Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/f9b6b205-1b14-37f3-a97c-c8f542eb50ee.roa
File:                     f9b6b205-1b14-37f3-a97c-c8f542eb50ee.roa (raw, json)
Hash identifier:          jXkHOtgpC237sZcELtTbRNSqa0OAGo077iv8bJ7mKfk=
Subject key identifier:   57:6A:65:BC:F9:12:1F:E2:EC:0C:93:9D:11:8F:76:89:17:16:E9:02
Certificate issuer:       /CN=80688222-2583-4dac-a7df-1d78925c7b53
Certificate serial:       010D0C9F4328584D7F9A8A6DDA7F3501D84C1900
Authority key identifier: F9:A8:61:DD:F7:FB:C2:7A:E5:4F:EE:08:C6:6F:52:8D:6C:CA:5A:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/f9b6b205-1b14-37f3-a97c-c8f542eb50ee.roa
Signing time:             Tue 14 Apr 2026 01:00:24 +0000
ROA not before:           Tue 14 Apr 2026 01:00:24 +0000
ROA not after:            Mon 13 Jul 2026 01:00:24 +0000
asID:                     1640
IP address blocks:        199.59.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7f:9a:8a:6d:da:7f:35:01:d8:4c:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80688222-2583-4dac-a7df-1d78925c7b53
        Validity
            Not Before: Apr 14 01:00:24 2026 GMT
            Not After : Jul 13 01:00:24 2026 GMT
        Subject: CN=114d76f0-6919-45dc-9231-7ba3c11a4dc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:24:1a:4a:8d:1a:9a:cf:31:9a:db:56:68:17:
                    46:9b:37:5f:16:db:85:32:f8:56:e7:10:f8:9c:95:
                    93:21:26:3a:f3:77:12:a0:61:45:60:e8:bd:96:cc:
                    c2:cc:51:b4:e9:ae:10:22:4b:e0:9e:dd:1a:11:c9:
                    47:68:a0:4d:ce:1e:60:aa:9d:fa:c6:37:cc:13:15:
                    70:fe:51:f2:14:f0:98:55:4e:64:40:74:91:89:42:
                    cd:bd:ce:4b:05:3e:7f:de:bf:cf:44:42:57:fe:db:
                    89:b5:c5:00:82:5b:b3:ab:7f:cf:31:90:49:6e:56:
                    fc:c9:34:82:1b:b5:08:80:0c:f0:2f:b3:ca:62:8b:
                    68:d5:74:f8:32:8d:75:a8:44:73:62:92:cd:60:e1:
                    ba:28:a5:d8:60:64:91:f3:35:04:43:0b:ba:45:66:
                    58:d2:72:9f:e3:81:db:76:3c:de:1b:6b:05:91:0d:
                    f2:4d:bc:53:dd:71:a7:9d:5f:8f:63:4b:43:d3:2e:
                    31:02:9b:5f:15:fa:d7:6a:1e:33:d8:5e:8a:72:3f:
                    e7:80:fd:8a:21:4c:c3:fe:11:37:bd:e1:bb:0d:67:
                    e0:1c:95:f4:d1:ce:55:e9:e2:a3:9c:03:95:e3:5e:
                    80:cb:b5:1a:de:c5:c9:ae:ab:2f:a7:c9:41:74:32:
                    6c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:6A:65:BC:F9:12:1F:E2:EC:0C:93:9D:11:8F:76:89:17:16:E9:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/f9b6b205-1b14-37f3-a97c-c8f542eb50ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.crl

            X509v3 Authority Key Identifier:
                keyid:F9:A8:61:DD:F7:FB:C2:7A:E5:4F:EE:08:C6:6F:52:8D:6C:CA:5A:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.59.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:f7:0f:a4:8f:56:97:b6:d6:31:f5:4a:5d:7d:15:17:6d:b0:
         3b:bb:b9:9a:a7:78:f9:a2:82:bd:75:ff:12:f9:62:9f:2a:88:
         97:78:2a:a6:41:93:3e:a3:30:d7:40:3d:f7:1e:43:86:51:80:
         bd:28:09:01:b6:b8:e4:96:03:c6:eb:ff:d5:84:7d:07:6b:f4:
         47:db:91:f3:2f:02:80:86:a7:2d:64:0f:34:cc:6f:83:f2:e5:
         c0:c8:4d:a0:f8:be:d9:f2:94:62:a2:fd:11:d9:25:3c:f0:15:
         1e:94:c2:6c:55:6c:ec:a2:6b:a4:f5:f5:6c:51:70:d6:3e:09:
         a8:f6:81:62:d3:8f:44:3a:69:10:89:73:ed:3f:2e:c1:f7:52:
         18:b7:76:c2:a7:60:d6:00:67:38:2f:43:cf:12:74:74:8f:e5:
         91:a6:96:38:72:18:c3:14:2e:81:3e:1d:17:f3:c9:f2:37:60:
         e1:40:ff:a8:6e:35:fd:c4:10:7d:2c:d5:e4:82:a7:30:76:5e:
         a0:9e:dc:38:ed:a0:57:59:2e:15:8b:fb:27:c7:fd:54:97:55:
         57:22:4b:55:2c:3d:1a:62:70:d7:d7:7f:6a:13:d4:b1:6e:5e:
         6f:b6:2d:67:f9:8d:43:72:16:d7:de:45:12:50:8a:40:0b:35:
         96:74:9e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:30:14 2026 by rpki-client