Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/b0f3dd68-3412-3d59-9ac4-f5398f42bcd8.roa
File:                     b0f3dd68-3412-3d59-9ac4-f5398f42bcd8.roa (raw, json)
Hash identifier:          RuccDBrhnCTgwXui9xnLCbCxr56c67hJAhlLBsQ5Xks=
Subject key identifier:   8A:B8:75:C4:6F:41:AB:A2:87:38:A6:9E:FB:CA:E9:E5:59:5E:5E:8D
Certificate issuer:       /CN=db2617c0-03f4-4ad7-9d11-36b2c6496b7d
Certificate serial:       010D0C9F4328584D6AAA85B1563164E3C6968380
Authority key identifier: 6F:8C:BC:63:FE:23:D7:C4:A8:06:09:3A:B5:B6:A1:6A:A3:94:58:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/b0f3dd68-3412-3d59-9ac4-f5398f42bcd8.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     53991
IP address blocks:        199.83.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:85:b1:56:31:64:e3:c6:96:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db2617c0-03f4-4ad7-9d11-36b2c6496b7d
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=52a2cc94-799a-4d3d-8f77-8ffc8c07bf97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f2:0e:62:a5:7a:ca:44:dc:87:85:a6:9f:3a:
                    cc:3d:e4:dd:b1:63:6b:a3:75:fc:a1:34:c1:b1:26:
                    20:51:b2:86:14:ef:11:02:4b:29:54:ff:35:d3:99:
                    be:6c:5e:db:15:94:df:e1:21:77:d5:4b:d5:1b:ff:
                    13:18:d7:ee:39:45:e4:97:86:34:ae:61:86:c5:b5:
                    66:16:a3:ec:52:19:41:39:3f:08:47:12:45:f1:8b:
                    5a:c7:f2:9f:73:8a:59:00:56:e9:8e:b1:a6:25:4e:
                    df:e2:59:00:49:6a:37:57:7c:20:9b:db:21:a5:a9:
                    f0:bd:a6:c4:2a:5b:c6:52:81:1e:96:8a:b7:ca:a7:
                    a2:4e:25:24:e9:fa:9c:59:29:20:50:2c:be:5a:2e:
                    a6:5e:b2:15:fe:bf:c0:bc:c7:30:c3:cb:da:65:ec:
                    fa:f5:59:11:ba:2d:83:d7:aa:15:66:66:4f:ff:65:
                    34:48:f0:b8:dd:ed:9d:a3:74:de:c6:c1:ee:de:3c:
                    59:8c:fb:b8:4f:fb:df:4c:56:54:ff:4a:4f:4b:27:
                    07:18:c5:ac:a1:28:75:e9:56:da:e8:3c:38:1b:a4:
                    50:3c:fa:2f:a0:3d:2b:52:43:b0:d3:3d:c9:61:d7:
                    a0:f5:54:cb:fc:6b:25:92:35:89:ae:b9:00:5e:68:
                    5c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:B8:75:C4:6F:41:AB:A2:87:38:A6:9E:FB:CA:E9:E5:59:5E:5E:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/b0f3dd68-3412-3d59-9ac4-f5398f42bcd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.crl

            X509v3 Authority Key Identifier:
                keyid:6F:8C:BC:63:FE:23:D7:C4:A8:06:09:3A:B5:B6:A1:6A:A3:94:58:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.83.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:34:0a:de:79:53:b9:ad:f0:3d:61:94:23:4b:0d:cd:e2:cb:
         a9:cf:7c:8e:58:bc:11:40:0b:b6:8b:5f:f6:6d:67:b1:bd:f9:
         8f:85:e5:85:99:d6:8f:d4:57:ac:f8:98:c6:c6:01:3e:c7:9a:
         a3:d3:4c:56:53:4d:32:54:29:62:ab:1b:fd:af:92:6e:9d:37:
         db:ee:49:00:c7:5e:74:41:07:a1:71:50:1e:9d:aa:fc:f5:2a:
         69:b5:6b:c9:61:9b:88:15:d2:ae:e6:e2:f3:34:de:0e:5d:2a:
         b3:dc:a1:33:70:c3:5e:3f:3f:5f:f4:53:8b:e4:23:a6:80:dd:
         d7:49:3f:f8:2f:53:9d:1b:27:57:43:d9:71:6a:42:54:93:99:
         fa:89:96:1f:59:38:6c:70:3b:c6:1d:b6:5c:45:0b:e5:5a:4e:
         f1:d9:7d:3f:6a:ff:d1:62:e0:65:49:59:c5:57:b7:f8:43:4c:
         46:a0:1b:29:c3:33:1a:b8:f0:5d:1c:f9:e6:00:2e:6b:bb:73:
         ec:15:86:ae:9b:8b:f3:a9:52:ee:8e:90:4d:63:c4:92:2f:b7:
         2c:5a:b0:20:0f:9a:75:87:5b:a9:77:68:f6:46:b6:da:41:d3:
         6c:23:cb:93:7a:29:40:34:23:f3:3c:80:9a:37:1a:1d:be:37:
         57:4e:b7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:11:16 2026 by rpki-client