Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fbe88551-e36f-4364-ac40-a262166c72ad/44093855-c660-345f-9454-29953b3f2acb.roa
File:                     44093855-c660-345f-9454-29953b3f2acb.roa (raw, json)
Hash identifier:          7ach14P+PhHwIbLnQmPIfebhRe2Q7+jgTvFV2dOCNNI=
Subject key identifier:   95:96:A3:BD:AD:01:63:78:2A:10:3F:D3:52:91:B1:AB:0E:42:B7:5F
Certificate issuer:       /CN=fbe88551-e36f-4364-ac40-a262166c72ad
Certificate serial:       010D0C9F4328584EA2DFBCE3112E1D0737BC2B80
Authority key identifier: A1:4D:9B:84:F4:D6:87:5C:4D:0C:56:6E:8D:D4:C8:64:4B:C8:75:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fbe88551-e36f-4364-ac40-a262166c72ad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fbe88551-e36f-4364-ac40-a262166c72ad/44093855-c660-345f-9454-29953b3f2acb.roa
Signing time:             Mon 27 Jul 2026 09:00:12 +0000
ROA not before:           Mon 27 Jul 2026 09:00:12 +0000
ROA not after:            Sun 25 Oct 2026 09:00:12 +0000
asID:                     63435
IP address blocks:        199.58.30.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fbe88551-e36f-4364-ac40-a262166c72ad/fbe88551-e36f-4364-ac40-a262166c72ad.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fbe88551-e36f-4364-ac40-a262166c72ad/fbe88551-e36f-4364-ac40-a262166c72ad.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fbe88551-e36f-4364-ac40-a262166c72ad.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a2:df:bc:e3:11:2e:1d:07:37:bc:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbe88551-e36f-4364-ac40-a262166c72ad
        Validity
            Not Before: Jul 27 09:00:12 2026 GMT
            Not After : Oct 25 09:00:12 2026 GMT
        Subject: CN=98133cd8-0a1e-4232-86b7-e23dcdb1b7a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:43:ee:a4:85:e6:4c:22:5d:97:e9:06:28:a4:
                    20:5a:b3:32:53:91:80:d6:3b:c1:20:67:e4:51:ab:
                    1f:12:06:c4:58:94:22:c9:d2:a2:ce:b8:ef:d8:35:
                    9e:06:23:8b:f2:e0:14:20:e6:f0:a4:22:7d:d0:d8:
                    7f:f2:04:4a:e5:60:ce:16:94:1c:e1:97:40:7e:c5:
                    4e:26:fc:e2:17:a3:fe:27:07:a1:0d:97:5e:9f:52:
                    03:67:f4:52:71:8d:aa:bf:79:26:0c:c7:a6:ca:fb:
                    07:17:28:be:01:99:c2:ec:7a:0d:0f:f8:bb:ae:cb:
                    03:16:8a:17:58:61:61:c2:0a:ac:77:7f:ae:a4:f7:
                    f7:cf:6a:d9:b6:6d:77:8c:a9:a2:86:22:30:f0:4b:
                    e2:62:60:dc:d4:2a:65:0f:aa:2b:be:6a:51:1d:00:
                    aa:b3:f3:a4:52:6f:5a:6a:ae:4a:12:e8:d5:b2:de:
                    fb:1a:c1:ad:bb:c5:60:f0:b0:c0:d8:b8:05:8b:d3:
                    af:c8:4a:27:32:49:86:e9:b4:c0:b9:25:ff:0a:24:
                    ce:c3:97:9d:03:3d:e9:e7:50:8e:d9:d4:02:d3:62:
                    2b:0c:d8:88:0d:ef:e0:45:b7:b0:f5:44:79:b5:eb:
                    93:b1:e6:d0:be:d9:3f:4a:5b:02:75:bd:24:7b:a1:
                    ee:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:96:A3:BD:AD:01:63:78:2A:10:3F:D3:52:91:B1:AB:0E:42:B7:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fbe88551-e36f-4364-ac40-a262166c72ad/44093855-c660-345f-9454-29953b3f2acb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fbe88551-e36f-4364-ac40-a262166c72ad/fbe88551-e36f-4364-ac40-a262166c72ad.crl

            X509v3 Authority Key Identifier:
                keyid:A1:4D:9B:84:F4:D6:87:5C:4D:0C:56:6E:8D:D4:C8:64:4B:C8:75:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fbe88551-e36f-4364-ac40-a262166c72ad.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.58.30.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:11:b5:b7:6c:47:b3:2d:f2:7b:5f:65:56:03:ec:c7:82:e1:
         bf:17:ec:0a:f8:73:0c:31:51:e6:d2:e6:76:8f:ca:5f:2e:8d:
         fc:bf:c3:c2:73:f1:dc:c1:5a:fc:56:1b:0c:85:dc:e2:67:cc:
         99:fd:0e:41:12:44:83:07:53:b1:3c:d8:25:6d:0a:1b:55:de:
         91:32:da:3a:18:0d:bd:9e:f8:d7:9b:63:44:33:44:21:c6:65:
         92:85:8f:f4:d2:96:00:cd:53:50:96:1f:fe:77:53:f6:03:00:
         e9:44:33:5e:95:a7:7d:bf:15:4d:09:a9:db:a8:df:27:14:0a:
         a6:5a:59:4a:a7:2f:ce:ae:46:d2:c2:47:06:74:e2:d2:c6:eb:
         70:d2:65:4f:9d:89:1d:06:a1:e0:35:3e:fa:ed:32:1b:a4:d8:
         17:d6:de:00:21:d3:a3:f6:9a:b7:ad:5a:27:c2:b2:db:84:4c:
         43:d7:62:d9:dc:3f:fb:bd:2a:cf:74:1a:e5:91:6e:ed:8e:8b:
         2b:20:6a:c1:6d:4c:f5:93:7b:24:d5:47:2c:9c:6a:2e:a7:3e:
         73:db:7d:5b:4f:96:20:53:9f:3e:48:13:d3:c5:fe:4f:63:37:
         d0:d0:e2:91:ff:4a:80:f2:62:84:d5:eb:a2:93:42:45:8d:38:
         8c:ec:f7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 07:09:49 2026 by rpki-client