Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/2d9d3321-db9f-306c-9228-ae06be4dece8.roa
File:                     2d9d3321-db9f-306c-9228-ae06be4dece8.roa (raw, json)
Hash identifier:          i1HVCLlg2BfUqa0jIbC+u1MOlxEvwPAZopZ7uIMF2nE=
Subject key identifier:   A7:1F:22:BB:3C:06:D5:99:66:4A:89:C9:FA:24:E5:34:E5:7E:F5:91
Certificate issuer:       /CN=96aa12fd-20f6-4f37-aab7-a27391ae096e
Certificate serial:       010D0C9F4328584DDA55C9C51543E2162045CF80
Authority key identifier: 64:2E:31:9D:C5:17:1B:E0:F6:CD:30:94:51:D8:10:99:B1:1D:AE:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/2d9d3321-db9f-306c-9228-ae06be4dece8.roa
Signing time:             Sat 16 May 2026 13:00:31 +0000
ROA not before:           Sat 16 May 2026 13:00:31 +0000
ROA not after:            Fri 14 Aug 2026 13:00:31 +0000
asID:                     396982
IP address blocks:        199.47.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:da:55:c9:c5:15:43:e2:16:20:45:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96aa12fd-20f6-4f37-aab7-a27391ae096e
        Validity
            Not Before: May 16 13:00:31 2026 GMT
            Not After : Aug 14 13:00:31 2026 GMT
        Subject: CN=524c40b0-c306-453b-a043-c6a8dcda6f51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c0:0e:ef:aa:b6:d1:bb:5e:9e:8c:ce:ea:26:
                    3b:07:c7:83:31:1f:fb:fe:70:45:36:93:b7:37:45:
                    e9:61:bd:c4:cb:6f:15:15:46:a9:c7:eb:5a:ae:f0:
                    c9:2b:93:cd:d2:46:cd:c8:3c:a3:39:01:cf:1f:a0:
                    31:59:84:3b:ae:18:35:63:49:02:32:94:de:59:d2:
                    ba:14:f9:05:fa:8f:60:f4:2e:8d:1e:28:4c:85:3a:
                    9b:98:ec:3c:55:a1:2d:06:5b:fe:17:cb:cc:0d:ab:
                    b8:a0:25:88:de:a0:12:19:c2:30:a0:a8:f1:9a:d6:
                    29:8b:11:6f:98:1e:36:1d:59:2f:7e:8e:c0:d0:42:
                    f5:28:e4:fd:bd:5a:52:59:4b:a4:bf:99:16:c7:d1:
                    27:1c:10:b2:de:8e:67:98:89:b7:8c:8c:6f:97:3c:
                    c9:32:08:60:5b:85:db:87:b2:23:26:62:65:0f:9b:
                    82:46:75:e5:8c:d5:8e:b1:a4:9b:9f:1f:d3:5a:f0:
                    a9:45:cc:da:5c:fc:77:9b:ac:5c:1e:34:36:03:f6:
                    2d:98:fa:28:15:41:35:60:a9:59:2e:06:44:b2:93:
                    7c:58:09:97:50:bb:bd:5a:6c:2b:10:af:03:0e:a1:
                    85:7e:0c:e2:96:6a:f5:5d:73:66:99:64:12:55:12:
                    5f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:1F:22:BB:3C:06:D5:99:66:4A:89:C9:FA:24:E5:34:E5:7E:F5:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/2d9d3321-db9f-306c-9228-ae06be4dece8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.crl

            X509v3 Authority Key Identifier:
                keyid:64:2E:31:9D:C5:17:1B:E0:F6:CD:30:94:51:D8:10:99:B1:1D:AE:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.47.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:fa:8b:27:00:16:79:bb:86:ba:fd:a5:5a:d2:fe:bb:3e:5b:
         4e:f1:69:36:c1:ea:e7:4e:7c:a8:be:ad:59:92:a8:df:35:46:
         be:52:04:d2:da:96:66:0a:e6:c4:69:47:a6:be:27:4c:01:d3:
         e0:8c:dd:e2:f8:ca:3f:86:a5:90:12:24:4a:f2:55:71:cf:34:
         4e:e4:5e:46:20:ff:62:f0:4a:7f:ba:a2:e5:f8:88:aa:34:28:
         72:aa:c9:fd:b5:95:e2:2a:13:80:56:fd:8f:09:80:98:d6:10:
         df:39:00:1d:e0:39:ea:2e:48:03:88:47:4a:e2:eb:8d:34:d3:
         aa:3c:02:39:3c:8d:9c:cc:2f:a2:a6:82:7b:9e:74:e7:2b:83:
         93:19:da:7a:84:20:5b:f2:de:e1:3a:fb:50:25:5c:c6:f3:74:
         ca:b0:ad:83:06:7e:ec:5b:69:0e:c8:26:73:4d:e9:75:ed:4b:
         4e:fe:b6:00:73:f1:f2:4a:8f:18:44:ba:e8:4b:d0:8e:56:42:
         b7:58:43:b5:70:bb:c4:47:9b:9d:df:1d:60:bb:5c:ae:76:1a:
         6f:a9:96:16:6a:dc:7f:8d:7b:3d:2a:c2:1c:0b:90:c1:42:b5:
         e5:d3:06:87:f1:37:da:02:16:6e:d4:d1:89:3e:cf:2b:8b:7b:
         71:77:98:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:30:37 2026 by rpki-client