Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/8077c8f3-cf54-3852-b38f-d3e9dd133f2c.roa
File:                     8077c8f3-cf54-3852-b38f-d3e9dd133f2c.roa (raw, json)
Hash identifier:          GNBLYFd4vvERFSsaH1dy4zVnIEVcASjk9xyxWBCg/Rc=
Subject key identifier:   B5:E3:2C:B2:AF:11:42:13:0B:F8:C1:9C:29:E1:25:4D:6F:2B:C3:C6
Certificate issuer:       /CN=f6a15183-2c23-4d0a-9aaa-fee47f7a61f1
Certificate serial:       010D0C9F4328584F3CE2BB376290F198CC0AF400
Authority key identifier: 5E:7D:66:AB:68:3C:74:74:46:85:34:BA:FB:50:A4:2F:7D:CF:A9:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/8077c8f3-cf54-3852-b38f-d3e9dd133f2c.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     397268
IP address blocks:        199.58.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:bb:37:62:90:f1:98:cc:0a:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6a15183-2c23-4d0a-9aaa-fee47f7a61f1
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=d3beffef-1794-44e9-aad1-f2dfc7da2cf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ba:94:b5:fd:0c:27:02:f1:a5:5e:2a:0f:70:
                    7c:af:26:f3:34:56:a8:e9:c6:94:e3:5d:1b:a7:56:
                    15:a4:13:03:f6:94:94:d8:66:60:30:6b:cc:9f:46:
                    a0:38:98:1f:e6:e9:7f:42:b6:90:ef:a8:6d:56:70:
                    f6:8a:40:4a:9c:e1:8f:76:3b:e6:cc:68:90:19:bd:
                    94:7a:58:4e:fe:3d:82:70:72:75:75:5e:5c:62:39:
                    5a:4d:2a:06:26:5c:91:3c:67:91:8d:78:6d:1c:fb:
                    1b:34:a7:a4:cf:c3:29:a7:0c:4c:dc:1d:79:27:db:
                    48:bf:78:f2:1d:bd:2c:4c:99:8a:e5:93:23:fd:33:
                    71:c9:86:3c:fa:81:98:84:f5:6f:3e:97:31:91:8e:
                    99:a2:f6:58:fe:4b:b8:1a:bc:5e:ea:10:8a:34:b7:
                    9a:b9:b9:35:50:ff:f4:e7:56:59:c4:05:b2:a8:6e:
                    ca:b4:1c:e0:6b:3e:5a:cb:7f:e5:5f:f1:6b:6f:a3:
                    8f:73:9a:be:02:07:0f:d8:fe:7a:77:77:85:2c:c6:
                    85:b5:c0:e6:8e:c2:d6:41:ee:47:fb:b9:50:8c:fb:
                    6a:51:74:43:66:12:ce:1d:1b:ae:c5:09:2f:ab:f6:
                    91:ba:b1:15:4b:8d:67:b3:76:3c:60:43:ca:5e:db:
                    5c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E3:2C:B2:AF:11:42:13:0B:F8:C1:9C:29:E1:25:4D:6F:2B:C3:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/8077c8f3-cf54-3852-b38f-d3e9dd133f2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.crl

            X509v3 Authority Key Identifier:
                keyid:5E:7D:66:AB:68:3C:74:74:46:85:34:BA:FB:50:A4:2F:7D:CF:A9:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.58.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:42:1b:95:3f:33:7c:22:a9:44:dc:68:86:a7:59:7f:79:a5:
         61:1e:0a:ec:06:82:be:2b:cf:3c:32:87:0e:83:59:1e:a2:90:
         cb:8d:b3:ea:a1:e9:80:7f:e7:38:ba:fd:ba:2c:d9:d8:45:a8:
         5f:dc:1a:68:d1:58:21:29:79:ae:ff:99:f9:67:9a:e9:f7:08:
         51:40:74:fc:ba:b0:f0:31:73:14:57:97:35:97:35:39:84:67:
         cf:9f:76:d1:05:d9:cd:58:b6:f9:c1:b7:37:fd:e6:1b:99:2a:
         ad:c1:fa:bf:f4:d9:30:3c:4e:ee:3d:2a:e1:df:48:1d:0d:ee:
         64:bf:fc:61:4b:c9:08:20:a2:da:20:07:9f:06:6a:75:45:b6:
         50:ef:86:25:d9:af:d4:04:5c:79:76:db:16:df:1f:37:41:71:
         9d:6f:84:ea:18:dd:c4:45:e7:a8:e7:76:de:7d:19:d2:b8:e9:
         a0:b4:b3:17:8b:bf:e4:35:20:cd:f5:38:e1:9e:42:9b:18:c0:
         3a:db:99:47:14:63:cf:68:b7:c3:f2:38:77:0d:4d:01:9d:23:
         ff:64:9d:1b:43:d3:1b:ca:ec:eb:da:89:cc:51:c6:d6:75:69:
         7f:9c:c6:e0:24:d0:57:99:3f:32:34:ea:b6:41:16:29:83:b3:
         31:50:9c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:19:07 2026 by rpki-client