Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/d05ecd53-1b3b-395a-974f-fa27910a42aa.roa
File:                     d05ecd53-1b3b-395a-974f-fa27910a42aa.roa (raw, json)
Hash identifier:          D36vvJ1GvAkQhubhxlCOSCYBdit6qE6EO0dhJhOBDWI=
Subject key identifier:   8F:16:1A:13:2E:01:B4:C0:9B:85:60:6C:98:A5:95:1B:62:4D:F4:EB
Certificate issuer:       /CN=685100f9-3b28-4ef4-b2c2-cf327d9839d6
Certificate serial:       010D0C9F4328584E0005DF708C052AE04CA62780
Authority key identifier: 8B:12:82:82:9C:49:72:78:65:2C:C4:42:6F:27:84:A1:58:06:0B:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/d05ecd53-1b3b-395a-974f-fa27910a42aa.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     10255
IP address blocks:        199.74.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/685100f9-3b28-4ef4-b2c2-cf327d9839d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/685100f9-3b28-4ef4-b2c2-cf327d9839d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:df:70:8c:05:2a:e0:4c:a6:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=685100f9-3b28-4ef4-b2c2-cf327d9839d6
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=c655570a-f284-467e-847e-e8134303ebcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4d:58:c5:75:36:77:eb:2c:47:8c:17:99:e6:
                    f8:cd:27:67:b6:a3:ed:b4:97:22:74:cf:95:ca:8b:
                    28:a7:c0:49:c5:43:e7:f1:98:21:f5:89:c7:fe:a8:
                    b0:43:9a:ed:20:50:7c:27:99:05:60:7e:40:4a:43:
                    35:cd:3d:3f:31:39:52:6c:47:2b:9d:2f:11:33:9c:
                    3b:4e:12:0f:e2:61:81:60:59:74:6b:4b:63:9a:e7:
                    2e:33:58:0a:6d:af:47:ba:f8:ff:6b:da:b4:93:89:
                    7c:f5:57:ce:b5:10:e5:de:22:cb:32:0b:bd:4e:f4:
                    1b:16:76:ce:58:5b:8e:79:29:40:e1:1b:1a:b2:bf:
                    ee:f1:23:e7:34:52:e0:90:14:ba:05:8f:c8:af:6d:
                    78:b7:49:b5:46:d4:1a:02:d4:2c:3c:ce:2e:a3:d8:
                    c2:17:fa:6a:74:15:07:54:67:8b:45:d8:64:2a:c5:
                    0a:c6:c7:9d:35:74:12:bf:92:eb:45:3e:96:78:07:
                    f1:2a:97:ae:59:f2:6a:20:07:08:50:42:00:79:4e:
                    af:23:51:1a:e5:1d:52:e3:e9:e8:8b:c5:7b:ae:2c:
                    86:01:1a:5f:00:5a:c5:ab:89:21:bc:c5:c0:15:da:
                    8b:cb:4d:78:bb:d4:91:f0:1f:ea:7f:b0:5e:4d:90:
                    83:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:16:1A:13:2E:01:B4:C0:9B:85:60:6C:98:A5:95:1B:62:4D:F4:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/d05ecd53-1b3b-395a-974f-fa27910a42aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6/685100f9-3b28-4ef4-b2c2-cf327d9839d6.crl

            X509v3 Authority Key Identifier:
                keyid:8B:12:82:82:9C:49:72:78:65:2C:C4:42:6F:27:84:A1:58:06:0B:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/685100f9-3b28-4ef4-b2c2-cf327d9839d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.74.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:d2:d3:aa:b3:1a:ef:cd:0a:19:ed:c7:38:ab:81:91:8b:02:
         df:40:53:89:10:2e:9f:bc:c4:02:7a:a6:aa:95:08:10:1e:8c:
         3b:84:19:4d:8f:97:24:f0:c0:47:45:ec:71:5e:03:18:de:6e:
         3b:79:de:c2:67:6d:dc:c8:f4:ce:f2:fe:e7:32:fb:9d:43:b1:
         84:0a:e8:b4:4e:27:60:0b:aa:a9:a9:47:e0:05:a0:90:01:bd:
         9c:6f:f2:bb:35:55:d3:fd:b0:4c:e3:39:cf:7d:08:16:9b:ec:
         07:aa:6b:80:f7:3a:03:dc:a3:a0:2e:d9:af:dc:53:ce:0b:4d:
         60:69:2b:a9:bd:c4:31:e2:92:3a:15:79:f8:6e:cc:20:92:23:
         78:8f:6a:89:96:4c:a0:6f:10:7e:3a:79:00:d6:5e:e3:63:a3:
         ee:cd:14:5b:10:b8:9d:45:8f:d7:cf:d2:b9:c7:06:3a:d2:29:
         6e:ee:f3:50:ee:23:e0:2e:09:c9:9f:1e:f2:4f:10:e6:3b:11:
         77:c6:88:65:4c:d4:4a:8b:d2:1d:c5:9f:fa:b6:29:4a:f2:10:
         9f:77:6e:90:d6:32:6b:02:f5:d5:21:a5:87:b5:5a:18:27:3d:
         d5:2a:0e:d2:1a:39:44:a7:e1:bb:7b:21:19:c4:ff:bb:c4:a7:
         8d:b5:44:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:28:32 2026 by rpki-client