Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/8a3125c9-ece9-3da1-a78e-16e603dc59a9.roa
File:                     8a3125c9-ece9-3da1-a78e-16e603dc59a9.roa (raw, json)
Hash identifier:          Ai8S9FD2Tj5lfZpMQ21hKOZPnYHUo724z/nnsifD6a8=
Subject key identifier:   57:A0:94:4F:D5:85:DC:B2:35:E4:C5:BC:A8:D7:59:1E:26:84:27:73
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F4328584D746FBD5E04D3B6EFAE038680
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/8a3125c9-ece9-3da1-a78e-16e603dc59a9.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     30133
IP address blocks:        199.6.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:bd:5e:04:d3:b6:ef:ae:03:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=a740325f-77eb-4b6d-9082-03d9141da16f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:bd:1e:93:35:8b:58:ea:e6:84:02:e9:6c:86:
                    af:a3:b7:0d:aa:fa:a9:df:9b:f2:78:e5:a4:b6:c6:
                    11:67:65:68:f2:16:b6:1d:ea:76:72:5b:17:b0:34:
                    8b:e3:97:c2:88:ac:60:0f:39:1b:94:5b:fb:37:df:
                    2f:11:b6:7e:da:e4:b5:eb:b9:8a:9b:2c:33:26:75:
                    d1:69:98:80:c1:be:fc:d7:b8:00:7d:08:a4:4a:0c:
                    1d:10:af:cd:b7:1b:1d:8e:32:d5:95:b0:2b:dc:1c:
                    90:57:06:d1:29:7f:7f:b2:00:e9:28:2d:87:2a:f7:
                    39:fa:f3:58:60:c4:83:3f:ec:55:0d:fe:ab:1c:a9:
                    28:7f:71:c8:a4:75:a8:0e:84:67:c6:f6:d5:d2:2c:
                    12:c8:d3:74:2f:aa:1a:d9:3a:e5:4d:22:a8:c9:a6:
                    2f:4f:bf:44:21:1f:f2:c6:02:67:21:67:e9:f0:28:
                    54:db:63:da:ca:c3:af:0b:2c:e0:cc:7f:8e:d2:ae:
                    76:ae:b2:ac:6b:b9:03:fe:1b:83:1d:dc:94:0e:be:
                    7e:1a:57:5e:93:43:e5:0e:9e:fc:cd:28:37:c8:f0:
                    6f:3c:69:e3:7b:70:6c:d1:87:e8:4d:7e:0f:33:5e:
                    56:57:a2:12:79:bd:82:72:74:e3:5e:63:3d:c0:e8:
                    9c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A0:94:4F:D5:85:DC:B2:35:E4:C5:BC:A8:D7:59:1E:26:84:27:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/8a3125c9-ece9-3da1-a78e-16e603dc59a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.6.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:5e:e2:8d:b7:e8:ec:56:cc:f5:af:0d:08:05:8e:77:22:a3:
         41:3f:a4:1e:cf:47:88:6a:b5:c5:e5:6a:91:e6:53:ec:96:98:
         76:d3:11:19:01:2b:6c:ca:2f:ba:4e:30:db:73:b9:25:42:bc:
         76:4c:61:62:71:11:3b:48:bb:75:06:73:be:f8:d8:78:f8:e2:
         73:7b:4d:bb:50:69:9f:13:dc:5a:b8:54:e4:52:c0:86:1b:f4:
         cd:a7:39:99:fe:fc:a6:ff:64:a6:67:b5:24:f3:a8:b5:a9:1c:
         22:36:b9:c0:f3:97:4d:10:32:9a:8e:8a:55:57:e1:f4:40:db:
         89:fd:09:d4:8d:6e:bc:ed:28:41:3e:62:56:a1:14:97:d2:38:
         f6:65:59:25:cc:bb:e0:7c:ec:18:51:f0:05:2a:46:b1:ad:35:
         53:af:eb:79:4f:55:78:07:be:fb:f6:3c:b7:8d:00:2f:f4:96:
         74:f3:81:e3:a5:08:8e:35:e5:b4:b1:13:21:84:06:3d:85:39:
         b7:2a:d5:65:c7:d0:ce:42:af:bd:c9:a4:3e:63:0e:d1:15:dd:
         08:62:3f:1a:e7:ae:20:42:99:15:91:dc:44:ad:c9:b2:8c:1d:
         06:b1:d2:99:10:73:ac:a5:84:24:30:e6:7d:5e:62:15:04:a2:
         41:e9:fc:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:47:08 2026 by rpki-client