Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/06c9f9a0-fe01-38c9-bbdf-309da400287e.roa
File:                     06c9f9a0-fe01-38c9-bbdf-309da400287e.roa (raw, json)
Hash identifier:          YQtVf3fUdsOuaJcQ72hkbGPhuycQDcSklnyx7VmLepc=
Subject key identifier:   9F:33:22:AF:0A:CA:49:94:F7:FC:FD:35:27:B2:50:37:C3:EA:0A:83
Certificate issuer:       /CN=cdb747b2-b46e-4ac1-b6a1-94c273d0c828
Certificate serial:       010D0C9F4328584D65152B4F31B22C3A616DA4C0
Authority key identifier: B7:81:C0:DD:8C:BE:84:EE:0E:75:93:D0:8C:C6:CF:86:3B:F1:54:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/06c9f9a0-fe01-38c9-bbdf-309da400287e.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     209
IP address blocks:        199.191.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:2b:4f:31:b2:2c:3a:61:6d:a4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdb747b2-b46e-4ac1-b6a1-94c273d0c828
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=758e236b-4d16-4d23-afa5-cd7b76223e4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c3:c2:ad:02:6a:2d:6b:bb:25:e3:e9:43:8e:
                    a9:76:36:d8:7c:b0:e5:10:cb:42:1f:a8:52:27:89:
                    87:5c:60:32:31:ab:49:2e:a9:d4:fb:79:e8:ef:8c:
                    30:ef:93:f6:4b:82:56:81:1d:a2:f1:32:87:af:d3:
                    dc:cc:42:0e:b9:27:66:30:fb:c9:47:9d:28:ce:9d:
                    1b:67:c6:ce:41:e3:b9:09:cc:7b:71:13:a7:0b:6f:
                    d6:6b:b7:9d:44:30:4c:60:38:4c:67:e2:10:97:a0:
                    a0:f3:bd:ae:a2:00:ef:24:a6:0f:f6:05:19:ec:14:
                    cb:32:08:6a:e9:86:f1:24:19:06:f3:0a:4f:5f:e5:
                    9b:a2:32:f0:b4:4f:dc:88:6b:f6:d1:08:0e:d3:52:
                    9c:79:f0:3b:83:39:a9:2d:c6:e3:a7:67:10:08:1e:
                    8f:f3:ec:bd:fc:ff:90:f0:dd:8a:f6:d1:4d:e4:ee:
                    1e:59:62:4a:d0:86:b2:b4:95:75:8a:9e:eb:f9:71:
                    cd:c8:64:ce:4f:be:f0:ed:9b:77:90:53:ab:c4:65:
                    fe:74:b4:16:15:25:06:2e:c7:98:a8:38:f1:12:0f:
                    0c:4e:82:74:10:1e:e0:ae:f0:f3:e7:e7:11:df:3f:
                    30:a1:bc:d9:70:15:ba:9c:14:4b:ff:57:79:87:b6:
                    43:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:33:22:AF:0A:CA:49:94:F7:FC:FD:35:27:B2:50:37:C3:EA:0A:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/06c9f9a0-fe01-38c9-bbdf-309da400287e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.crl

            X509v3 Authority Key Identifier:
                keyid:B7:81:C0:DD:8C:BE:84:EE:0E:75:93:D0:8C:C6:CF:86:3B:F1:54:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.191.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:0c:84:1a:c8:4e:74:1e:0e:02:f4:27:0a:6a:80:a5:46:35:
         6a:6c:61:f7:03:4b:ca:f2:17:49:48:2b:b3:be:7c:4c:f8:6a:
         38:3f:8e:77:82:38:f2:04:fe:db:f5:57:2e:ba:b6:fe:1e:87:
         43:d0:68:3a:1d:ce:01:8f:7d:14:31:bc:9b:3e:2d:c2:c0:53:
         4d:a0:3e:d4:8a:10:da:32:e1:6a:19:31:6b:69:92:82:41:ec:
         75:48:14:c5:3a:28:fb:55:8e:33:00:98:b0:ff:17:54:3e:f6:
         d7:0b:6a:99:3d:e8:02:c4:57:c6:ac:90:7b:f7:fd:46:fd:08:
         a5:86:1a:eb:06:ae:65:0a:2f:11:5a:b8:cf:a1:37:9c:07:9f:
         7d:a5:cd:38:48:64:69:fe:f6:69:51:64:b9:b6:c7:e7:1e:7c:
         41:a0:82:66:86:76:03:1b:b4:70:96:8f:59:94:a0:4b:9e:a0:
         4f:37:79:88:10:f0:c6:16:08:dc:fc:6f:21:71:64:98:9d:41:
         1a:b1:af:3d:e6:04:23:7b:2a:07:05:25:99:77:f0:3a:be:5f:
         6c:b9:b2:24:4a:79:7f:6e:5c:ac:12:85:58:83:5b:12:94:a1:
         35:d2:bd:01:47:db:eb:8c:8f:c4:a5:7d:08:d2:53:f6:16:c2:
         77:26:f0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:55:00 2026 by rpki-client