Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/9b571f31-2820-3917-8dcc-6c3a51f96fb5.roa
File:                     9b571f31-2820-3917-8dcc-6c3a51f96fb5.roa (raw, json)
Hash identifier:          bqKohcVMmB5dkjPQFhnrehjWE7fJPT8tRTbq7XhGTeY=
Subject key identifier:   DF:C6:38:D3:96:EA:12:CA:3F:B2:DA:7E:C9:8A:C2:55:49:69:00:C8
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F4328584DE1509B96EE4B46A173F038C0
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/9b571f31-2820-3917-8dcc-6c3a51f96fb5.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     1280
IP address blocks:        199.6.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:9b:96:ee:4b:46:a1:73:f0:38:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=ebc68f0a-110a-4c7d-b54e-5dfd2ad91a02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:eb:03:ae:9b:4b:cd:91:21:65:7f:96:6f:05:
                    ab:ed:06:9f:e5:a0:96:6a:d4:79:67:1c:82:2f:92:
                    1c:a6:2b:34:52:cd:47:9e:16:8d:0b:1a:5d:3d:3a:
                    94:ff:71:e0:5c:31:74:66:b5:36:b3:14:2a:e6:f4:
                    07:30:46:80:ae:41:a7:47:ce:87:ff:a8:b8:49:b8:
                    9d:f9:1b:62:74:c3:cd:42:d7:13:81:98:65:ef:ae:
                    41:f4:63:1f:ed:a1:e4:a0:a0:9a:5b:d8:06:b5:d3:
                    db:db:33:30:c3:c4:94:4a:b9:e3:78:01:7e:7f:80:
                    36:47:69:ea:ba:eb:7c:80:1a:df:2f:a9:76:f7:72:
                    23:0f:92:3d:f2:e4:b9:bf:7d:b3:9e:43:0e:cf:ff:
                    af:68:9e:24:14:17:c8:46:78:7e:c6:60:3e:20:ac:
                    1b:4e:39:37:9c:17:1b:54:51:8a:14:54:2d:8f:bb:
                    f1:d4:b5:a8:14:89:6a:eb:ed:ef:a7:6a:5f:6d:ee:
                    24:1f:13:95:4f:70:7e:89:3b:2e:96:b4:a8:75:dc:
                    e4:67:d3:7f:41:13:9d:5a:0a:27:1f:21:a6:17:6c:
                    24:39:59:67:50:7d:85:86:ab:cd:88:4a:51:ee:85:
                    53:37:27:bc:27:ba:86:04:89:d1:ff:5b:80:a4:2c:
                    c0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:C6:38:D3:96:EA:12:CA:3F:B2:DA:7E:C9:8A:C2:55:49:69:00:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/9b571f31-2820-3917-8dcc-6c3a51f96fb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.6.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:c8:09:17:cd:0b:d3:02:9a:8f:53:bf:3f:a3:a1:17:ef:c8:
         9c:5c:1a:da:c4:b0:28:dc:72:f0:a5:41:c7:ea:4f:eb:c3:a1:
         42:af:44:22:1a:44:22:d0:a0:ab:df:45:9e:39:78:74:39:fe:
         a2:89:0a:cf:e3:75:cd:1a:67:92:82:3b:69:d6:9e:15:8a:13:
         fb:88:e7:22:56:99:99:76:27:e3:e6:8f:cf:f2:cf:40:66:cf:
         1b:0c:c3:97:cb:b4:88:f4:22:c0:ab:43:36:2a:56:29:46:57:
         ef:ec:aa:b4:bf:ce:96:80:ef:48:f9:09:5e:0f:18:1b:46:16:
         48:42:2c:c5:54:93:5a:eb:23:86:bf:d8:72:42:e8:76:d9:cd:
         a8:a9:27:6a:ad:28:2c:8b:8d:88:70:14:ac:fc:bf:9b:08:3c:
         85:d7:d3:bb:a1:57:cf:67:97:93:1d:b7:15:b2:00:34:c8:e8:
         9f:45:0a:60:68:07:c2:20:60:9f:5a:f5:50:6f:cb:9c:26:4d:
         9d:f7:9d:2b:e9:78:33:3a:a5:c4:d9:6c:39:1a:a6:77:79:54:
         b5:b7:d4:bb:88:7b:83:99:c6:e7:9f:0c:79:3e:90:2e:72:bd:
         57:f2:1b:86:34:33:16:f5:f9:b2:dd:08:df:f6:ae:d8:c5:24:
         22:d8:29:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:49:44 2026 by rpki-client