Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a74d4fe-43d0-4bc2-83fe-f1908308e46c/cee5e224-e222-3e38-b4fe-225e5e2c6216.roa
File:                     cee5e224-e222-3e38-b4fe-225e5e2c6216.roa (raw, json)
Hash identifier:          luP2mtwRTqcM98azYPfDK3nd9ONribO66fuMB/IWpXU=
Subject key identifier:   9C:72:D2:FC:EC:4E:74:08:26:A7:54:EA:5D:21:92:D6:CA:B3:E6:0A
Certificate issuer:       /CN=1a74d4fe-43d0-4bc2-83fe-f1908308e46c
Certificate serial:       010D0C9F4328584F31B7C257F33BA6F7E4BF68B7
Authority key identifier: B1:ED:9F:BD:D4:7E:67:B8:ED:9F:5B:BF:99:2B:78:41:F4:02:8C:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a74d4fe-43d0-4bc2-83fe-f1908308e46c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a74d4fe-43d0-4bc2-83fe-f1908308e46c/cee5e224-e222-3e38-b4fe-225e5e2c6216.roa
Signing time:             Wed 16 Sep 2026 13:00:12 +0000
ROA not before:           Wed 16 Sep 2026 13:00:12 +0000
ROA not after:            Tue 15 Dec 2026 14:00:12 +0000
asID:                     226
IP address blocks:        192.124.99.0/24 maxlen: 24
                          192.124.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a74d4fe-43d0-4bc2-83fe-f1908308e46c/1a74d4fe-43d0-4bc2-83fe-f1908308e46c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a74d4fe-43d0-4bc2-83fe-f1908308e46c/1a74d4fe-43d0-4bc2-83fe-f1908308e46c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a74d4fe-43d0-4bc2-83fe-f1908308e46c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:31:b7:c2:57:f3:3b:a6:f7:e4:bf:68:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a74d4fe-43d0-4bc2-83fe-f1908308e46c
        Validity
            Not Before: Sep 16 13:00:12 2026 GMT
            Not After : Dec 15 14:00:12 2026 GMT
        Subject: CN=0192ed30-18b0-4365-9939-0898288deda9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:dc:0c:a4:88:52:db:74:0f:44:a3:5e:be:97:
                    90:30:1b:65:26:7f:d5:1d:48:74:b9:96:f1:e5:40:
                    6b:71:94:26:ea:53:dc:45:05:62:42:8c:30:ca:37:
                    97:24:a0:2a:38:31:32:27:41:92:05:73:77:8d:bd:
                    33:10:09:6e:cb:d1:5a:7f:27:22:eb:f5:f6:99:de:
                    6b:8a:40:c9:fc:91:d7:bf:d9:ca:66:b6:fb:36:74:
                    0a:4a:75:90:ba:60:d2:e2:71:e2:2b:b9:09:4f:96:
                    8e:f3:3b:19:39:12:2b:fa:62:fa:89:2f:5e:75:8f:
                    fd:be:10:28:69:92:40:95:7c:9a:fc:91:08:45:96:
                    00:22:c3:41:07:0e:8b:b9:90:d3:67:d2:14:80:e9:
                    0f:d7:57:64:00:1e:78:fa:82:1a:c8:94:10:b0:a6:
                    99:44:ce:bd:3b:4c:10:3e:e9:ca:cb:be:93:7a:05:
                    1c:e7:6e:cd:20:0f:95:05:d7:92:d0:4b:f9:79:de:
                    bb:3f:48:a4:f2:76:0d:c1:ca:53:24:e7:93:c6:e8:
                    5f:3e:73:b9:25:c7:2e:98:5c:16:aa:a3:71:4f:17:
                    13:09:3c:ed:74:a8:55:b3:fc:f4:ce:4c:94:71:54:
                    13:d2:5c:c7:a8:dc:c9:c5:0f:52:63:8d:9d:fc:da:
                    02:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:72:D2:FC:EC:4E:74:08:26:A7:54:EA:5D:21:92:D6:CA:B3:E6:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a74d4fe-43d0-4bc2-83fe-f1908308e46c/cee5e224-e222-3e38-b4fe-225e5e2c6216.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a74d4fe-43d0-4bc2-83fe-f1908308e46c/1a74d4fe-43d0-4bc2-83fe-f1908308e46c.crl

            X509v3 Authority Key Identifier:
                keyid:B1:ED:9F:BD:D4:7E:67:B8:ED:9F:5B:BF:99:2B:78:41:F4:02:8C:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a74d4fe-43d0-4bc2-83fe-f1908308e46c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.124.99.0-192.124.100.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:76:3c:a3:f3:41:c5:44:9a:5b:2a:1c:65:53:36:6d:9b:9d:
         64:af:3f:1f:ac:17:27:8c:8d:56:5c:d9:e4:37:7c:8a:9b:70:
         2e:44:06:07:8d:c5:50:0d:69:eb:bc:cb:28:f7:e7:e5:e0:d4:
         9e:3a:d6:a9:a5:4e:8b:27:2a:18:eb:4e:de:9b:b9:85:09:8a:
         b4:f8:d0:36:d5:4d:75:4f:d7:75:eb:99:88:2d:a7:3f:84:05:
         f5:7d:a3:ea:7c:22:ee:c5:70:c8:a2:f6:0a:dd:73:f0:c6:5a:
         fd:18:2c:44:fc:c6:86:12:30:2e:24:85:35:90:3b:3c:a0:13:
         e7:46:67:ec:fb:70:89:ba:d0:85:13:c1:38:ae:8f:db:e2:b1:
         41:46:ea:41:8d:b4:44:33:18:fd:4e:81:17:2a:f3:04:2d:7e:
         ac:78:11:f6:b0:02:2e:4f:bb:d7:40:c3:6d:41:b4:3b:a1:5b:
         7f:6b:10:b4:ef:7f:66:cd:44:ed:5d:66:a3:e7:bf:a1:56:b2:
         73:6e:ff:6a:65:81:a8:3c:eb:50:4c:a4:53:b2:66:ac:5f:b1:
         98:55:d4:36:47:16:e6:46:d4:c8:e2:5b:67:f3:3a:95:e4:d4:
         1b:59:34:18:27:6c:7c:81:ae:ed:a3:d1:3a:01:b1:4e:29:e5:
         9d:49:cc:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:49:14 2026 by rpki-client