Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b99ce08-7f33-418e-bae3-01cb3673c06f/1d70c205-aba6-3a2c-affc-5f260fa928c3.roa
File:                     1d70c205-aba6-3a2c-affc-5f260fa928c3.roa (raw, json)
Hash identifier:          TkSsEk/gY1Eua0VvQKAMRkHxzsGJpNqyz4raiMNeoQk=
Subject key identifier:   76:D6:02:61:58:5D:00:2D:32:87:6E:0C:BD:DC:8C:89:CE:96:13:40
Certificate issuer:       /CN=0b99ce08-7f33-418e-bae3-01cb3673c06f
Certificate serial:       010D0C9F4328584E9EAFEB18BD95D1C317FB7500
Authority key identifier: C2:BA:EB:1E:1F:85:D7:8F:EF:91:B7:67:E8:16:74:97:1A:3F:1B:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b99ce08-7f33-418e-bae3-01cb3673c06f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b99ce08-7f33-418e-bae3-01cb3673c06f/1d70c205-aba6-3a2c-affc-5f260fa928c3.roa
Signing time:             Sat 25 Jul 2026 21:00:12 +0000
ROA not before:           Sat 25 Jul 2026 21:00:12 +0000
ROA not after:            Fri 23 Oct 2026 21:00:12 +0000
asID:                     26649
IP address blocks:        192.136.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b99ce08-7f33-418e-bae3-01cb3673c06f/0b99ce08-7f33-418e-bae3-01cb3673c06f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b99ce08-7f33-418e-bae3-01cb3673c06f/0b99ce08-7f33-418e-bae3-01cb3673c06f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b99ce08-7f33-418e-bae3-01cb3673c06f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9e:af:eb:18:bd:95:d1:c3:17:fb:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b99ce08-7f33-418e-bae3-01cb3673c06f
        Validity
            Not Before: Jul 25 21:00:12 2026 GMT
            Not After : Oct 23 21:00:12 2026 GMT
        Subject: CN=adadaf01-8456-4924-ad6f-cec2f713c6db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b7:0d:0b:54:88:9e:b7:a2:f2:79:fe:82:d2:
                    ad:12:7b:e3:da:1a:57:b6:ee:ba:89:51:51:42:5a:
                    e6:33:db:f8:a8:cc:36:9d:d9:e4:3a:b7:48:98:b0:
                    e8:db:db:3e:3d:c0:44:c9:5b:52:0b:9a:7b:3d:82:
                    ba:e3:d6:b0:66:48:ed:4d:f4:20:35:80:97:e8:68:
                    3e:5d:cf:89:fc:dd:d1:c1:fa:04:14:2e:b7:cb:4f:
                    d0:97:ba:b6:cb:5c:cb:97:db:39:5c:d6:d1:74:09:
                    73:eb:c0:af:f6:26:aa:5c:91:da:d2:3f:d6:87:5d:
                    e8:5d:56:8d:cd:32:09:09:3e:92:10:de:36:2f:f9:
                    0f:a2:75:6b:31:4b:78:60:a4:58:83:fe:ec:86:b7:
                    b5:79:ab:22:ae:af:26:d3:f9:72:fa:e9:43:88:62:
                    ab:f6:58:cd:27:08:58:77:fc:56:b9:b4:62:e0:7e:
                    35:a3:b8:95:88:30:b2:7b:df:42:75:ce:a7:29:57:
                    c1:60:dd:23:c8:16:52:4d:07:0b:14:c2:e9:60:30:
                    cc:c9:7d:91:99:ae:bc:b8:c9:4a:02:c8:51:9d:fe:
                    c4:59:c0:8d:dc:7b:7e:dd:53:08:0d:ef:92:28:7e:
                    e5:ca:6a:09:5f:76:6a:f4:2c:c9:39:ba:f8:8e:bf:
                    0c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D6:02:61:58:5D:00:2D:32:87:6E:0C:BD:DC:8C:89:CE:96:13:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b99ce08-7f33-418e-bae3-01cb3673c06f/1d70c205-aba6-3a2c-affc-5f260fa928c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b99ce08-7f33-418e-bae3-01cb3673c06f/0b99ce08-7f33-418e-bae3-01cb3673c06f.crl

            X509v3 Authority Key Identifier:
                keyid:C2:BA:EB:1E:1F:85:D7:8F:EF:91:B7:67:E8:16:74:97:1A:3F:1B:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b99ce08-7f33-418e-bae3-01cb3673c06f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.136.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:5c:cf:41:fd:18:6d:b8:c2:b7:b2:5a:91:2a:15:06:e6:aa:
         26:5a:e0:43:0a:99:3d:54:bd:f0:c5:8d:8d:46:4d:f5:a2:35:
         42:1e:97:1b:f6:92:33:85:46:f2:39:0d:c8:ab:d9:fa:95:4b:
         d7:fd:c7:d3:b0:12:eb:8f:fb:16:bb:4d:95:3a:a2:a6:d8:43:
         ab:91:9b:7b:aa:e0:66:42:00:7e:fd:b6:ee:0c:84:2b:da:fe:
         d6:3e:9e:53:c1:dd:c7:e2:66:56:9f:1a:ab:a3:e8:84:d3:ea:
         a7:55:07:dd:ce:bc:2b:ba:e9:74:fc:29:60:6c:c8:e3:c9:1b:
         f0:b2:ef:ff:2e:42:a6:32:e9:3f:cf:aa:ce:27:56:86:0c:7e:
         9e:a8:15:ba:03:75:9d:2a:da:bb:96:c9:d8:32:d8:89:76:40:
         6a:97:3a:b8:b8:fb:71:42:52:e4:82:93:fa:3c:ed:4d:07:49:
         07:a7:7a:57:f0:de:ae:b2:49:c9:94:26:76:c9:44:ff:44:98:
         55:f1:b5:5a:ac:13:3f:6a:20:19:22:61:28:91:f5:b6:b6:32:
         50:a6:ec:a6:d2:02:95:d4:a5:32:08:6d:d9:8d:28:9a:16:28:
         47:cb:5a:b1:f8:63:10:0d:57:a6:4d:60:15:b2:93:3e:e2:16:
         f9:ad:c5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 16:32:57 2026 by rpki-client