Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/eaa96ae8-d23f-3d82-85e7-a34e0ed8c9c9.roa
File:                     eaa96ae8-d23f-3d82-85e7-a34e0ed8c9c9.roa (raw, json)
Hash identifier:          OoDRsoMEsEuriHgxFfWX1VJ/nKmWiUhJ20icY2wDIjA=
Subject key identifier:   B4:98:8D:DC:9F:00:A5:CC:12:61:82:B5:28:77:E3:67:E0:E8:55:E2
Certificate issuer:       /CN=888d6cc7-0aa2-467e-9649-a453942c2d85
Certificate serial:       010D0C9F4328584E1E4C4C719E74790786DF1300
Authority key identifier: 85:9E:C9:BC:47:3A:4F:8D:1F:C8:6B:8F:48:E7:B2:AA:BE:7A:56:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/eaa96ae8-d23f-3d82-85e7-a34e0ed8c9c9.roa
Signing time:             Tue 09 Jun 2026 21:16:30 +0000
ROA not before:           Tue 09 Jun 2026 21:16:30 +0000
ROA not after:            Mon 07 Sep 2026 21:16:30 +0000
asID:                     834
IP address blocks:        199.7.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/888d6cc7-0aa2-467e-9649-a453942c2d85.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/888d6cc7-0aa2-467e-9649-a453942c2d85.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:4c:4c:71:9e:74:79:07:86:df:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=888d6cc7-0aa2-467e-9649-a453942c2d85
        Validity
            Not Before: Jun  9 21:16:30 2026 GMT
            Not After : Sep  7 21:16:30 2026 GMT
        Subject: CN=92869a46-1a85-4cae-8537-f94fb6b29dcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e2:83:6b:94:ce:13:97:92:98:58:61:fe:a5:
                    dd:fb:67:d5:2d:a0:1b:fd:17:d6:27:02:1d:4b:55:
                    f9:bb:71:a6:27:cd:73:7c:d0:65:c8:6f:f1:1f:20:
                    c6:0e:4c:12:d0:e5:d7:02:63:0c:63:6e:29:94:bb:
                    b1:ed:39:5e:95:d8:e7:af:f0:3a:b2:19:8d:cc:d4:
                    48:4e:4d:e7:0e:f2:2b:94:13:1a:d8:12:b7:6d:da:
                    cd:4e:08:c5:bf:32:b4:a5:b4:77:b9:bd:1b:1d:12:
                    36:94:25:fd:76:d3:4b:92:e3:20:34:0b:a1:17:ce:
                    fc:34:a4:f9:7b:04:3c:2f:6c:23:b6:0b:bb:be:9f:
                    8a:a6:a6:38:00:1f:4a:ec:3a:bf:b7:bb:cc:75:28:
                    75:15:f5:dd:dc:c8:92:a1:dc:62:6f:31:8a:23:ca:
                    fd:0d:ed:9f:30:a7:07:d0:fc:f6:52:d6:ed:97:9a:
                    3f:64:7f:5b:bf:61:e1:83:eb:91:47:d5:c0:de:55:
                    53:2d:23:fe:12:63:9a:21:18:32:87:06:ad:e0:f4:
                    5b:af:19:6d:26:b5:93:cf:a8:ec:18:dd:25:47:0f:
                    a1:03:fd:c7:2c:8d:8a:2f:2d:5c:08:35:25:7a:59:
                    c4:39:6e:27:46:47:47:af:4f:58:6e:55:d0:7f:4a:
                    59:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:98:8D:DC:9F:00:A5:CC:12:61:82:B5:28:77:E3:67:E0:E8:55:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/eaa96ae8-d23f-3d82-85e7-a34e0ed8c9c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/888d6cc7-0aa2-467e-9649-a453942c2d85.crl

            X509v3 Authority Key Identifier:
                keyid:85:9E:C9:BC:47:3A:4F:8D:1F:C8:6B:8F:48:E7:B2:AA:BE:7A:56:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:5e:38:f4:92:56:78:8e:6d:02:0e:3a:82:41:78:6d:99:0c:
         e8:90:05:42:5a:36:55:f9:06:0f:36:fc:4f:51:f4:18:d9:7f:
         86:1b:ba:33:0b:b2:86:7e:33:f5:19:63:53:35:64:77:a3:2f:
         96:e0:34:96:32:31:9b:ab:3f:5e:e2:5e:7b:92:45:3d:75:22:
         b9:c6:53:36:29:c7:3c:6c:fc:1d:5d:eb:e7:6a:0c:3b:98:c9:
         89:c8:1e:de:0d:2c:6a:f2:a6:a4:39:c1:c9:3c:d4:11:2b:cf:
         82:9a:f4:f6:bb:a8:52:29:65:f3:19:24:34:b4:a0:57:6d:c0:
         5a:71:15:2c:59:b9:f3:bf:5d:10:30:f7:4e:31:c6:d0:0f:84:
         23:26:5a:fa:91:3b:d1:c4:96:9e:a3:4a:ff:82:29:01:4d:c4:
         65:35:74:c4:d5:9f:3a:47:09:a0:ad:85:c1:c4:bd:9c:16:72:
         6d:bc:b3:68:bc:b6:44:2a:c9:77:03:c1:26:7f:11:9f:1c:d7:
         7f:9c:2d:b8:d2:97:42:6c:c4:3a:c4:a9:a8:10:f9:de:0b:b3:
         5a:36:80:d8:08:9a:89:77:f6:a7:b1:3c:4f:84:7d:c8:6f:c6:
         a3:23:54:60:f1:ae:32:cb:f9:a7:6b:29:b1:e2:02:c9:4c:70:
         cc:e4:63:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:29:36 2026 by rpki-client