Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65/995d608d-8a76-3562-bd4f-eb0e92f36c5b.roa
File:                     995d608d-8a76-3562-bd4f-eb0e92f36c5b.roa (raw, json)
Hash identifier:          F2qj8X0e7qbyW1bt5cPXC5otzL3hwGdh79RdpwiXEOE=
Subject key identifier:   D1:35:C1:15:2B:5C:D1:82:3C:A6:6C:B0:5C:FA:BC:78:59:D5:6A:3B
Certificate issuer:       /CN=d849c62d-50e4-4fcb-9dfe-8634d409fe65
Certificate serial:       010D0C9F4328584E9BE50BAD8DC4D63FE6BC2980
Authority key identifier: 6B:46:77:60:80:69:68:F3:21:4D:61:F9:72:1E:55:99:6C:AE:A7:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65/995d608d-8a76-3562-bd4f-eb0e92f36c5b.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     60011
IP address blocks:        198.199.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65/d849c62d-50e4-4fcb-9dfe-8634d409fe65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65/d849c62d-50e4-4fcb-9dfe-8634d409fe65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:0b:ad:8d:c4:d6:3f:e6:bc:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d849c62d-50e4-4fcb-9dfe-8634d409fe65
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=fc9fbdc2-1e14-4371-921f-c996bb948adb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:49:d6:a2:9c:b4:d6:b5:75:d1:6d:a3:d0:ff:
                    43:28:61:aa:ca:00:ca:f7:bd:9e:fa:dc:34:53:d4:
                    61:57:d4:d8:8b:cf:8d:d4:21:f0:be:d5:2c:47:7f:
                    06:82:1a:6d:ad:1e:85:5e:a4:dd:62:3a:a5:9b:7d:
                    74:9f:5e:2f:10:3a:80:f6:e2:7b:82:b3:88:0b:ba:
                    fe:61:76:b6:65:9d:be:06:1b:50:32:04:26:f5:51:
                    22:16:8d:fb:bc:af:04:74:61:88:f8:cc:be:41:eb:
                    e4:b8:a7:9b:73:83:00:af:fc:88:6e:26:00:ea:c0:
                    5d:f9:9d:0e:dc:33:5a:84:3f:82:98:2c:87:aa:d7:
                    b8:dd:93:0c:3c:1a:b0:47:18:be:01:d7:ed:ee:7c:
                    2f:f3:cd:0b:88:87:76:af:2f:e8:20:26:96:56:a9:
                    ff:c5:34:2c:a6:04:d7:8f:1e:cd:96:03:48:8d:75:
                    b7:aa:b1:b0:94:22:fe:15:3c:c7:67:62:50:71:22:
                    1b:e5:80:82:80:7e:60:76:1e:28:1d:6d:fd:e8:6f:
                    08:47:95:d4:92:f2:db:db:ec:51:e8:20:86:6d:66:
                    0f:93:f9:6c:e7:8c:d4:86:bd:f6:e3:6a:8d:26:ea:
                    a3:39:f4:d9:75:e3:d2:f9:aa:7a:6c:b3:70:92:c3:
                    05:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:35:C1:15:2B:5C:D1:82:3C:A6:6C:B0:5C:FA:BC:78:59:D5:6A:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65/995d608d-8a76-3562-bd4f-eb0e92f36c5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65/d849c62d-50e4-4fcb-9dfe-8634d409fe65.crl

            X509v3 Authority Key Identifier:
                keyid:6B:46:77:60:80:69:68:F3:21:4D:61:F9:72:1E:55:99:6C:AE:A7:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.199.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:2b:be:80:58:bf:b9:87:50:d2:e3:32:57:46:73:71:a1:54:
         0e:77:d5:eb:5b:8f:ca:0e:34:18:54:d3:dd:23:ec:e4:34:45:
         56:32:b2:85:c9:d5:2d:bc:4d:e7:95:61:d6:5f:ec:4c:51:67:
         12:34:c3:cc:3b:62:c9:71:d0:c2:7a:ca:2a:18:45:90:17:5d:
         bb:db:ff:7f:13:50:32:14:77:18:c4:c4:3b:f0:2c:24:7a:d7:
         b5:92:44:cf:67:d5:57:8e:11:fd:7a:b4:23:b1:97:3c:a5:a6:
         24:57:7e:57:29:5e:e7:a1:36:07:c9:14:28:c2:92:09:46:4d:
         1e:0c:71:a7:d8:aa:b6:d7:d0:c4:28:96:ab:6f:19:ba:6b:0a:
         81:56:6f:7c:71:c0:92:30:1b:1d:04:78:d7:a8:d1:2b:27:75:
         bc:67:08:88:f8:60:1e:0a:59:63:0a:8a:a8:c5:8c:e2:b8:3b:
         87:c9:f6:ac:a6:26:52:3e:f2:55:08:c1:4f:2c:e0:a2:c3:65:
         e2:e3:53:dc:82:18:26:9a:d7:92:a5:6f:55:b9:92:93:57:73:
         5c:81:94:ae:7d:06:a4:6f:7e:b9:13:99:fc:3d:bb:00:94:18:
         46:38:35:9b:34:27:62:c9:dd:ae:f9:85:41:e9:00:1d:25:1e:
         f5:f9:0f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:56:26 2026 by rpki-client