Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/2fda8bb1-7de2-3717-b26b-919cfd0e986b.roa
File:                     2fda8bb1-7de2-3717-b26b-919cfd0e986b.roa (raw, json)
Hash identifier:          PJ03amt1NMrSwmrWT/rZk61oAQbntqVbSyHOk1uHZnw=
Subject key identifier:   1B:7D:D1:F5:99:DA:5E:2E:90:40:95:C2:26:75:4B:5F:23:3B:51:6F
Certificate issuer:       /CN=cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd
Certificate serial:       010D0C9F4328584E253EFA05378170D34221E418
Authority key identifier: 7C:EF:22:A8:02:45:1A:70:15:CE:99:1E:76:7D:3A:53:61:36:4A:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/2fda8bb1-7de2-3717-b26b-919cfd0e986b.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     396982
IP address blocks:        199.91.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3e:fa:05:37:81:70:d3:42:21:e4:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=90436a95-fbf8-4d84-b41d-04f3a58122a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:96:3f:00:65:ba:83:23:d8:02:f8:90:ff:97:
                    18:d3:eb:e4:6b:d4:38:8c:d7:d8:73:bb:20:a3:f3:
                    f1:69:c2:f1:88:73:44:a8:a7:c9:3f:b9:15:16:bf:
                    dd:8f:af:a7:51:14:1e:b5:70:fa:48:bf:4d:91:ca:
                    a3:d9:b4:6f:5f:18:6a:a5:67:bb:db:0e:1f:fc:c4:
                    98:2c:6b:63:0c:e2:e0:88:3d:3c:fd:0d:c0:ec:ab:
                    78:12:41:c9:eb:5e:a7:21:e4:0c:66:c5:c8:fd:df:
                    16:1c:6a:fe:4d:74:2b:e5:e0:f7:c4:96:3e:47:9e:
                    35:af:fb:77:1b:c8:84:7f:e0:57:e6:0e:df:d4:55:
                    6e:2c:a3:1b:7c:d6:cd:c3:9e:e6:bf:44:1d:77:09:
                    3f:3d:30:9f:d0:c0:76:40:a6:61:d9:69:65:7a:8e:
                    86:25:56:c2:32:84:4a:ce:d5:93:66:5c:f4:06:2f:
                    b9:40:8b:f2:1e:9b:43:94:16:66:19:91:55:fb:c8:
                    39:67:03:8f:6e:e4:5e:11:9e:22:7e:94:d1:6e:ba:
                    f1:21:70:a1:7d:d1:f2:99:52:44:dd:3f:ed:93:f2:
                    40:ab:47:e1:2b:da:b9:aa:a9:88:da:26:6d:60:ed:
                    29:10:bd:c9:c8:88:ed:38:29:f5:ee:44:67:3e:e3:
                    89:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:7D:D1:F5:99:DA:5E:2E:90:40:95:C2:26:75:4B:5F:23:3B:51:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/2fda8bb1-7de2-3717-b26b-919cfd0e986b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.crl

            X509v3 Authority Key Identifier:
                keyid:7C:EF:22:A8:02:45:1A:70:15:CE:99:1E:76:7D:3A:53:61:36:4A:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:bc:17:18:ab:14:e2:86:07:a8:ac:65:90:ec:3c:69:84:d3:
         23:b7:f8:81:9c:23:30:69:71:ce:6c:1f:cb:14:ff:44:a7:bf:
         13:45:f4:f0:c8:46:79:8f:3e:a2:07:27:49:42:d1:63:03:51:
         b4:c3:49:1b:4a:0a:89:a4:c7:05:ad:2b:8c:e5:c9:19:c6:87:
         0a:70:cf:0b:8a:d3:ca:c4:2a:35:ae:0b:d6:3c:17:65:91:14:
         7a:8c:bc:c8:f8:02:13:7b:0d:69:96:98:07:87:b0:84:47:66:
         54:56:73:19:1d:55:a8:72:c6:44:c9:83:ce:28:3a:27:ca:ea:
         50:19:9a:26:06:9b:c6:90:56:53:71:6a:4a:81:77:37:99:e0:
         be:1b:8d:9f:0e:af:aa:fc:4b:cb:0e:cf:be:e5:33:6c:16:21:
         29:25:d8:93:12:7e:21:b1:cf:b0:12:c7:66:ad:ed:e2:bd:38:
         09:86:26:fb:81:9f:e6:63:5e:12:29:27:9b:ba:d0:c6:ca:f8:
         41:e0:32:51:04:d2:5b:01:67:48:86:07:92:d1:92:22:bd:6e:
         64:95:d1:ac:71:17:5f:7e:b2:66:54:00:1e:d5:e9:66:01:ee:
         af:fc:f0:b7:be:4e:28:70:f8:ba:77:ea:05:b6:6c:99:55:20:
         48:ac:3d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:26:17 2026 by rpki-client