Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7a42f056-4bef-3a56-8db3-4ca8c38cd6b9.roa
File:                     7a42f056-4bef-3a56-8db3-4ca8c38cd6b9.roa (raw, json)
Hash identifier:          7K9n7RTEgYzRbxWI7gidpZf7hvkZTMLh4oofgUraCZU=
Subject key identifier:   79:B0:00:72:42:ED:E4:3D:FD:BC:BA:0A:2D:37:58:F1:3E:DE:26:EF
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584E1E4479BE0A3A323A7BAE1680
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7a42f056-4bef-3a56-8db3-4ca8c38cd6b9.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     17359
IP address blocks:        199.200.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:79:be:0a:3a:32:3a:7b:ae:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=95ab1b60-fb30-4441-9226-b34f715e67ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b6:20:20:2d:6c:76:27:9c:48:1b:23:fa:cf:
                    f7:e7:a3:07:d2:53:33:af:6f:42:d6:3d:05:1d:b6:
                    07:85:e4:0a:82:24:2e:30:19:44:39:af:a1:9f:16:
                    52:60:0d:e9:7d:d8:ec:d6:79:97:33:e7:a9:82:f2:
                    f8:1a:48:cf:98:f2:de:7b:38:a0:42:35:60:e0:52:
                    ef:40:35:0a:01:21:e0:5d:8d:28:17:d7:7a:ef:6f:
                    13:49:28:14:d4:1b:9f:a3:95:27:55:a6:ed:3e:a5:
                    9c:d7:f3:12:67:4a:75:c3:a0:5b:a0:18:db:a3:1f:
                    ec:b1:03:2a:4c:c4:40:5e:39:87:c8:e9:fd:c1:46:
                    8a:08:83:ad:de:cc:06:62:7f:d2:83:51:41:58:29:
                    b3:54:46:3a:94:89:a3:a4:03:32:a7:ef:af:be:01:
                    0e:fc:75:dc:7a:85:0e:65:fc:40:27:11:01:1f:28:
                    82:63:09:3f:bf:11:d3:89:b6:74:ef:d3:50:13:89:
                    45:51:ad:58:c0:d3:54:eb:fb:02:12:63:c3:37:ff:
                    9f:3f:63:30:03:87:6d:0c:cc:e0:69:54:2d:6c:0a:
                    1e:08:ce:6d:de:70:2d:44:ff:6b:4b:e4:16:d4:4a:
                    38:de:02:d7:ba:ca:22:4b:11:14:28:aa:c0:03:6a:
                    9d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B0:00:72:42:ED:E4:3D:FD:BC:BA:0A:2D:37:58:F1:3E:DE:26:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7a42f056-4bef-3a56-8db3-4ca8c38cd6b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.200.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:0c:a1:f9:c2:b4:ad:01:90:ff:21:9f:d8:1c:14:7f:ed:4b:
         ff:20:77:c7:33:09:6f:c4:86:4f:7b:11:12:bc:47:e2:55:5f:
         84:0a:eb:3b:77:38:cd:77:a2:e3:98:d0:99:fe:46:a4:d8:4a:
         a0:68:c1:af:cb:73:a0:2c:5d:98:56:b6:8e:c0:1b:f5:7b:69:
         19:73:70:83:82:81:4c:a5:16:e1:5d:1e:41:62:b7:5e:ca:58:
         af:75:20:d0:60:0c:9b:ee:48:13:17:1e:fe:f6:0d:5a:42:a0:
         a2:57:b1:5a:1f:8f:d0:91:6f:1e:8a:b0:8b:f1:6c:c2:e5:7c:
         a8:c7:13:83:bd:43:89:c7:02:41:61:c6:fc:75:4f:d8:21:4d:
         f5:dc:0a:49:f4:d2:56:c4:4c:04:d0:7c:ef:e7:7f:bf:1b:72:
         65:d1:6d:c2:86:47:09:a4:6a:4a:cf:05:1b:ad:ec:41:db:b7:
         54:88:61:8c:c1:56:6a:d5:f3:19:4c:53:70:89:ee:34:1b:92:
         cd:a9:f4:d9:2f:df:22:d8:81:73:25:6a:26:b9:1a:05:fe:b7:
         1b:a1:d0:66:3d:d7:86:d0:51:86:d5:d7:8c:b8:08:24:19:b5:
         33:0d:22:43:cd:d6:c1:09:af:4c:09:c8:ac:5a:99:fd:9c:26:
         d5:fb:fc:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:03:03 2026 by rpki-client