o1VpV2iQtEk=
Subject key identifier:   C3:51:86:75:24:9B:3F:C6:B0:19:06:17:2C:7C:A7:DF:79:84:7A:CA
Certificate issuer:       /CN=643177f7-12a4-4138-aa72-1b5beaada59f
Certificate serial:       010D0C9F4328584EE967A53D7F86C11E324BB400
Authority key identifier: E0:81:C9:F2:5C:4F:5E:48:25:37:49:E0:5D:7D:6D:F8:EE:CF:36:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/e11fc740-ba35-326a-8f1d-dd0e113c6efe.roa
Signing time:             Fri 21 Aug 2026 15:20:41 +0000
ROA not before:           Fri 21 Aug 2026 15:20:41 +0000
ROA not after:            Thu 19 Nov 2026 16:20:41 +0000
asID:                     17206
IP address blocks:        199.21.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/643177f7-12a4-4138-aa72-1b5beaada59f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/643177f7-12a4-4138-aa72-1b5beaada59f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e9:67:a5:3d:7f:86:c1:1e:32:4b:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=643177f7-12a4-4138-aa72-1b5beaada59f
        Validity
            Not Before: Aug 21 15:20:41 2026 GMT
            Not After : Nov 19 16:20:41 2026 GMT
        Subject: CN=cf0728e2-ae74-4587-9ae0-4e8b5f79cdd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:78:85:b4:c3:14:88:d3:98:46:d5:a5:24:03:
                    a9:69:72:60:54:dd:2d:9c:de:a5:a0:9b:d3:a0:01:
                    ab:80:70:7a:6f:13:d1:49:e7:ba:1a:6b:d5:f9:42:
                    e8:2b:be:75:2c:07:33:e0:09:c9:6c:36:c1:0e:12:
                    9c:06:7d:90:71:b1:93:55:45:bd:75:9e:85:bf:6c:
                    1d:6a:44:be:c5:6e:1e:66:c7:ff:92:9e:f7:0d:4a:
                    30:4f:ef:de:bd:56:75:df:96:a3:39:3b:d2:90:cc:
                    cb:17:62:e7:26:5b:56:2f:fd:eb:01:a9:23:2d:e8:
                    31:48:b2:e9:ac:34:26:31:4b:8c:b4:fe:d4:5c:8f:
                    50:63:99:f0:ad:28:d1:5b:1c:70:25:dc:44:56:fd:
                    10:cf:e8:25:15:ee:63:f0:45:1b:72:35:d3:e7:f9:
                    35:89:c5:fe:a6:31:19:1d:41:bf:65:42:1a:eb:d6:
                    6c:cd:e4:a0:b1:87:fd:2d:99:92:0f:3e:c3:7e:1d:
                    18:23:37:e7:9e:4a:49:94:4c:11:96:f2:a2:cf:97:
                    eb:00:6a:1c:5f:8b:96:b2:14:3a:e8:55:ba:28:7e:
                    c8:79:f1:79:88:01:11:b4:13:0c:eb:4d:b7:fe:78:
                    2c:09:94:10:2e:26:a2:d1:4f:50:2e:a6:3f:90:bd:
                    34:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:51:86:75:24:9B:3F:C6:B0:19:06:17:2C:7C:A7:DF:79:84:7A:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/e11fc740-ba35-326a-8f1d-dd0e113c6efe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/643177f7-12a4-4138-aa72-1b5beaada59f.crl

            X509v3 Authority Key Identifier:
                keyid:E0:81:C9:F2:5C:4F:5E:48:25:37:49:E0:5D:7D:6D:F8:EE:CF:36:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.21.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:14:2f:f1:c7:de:c8:f1:e3:f8:cd:0c:15:c0:fc:a5:f2:ab:
         28:56:f2:29:d6:26:51:09:7b:9d:3f:cc:aa:b1:12:b5:30:42:
         d8:ac:57:95:42:e8:67:7f:cd:dd:e4:88:6e:d3:27:85:cb:e2:
         6b:bc:6b:f3:81:3a:90:2c:db:db:6d:09:49:07:31:7e:ed:a9:
         6b:31:3f:ec:21:f3:92:c3:0e:3a:d2:0c:41:c3:37:7d:8b:88:
         ac:1c:10:24:85:ef:71:62:52:53:a6:3d:fb:e7:9f:b6:4d:5a:
         7a:de:ba:25:fe:b6:ff:c2:db:99:31:ad:06:f3:d2:38:76:8b:
         df:c0:00:ae:97:25:a5:32:28:cb:d6:42:04:fe:13:50:c4:8f:
         88:88:80:cf:d5:75:3e:b0:6c:a9:14:d6:8f:bf:38:97:fe:1b:
         35:3c:e9:ca:b4:ec:72:a7:be:0a:f7:e7:38:22:35:8f:87:78:
         30:c0:ee:db:77:10:ca:aa:ed:45:c2:ae:e6:ff:9c:f3:e5:b1:
         18:b1:d5:75:b5:a7:b5:03:6b:aa:f0:de:4a:8f:63:64:e3:04:
         33:22:b0:f9:5c:76:91:03:21:51:af:8d:b9:cd:96:d8:3d:4e:
         09:87:e9:2c:2e:7e:e6:94:5b:e6:8c:e9:76:b6:0a:bd:15:55:
         f2:07:bf:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:26:11 2026 by rpki-client