Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/34cce63a-7d6d-3a51-bd51-2247fff36eac.roa
File:                     34cce63a-7d6d-3a51-bd51-2247fff36eac.roa (raw, json)
Hash identifier:          r0CdYqufDct+d90ilAKXVxjKmzSLw9npv3g57bxGmg4=
Subject key identifier:   C8:BE:A3:00:18:DE:C2:28:81:3B:EB:BB:FD:62:56:E5:65:DF:87:FC
Certificate issuer:       /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Certificate serial:       010D0C9F4328584CC7772DED489E4D9E28F86360
Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/34cce63a-7d6d-3a51-bd51-2247fff36eac.roa
Signing time:             Sat 07 Feb 2026 02:00:31 +0000
ROA not before:           Sat 07 Feb 2026 02:00:31 +0000
ROA not after:            Fri 08 May 2026 01:00:31 +0000
asID:                     140096
IP address blocks:        199.15.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c7:77:2d:ed:48:9e:4d:9e:28:f8:63:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
        Validity
            Not Before: Feb  7 02:00:31 2026 GMT
            Not After : May  8 01:00:31 2026 GMT
        Subject: CN=9dd32094-5d8d-4bbd-9283-58853b3ba12a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c7:fd:8d:1e:ac:a4:ab:17:72:ea:5d:d2:24:
                    0d:a2:b7:d4:61:b4:70:63:d7:aa:70:df:5f:dc:8f:
                    dc:cd:33:56:ba:67:c0:08:52:75:e6:c2:54:4c:9c:
                    28:2e:49:ca:ea:e4:b2:fd:e7:8a:90:85:73:63:f3:
                    ce:c7:8a:c2:d1:7b:ef:f6:c0:de:6b:75:8e:a7:aa:
                    36:6c:cc:a3:49:c8:c8:d1:0a:14:1c:ae:be:7b:78:
                    cc:83:43:12:1a:bf:a3:0f:be:41:3a:0a:3e:2f:20:
                    2e:e6:60:fb:42:94:c8:ee:d4:e2:91:54:48:2f:ef:
                    cb:2e:c8:d8:ad:77:8b:c9:8f:cd:86:35:8b:63:62:
                    bf:dc:f9:7b:14:df:47:e4:78:b4:8d:2b:cc:09:b6:
                    65:f3:87:2e:ca:fb:69:de:0e:16:80:77:ef:07:d7:
                    f6:6e:2c:2f:c2:ce:c0:3b:23:a0:12:74:fd:fd:21:
                    0d:60:a6:59:42:b7:24:4b:2f:bd:4f:78:3e:ba:41:
                    bf:f5:9f:60:8f:46:4f:81:2b:16:9c:ab:c1:0b:02:
                    54:ea:9f:98:2e:b7:3f:8a:3e:a2:2e:d6:de:ef:a7:
                    b2:4c:e6:d1:18:3f:ea:80:76:e5:0b:7d:86:d5:24:
                    47:10:65:63:c2:6a:34:84:fc:ad:15:90:ba:d9:f1:
                    5e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:BE:A3:00:18:DE:C2:28:81:3B:EB:BB:FD:62:56:E5:65:DF:87:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/34cce63a-7d6d-3a51-bd51-2247fff36eac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.15.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:ff:bb:b5:53:7b:4e:57:f7:e0:71:2e:ef:f6:c5:f1:df:63:
         98:90:67:6c:0e:9f:e7:a0:2c:41:e6:35:ef:f3:f3:b1:40:86:
         a8:95:f7:71:68:17:68:bc:e1:e6:56:e2:f6:e0:f7:ff:3d:e2:
         d4:df:9c:a0:1b:43:e7:9d:ea:bb:6d:1a:77:5e:c6:7c:3a:be:
         d6:15:28:16:63:96:4a:3d:5e:af:15:df:2d:35:6e:58:6b:62:
         19:ae:ea:5c:55:06:04:fd:aa:8a:4f:56:cf:a4:e9:dd:06:49:
         9f:ee:dc:43:62:f6:f1:3b:5e:ea:4e:13:af:17:8b:a3:09:82:
         05:67:f0:a0:7b:86:81:92:92:5d:91:6d:47:48:03:50:82:59:
         4d:41:14:d2:8f:25:fa:5c:83:64:52:e5:ad:41:95:b5:78:ed:
         73:04:ba:7b:ef:20:dc:70:f9:09:bd:9c:04:63:9a:87:71:c2:
         39:3e:45:81:83:35:14:ef:04:c0:73:51:78:d3:97:aa:b9:c8:
         ef:f2:9f:7d:47:ee:93:5c:13:5b:0f:01:ae:d0:4b:23:81:16:
         6f:89:3b:c2:57:9a:63:de:d5:31:aa:0c:34:b2:92:f7:ee:65:
         43:e1:65:51:f2:ad:4c:d9:32:27:9c:b6:f5:01:fa:e7:7c:df:
         de:b8:1e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:07:53 2026 by rpki-client