Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2340e8a8-1dd4-36c3-827c-cb73821dd396.roa
File:                     2340e8a8-1dd4-36c3-827c-cb73821dd396.roa (raw, json)
Hash identifier:          qstAzqZ4WOCAHje3X+j9JsuYPqrBWM1dhC5RESfyobk=
Subject key identifier:   E2:3D:E5:F6:74:47:77:95:E4:B3:18:BE:6D:D6:EA:F0:B8:5B:B0:DC
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584EA798AD3ED144BA52E8149C00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2340e8a8-1dd4-36c3-827c-cb73821dd396.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     852
IP address blocks:        99.199.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:ad:3e:d1:44:ba:52:e8:14:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=82fa9019-63f8-49a9-a69e-f5c95968adf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:12:e4:01:9d:e7:66:24:58:cc:49:ce:fe:00:
                    b6:8e:16:d0:e0:d9:ed:d4:16:e0:7a:92:d2:79:9f:
                    55:32:01:57:db:85:93:c7:84:18:f6:20:4e:9a:04:
                    d8:80:06:d7:c3:f3:60:e4:7c:c0:66:ce:20:c7:78:
                    ce:7c:45:04:2a:64:ad:e0:51:0e:9c:bb:47:38:36:
                    2c:6d:f7:d8:96:c0:89:8e:92:db:06:84:ad:51:98:
                    c0:de:50:75:d8:5a:bd:97:ac:72:41:a8:fe:9d:d7:
                    5e:39:15:44:a2:86:9f:47:9d:30:6a:e9:8a:4c:fc:
                    18:67:6c:f3:8d:46:35:62:44:57:54:de:5e:60:13:
                    c6:7e:43:60:54:5e:4b:c2:f5:85:22:68:53:99:cb:
                    48:44:57:c1:be:ac:40:a1:8b:1a:94:3a:91:aa:25:
                    cd:5b:54:c8:30:e8:9b:05:03:c6:65:64:c7:47:6b:
                    bf:f8:07:41:f2:6f:25:fa:ca:57:ab:61:2d:29:d5:
                    f7:d6:81:68:8a:d4:57:ac:3f:ab:00:7f:f8:27:6d:
                    6e:65:c1:3f:ad:45:9d:3d:46:aa:0d:79:59:fa:5e:
                    fd:fc:07:45:ed:72:33:4d:ab:85:8e:6e:4e:3b:9b:
                    33:94:27:4a:76:d1:80:64:a9:d0:d1:75:1c:ae:5f:
                    a5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:3D:E5:F6:74:47:77:95:E4:B3:18:BE:6D:D6:EA:F0:B8:5B:B0:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2340e8a8-1dd4-36c3-827c-cb73821dd396.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.199.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:d5:23:2f:36:16:0a:7c:75:a3:cc:b6:71:37:dd:cc:0a:8c:
         20:09:07:fe:6f:8e:36:89:d9:2e:d2:42:3f:be:6e:86:4a:9e:
         01:8f:ce:43:d1:b7:f9:96:5f:56:dc:58:74:77:7d:d0:56:f4:
         3e:b8:94:c0:67:6b:2b:b6:2d:81:f2:6b:24:2e:cf:e6:00:b1:
         73:04:d2:5e:80:7d:18:e6:44:7f:08:1b:fa:27:a6:fa:5d:24:
         84:cc:d6:ce:4b:fd:a1:23:ea:c3:19:0f:0a:bd:11:85:e2:92:
         cb:90:04:d6:ea:70:1e:6f:a5:18:c7:bf:2a:27:c4:38:8f:56:
         ed:4e:f5:64:ef:44:49:eb:ac:14:db:c9:3e:12:0d:ce:8d:4f:
         0b:77:2c:e7:b0:c0:7f:2c:06:5f:39:75:67:1e:8f:21:cf:a1:
         b7:54:0d:23:64:42:d5:ae:03:b2:f0:e4:31:e4:ef:df:d6:c1:
         41:29:fd:b7:d2:21:5c:ca:88:86:f9:06:bf:27:57:88:e0:85:
         17:8a:23:9f:05:56:97:6c:82:56:cc:da:4f:8a:9a:45:40:c6:
         73:2b:39:96:62:0c:8e:1f:83:42:a3:8a:16:d3:6c:ee:0b:f0:
         e2:fd:e4:71:6e:32:e5:9e:9b:24:13:c8:9d:89:4c:aa:57:ed:
         2d:a7:ca:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:17:15 2026 by rpki-client