Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c/17ca1dde-bdc7-36b0-ae9b-166decb0eb56.roa
File:                     17ca1dde-bdc7-36b0-ae9b-166decb0eb56.roa (raw, json)
Hash identifier:          qWz3dIOeiy2KnNIewIM+iwbHGHTteZ+xqrt3M3g0NSk=
Subject key identifier:   BC:05:C9:71:F8:06:1A:B1:7A:B5:9A:55:57:DB:3C:59:D2:38:E3:47
Certificate issuer:       /CN=fb8cf5dc-7c68-4e9d-850f-eb01a742b74c
Certificate serial:       010D0C9F4328584F1897921FE5DB5DC8ECB52900
Authority key identifier: 38:C4:C5:DF:59:2E:DB:A9:20:81:98:7E:54:F2:B8:68:DC:17:8E:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c/17ca1dde-bdc7-36b0-ae9b-166decb0eb56.roa
Signing time:             Mon 07 Sep 2026 13:00:12 +0000
ROA not before:           Mon 07 Sep 2026 13:00:12 +0000
ROA not after:            Sun 06 Dec 2026 14:00:12 +0000
asID:                     31898
IP address blocks:        199.175.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:18:97:92:1f:e5:db:5d:c8:ec:b5:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb8cf5dc-7c68-4e9d-850f-eb01a742b74c
        Validity
            Not Before: Sep  7 13:00:12 2026 GMT
            Not After : Dec  6 14:00:12 2026 GMT
        Subject: CN=252d42bc-7a74-494b-9bc5-ee1a91d35a9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:76:89:32:db:7d:89:b3:27:d8:e4:fb:75:cc:
                    03:06:05:40:56:98:73:ca:d9:0b:ac:ef:4e:59:9b:
                    5e:06:08:b9:69:49:00:c4:00:77:7f:a4:df:7e:32:
                    31:21:b8:e0:7c:19:84:03:58:98:cd:3c:bf:ff:fc:
                    a0:92:f2:fd:c5:68:16:c0:28:eb:14:96:e3:64:4d:
                    9e:67:e7:f8:54:f9:85:0a:7a:32:ad:ed:f6:53:ac:
                    4b:85:2b:17:28:a5:c3:68:33:bb:82:00:cc:f6:72:
                    f7:14:da:93:65:9e:34:3e:5a:df:42:58:11:d3:ed:
                    d3:b7:c2:b1:38:1d:1b:f8:e3:02:72:62:83:20:66:
                    1e:96:0f:0d:75:b9:ff:69:2b:4a:33:f2:fb:c5:ea:
                    e8:07:3b:c4:dc:8e:9b:68:53:dc:d0:4f:04:b1:0a:
                    bf:c4:c7:9c:73:a8:c8:4d:9d:f2:c8:69:3b:f6:88:
                    9c:6d:86:86:cd:43:cc:8b:56:05:59:ef:89:90:75:
                    35:c0:ef:4a:e0:02:f5:18:c3:10:b3:7f:46:3e:d0:
                    3a:5a:33:95:42:29:2b:cb:5d:b2:a7:cd:ec:09:64:
                    8b:1d:9a:e9:ef:31:84:93:c7:6d:43:31:ea:27:2b:
                    d9:83:83:b2:e4:a9:e7:f2:4a:e9:92:4d:b0:7b:b2:
                    43:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:05:C9:71:F8:06:1A:B1:7A:B5:9A:55:57:DB:3C:59:D2:38:E3:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c/17ca1dde-bdc7-36b0-ae9b-166decb0eb56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c.crl

            X509v3 Authority Key Identifier:
                keyid:38:C4:C5:DF:59:2E:DB:A9:20:81:98:7E:54:F2:B8:68:DC:17:8E:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.175.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:26:f0:06:c0:ab:6b:58:81:ad:ff:31:f9:50:a5:57:a9:17:
         55:80:25:57:b0:35:7e:98:9c:14:a6:3f:b9:b6:1f:4b:4e:b9:
         a8:d0:49:9c:18:04:05:a8:ca:a1:3c:46:24:1f:d3:98:2b:11:
         ef:46:9c:3c:84:ac:c0:99:34:84:cc:8b:01:43:16:77:cf:a5:
         86:d6:ed:71:b4:0d:28:a1:70:41:fa:09:b0:0c:f8:75:9c:65:
         d4:a0:43:69:1d:8b:0d:16:56:55:b2:69:ac:b8:f9:18:e5:2d:
         4d:56:da:65:c3:16:75:3f:6f:73:9c:fb:fc:54:4c:fd:33:13:
         36:c7:06:93:5d:18:8d:b4:a2:a9:04:ef:cc:63:fe:27:75:14:
         f8:c1:ec:2c:28:f5:72:00:91:a4:c0:4c:b7:6c:a3:e1:a7:af:
         1c:ff:80:0c:e7:f2:e3:0e:c9:79:c7:29:9b:14:91:67:db:08:
         f7:3d:45:75:3c:1a:f8:9a:af:12:e1:cf:eb:b8:c4:58:79:35:
         e0:ef:5f:9d:95:9d:84:56:5d:1d:a2:50:be:60:12:2d:33:d4:
         05:ff:23:d9:af:66:dd:1e:54:2f:50:25:d5:d3:4f:08:d5:d2:
         31:2a:7a:ca:65:4c:ca:30:c0:ad:df:af:d0:7d:da:e7:54:e2:
         21:03:82:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:56:00 2026 by rpki-client