Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/f959bf4c-909f-31f8-a9e0-6f0e8039547e.roa
File:                     f959bf4c-909f-31f8-a9e0-6f0e8039547e.roa (raw, json)
Hash identifier:          U3o0osePNhFmYfUgvG7UYtgwbTV71cydmHWR5BOgiF0=
Subject key identifier:   DD:E5:1E:ED:97:80:32:6F:5E:AC:93:C1:E6:BA:BA:9B:1C:4D:2B:DA
Certificate issuer:       /CN=c54d5f74-3f0f-446f-b8af-258f72dede61
Certificate serial:       010D0C9F4328584D6AAA83160C7FF5264CDCD080
Authority key identifier: B5:CA:9C:D5:AE:53:00:A7:55:A8:FB:D3:65:18:4A:07:D2:CC:E2:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/f959bf4c-909f-31f8-a9e0-6f0e8039547e.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     16509
IP address blocks:        199.167.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/c54d5f74-3f0f-446f-b8af-258f72dede61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/c54d5f74-3f0f-446f-b8af-258f72dede61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:83:16:0c:7f:f5:26:4c:dc:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c54d5f74-3f0f-446f-b8af-258f72dede61
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=99fba86d-36b5-41ec-8e18-e5c6bfa593a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1d:31:32:25:f9:1e:14:44:0d:87:b0:3a:60:
                    82:57:b6:68:d9:d5:b4:a4:19:6d:bc:a0:61:01:fd:
                    f6:37:f8:8b:f8:80:20:14:23:81:ce:26:c7:e8:84:
                    f8:b7:b4:cd:a4:1a:ef:c4:5b:89:2b:3e:b6:85:18:
                    9a:2c:f4:db:fb:47:c4:89:ac:88:9a:dd:3c:54:98:
                    e0:ba:cd:0c:b0:27:47:7a:78:aa:ac:f1:dd:19:97:
                    31:18:68:ec:9a:e4:38:c1:bf:81:43:32:8b:34:5b:
                    29:e6:99:1f:ba:77:dc:f3:06:65:13:51:76:b1:f2:
                    3b:2b:e0:06:0e:94:29:e9:ab:e0:95:78:b0:21:84:
                    3f:ec:aa:80:2f:70:56:31:ad:c5:65:2e:43:cf:e0:
                    5d:59:82:4a:39:a2:ff:50:50:75:a2:fb:05:02:d4:
                    1a:f6:fe:4d:ed:2b:f6:cb:6b:90:8e:6e:e3:21:f1:
                    f5:e3:a5:90:af:6d:dc:86:3f:0a:59:7b:f0:51:25:
                    38:aa:3d:5c:14:33:38:31:05:f7:00:6b:76:b5:18:
                    b1:c7:9b:9e:27:84:61:23:35:e1:a3:0f:14:c3:c4:
                    e9:ed:aa:a4:b1:78:77:f3:f4:2d:c9:09:99:44:db:
                    6d:63:13:71:da:fc:65:ba:f6:5c:0f:43:90:6a:bc:
                    0f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:E5:1E:ED:97:80:32:6F:5E:AC:93:C1:E6:BA:BA:9B:1C:4D:2B:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/f959bf4c-909f-31f8-a9e0-6f0e8039547e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/c54d5f74-3f0f-446f-b8af-258f72dede61.crl

            X509v3 Authority Key Identifier:
                keyid:B5:CA:9C:D5:AE:53:00:A7:55:A8:FB:D3:65:18:4A:07:D2:CC:E2:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.167.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:0b:32:3f:34:8e:6d:c6:17:ab:e4:82:9c:f9:45:db:8e:1a:
         32:a7:82:92:1d:b7:8f:cd:91:04:2c:4f:4e:42:da:26:6e:16:
         79:77:8b:ca:d3:e7:bd:ae:8c:1b:79:8a:e6:a1:c1:34:9a:5d:
         02:b7:a8:e5:66:09:55:29:b5:b9:da:f9:21:41:9e:35:90:dd:
         50:34:11:1d:58:a7:85:39:04:9b:80:81:a1:aa:6d:3c:96:99:
         82:ff:a9:55:b9:e8:59:29:b1:d8:d1:5e:4e:2b:b4:38:8c:c2:
         3c:70:8d:76:8c:2e:c4:3a:58:b6:cf:94:47:76:fa:20:1c:ce:
         58:39:76:5f:97:f5:f8:e5:cb:c0:0c:b5:33:40:66:3b:b6:10:
         e1:dd:bb:17:30:6b:1c:a4:5f:2c:34:58:18:60:3a:7f:4d:c8:
         b9:5a:70:e6:f2:3c:05:8a:21:41:48:d7:d4:75:00:9a:98:60:
         b6:39:5d:5c:c0:c6:8b:b0:da:a6:35:86:9f:59:e1:a6:e7:0f:
         a3:b8:91:cd:e7:52:1c:93:fe:91:a9:5f:0d:d1:9c:ea:cc:e4:
         9e:eb:38:3b:d5:90:52:6e:06:67:b8:93:f7:5c:e7:bc:8e:4c:
         10:8c:8e:ce:ed:a4:ca:be:6d:23:c2:0a:b0:91:f2:27:13:ae:
         d6:5b:26:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:44:20 2026 by rpki-client