Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0388001e-d087-4aad-9d6e-2a3bad1d2789/f099e026-df52-3254-bcab-31b88ae1a306.roa
File:                     f099e026-df52-3254-bcab-31b88ae1a306.roa (raw, json)
Hash identifier:          TI6VJdQpKdL1lEFS7oHjMLp3QCPNnbzGPoQ5HmXnoVs=
Subject key identifier:   3C:F7:DF:AC:B2:21:C3:10:A0:22:D6:8D:8D:E9:2F:24:1A:88:8A:3E
Certificate issuer:       /CN=0388001e-d087-4aad-9d6e-2a3bad1d2789
Certificate serial:       010D0C9F4328584F1E2CFA322BADA1A41C1B1000
Authority key identifier: 7A:6B:70:74:1D:96:50:15:36:60:7E:14:9C:57:5B:B0:46:81:B5:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0388001e-d087-4aad-9d6e-2a3bad1d2789.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0388001e-d087-4aad-9d6e-2a3bad1d2789/f099e026-df52-3254-bcab-31b88ae1a306.roa
Signing time:             Wed 09 Sep 2026 13:00:11 +0000
ROA not before:           Wed 09 Sep 2026 13:00:11 +0000
ROA not after:            Tue 08 Dec 2026 14:00:11 +0000
asID:                     376
IP address blocks:        199.202.73.0/24 maxlen: 24
                          199.202.74.0/23 maxlen: 23
                          199.202.76.0/22 maxlen: 22
                          205.151.1.0/24 maxlen: 24
                          205.151.2.0/23 maxlen: 23
                          205.151.4.0/22 maxlen: 22
                          205.236.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0388001e-d087-4aad-9d6e-2a3bad1d2789/0388001e-d087-4aad-9d6e-2a3bad1d2789.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0388001e-d087-4aad-9d6e-2a3bad1d2789/0388001e-d087-4aad-9d6e-2a3bad1d2789.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0388001e-d087-4aad-9d6e-2a3bad1d2789.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1e:2c:fa:32:2b:ad:a1:a4:1c:1b:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0388001e-d087-4aad-9d6e-2a3bad1d2789
        Validity
            Not Before: Sep  9 13:00:11 2026 GMT
            Not After : Dec  8 14:00:11 2026 GMT
        Subject: CN=c5de26a3-232f-4cbd-a209-662b2e8c5c05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:70:ce:4b:07:c5:20:fa:a2:b5:60:a5:74:78:
                    1c:99:b8:ef:25:44:4e:0a:7e:fe:97:9f:bf:38:1c:
                    1b:c8:41:1d:de:78:7e:ed:57:2a:e1:38:7d:03:cc:
                    d2:6f:77:6f:e2:ef:53:7a:43:2b:3c:77:52:3b:1e:
                    bc:55:ee:39:49:50:d8:34:23:15:bc:2b:76:c2:14:
                    f9:d2:9d:86:9d:9e:c1:b9:fb:2a:00:5a:c9:f3:1a:
                    88:c2:5a:98:d4:0c:21:b8:bf:8d:37:94:36:d5:3b:
                    3a:46:2d:76:55:49:b5:47:5b:f2:37:38:bc:32:e4:
                    41:3d:4d:02:6d:3e:52:bf:3d:cf:d3:41:cb:6e:ea:
                    fc:91:14:5e:81:9b:f2:92:ef:93:56:06:81:c3:9e:
                    3f:46:4f:4d:e0:ed:59:b6:6b:ce:34:7d:c5:5b:5c:
                    e4:a1:9d:5e:a6:5a:da:7c:1a:d3:b9:f9:2d:31:ea:
                    1e:e0:0a:36:45:d2:60:96:2a:45:d5:b9:30:ca:a4:
                    8d:c9:6d:9a:17:58:ff:5e:69:60:c2:61:bd:69:56:
                    f8:1b:4d:ea:00:f3:81:d1:fa:9a:7a:37:6b:04:8a:
                    45:94:fe:d4:da:1a:a9:37:68:d9:36:86:bb:e5:d8:
                    48:76:b9:ef:95:58:07:f7:1a:f1:42:a1:ff:bb:4b:
                    c5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:F7:DF:AC:B2:21:C3:10:A0:22:D6:8D:8D:E9:2F:24:1A:88:8A:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0388001e-d087-4aad-9d6e-2a3bad1d2789/f099e026-df52-3254-bcab-31b88ae1a306.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0388001e-d087-4aad-9d6e-2a3bad1d2789/0388001e-d087-4aad-9d6e-2a3bad1d2789.crl

            X509v3 Authority Key Identifier:
                keyid:7A:6B:70:74:1D:96:50:15:36:60:7E:14:9C:57:5B:B0:46:81:B5:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0388001e-d087-4aad-9d6e-2a3bad1d2789.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.202.73.0-199.202.79.255
                  205.151.1.0-205.151.7.255
                  205.236.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:89:a8:3d:b6:1f:5b:6c:6c:ca:5f:98:7d:48:77:04:5f:49:
         d2:89:23:76:9b:b2:5c:b2:97:a2:70:95:7e:1b:8c:7f:be:b5:
         b5:99:96:42:b7:64:a7:e4:5d:40:8f:a8:82:9b:d6:c2:a8:2f:
         62:61:1b:5b:33:27:8c:13:cb:2b:29:8b:46:ec:b2:89:db:eb:
         61:26:62:60:1b:88:8c:eb:30:00:cd:a1:04:16:ee:8e:18:f4:
         4b:dd:5b:c6:8a:2a:b6:c6:2e:b2:3e:e9:8f:4e:2c:4c:21:c3:
         63:6d:fc:ec:eb:09:5c:9e:f4:69:c5:15:f5:92:84:af:5d:7e:
         f1:b6:b7:75:cc:61:93:4f:b4:be:1d:c3:87:9b:6c:33:cc:2a:
         02:b2:8e:89:14:e4:f7:97:e1:25:ba:04:41:bb:5b:a3:ca:3d:
         28:00:4b:31:19:0d:64:d2:2a:5b:42:f0:cb:45:d3:04:5e:5b:
         56:32:34:dd:75:b7:90:04:70:5d:04:ce:15:9b:b6:42:91:c6:
         6f:25:23:d3:dc:8d:2b:94:f2:ce:ed:99:b4:06:fa:35:eb:3d:
         a3:62:55:99:33:bc:8d:da:6b:fc:fa:d7:36:e2:53:d1:a2:22:
         3c:5a:8f:5f:86:04:c9:a9:73:cd:11:f1:6d:aa:03:64:25:6a:
         9b:e6:7f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:18:26 2026 by rpki-client