Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f4dd615-5a9e-4057-98d2-c069dd16f4f7/c95f12bd-6100-3771-b253-a4f96a626c93.roa
File:                     c95f12bd-6100-3771-b253-a4f96a626c93.roa (raw, json)
Hash identifier:          1HW5JWxdAWHovbtgHpztd2Eme8f9DJbReZb7TNEgnik=
Subject key identifier:   CB:3B:8B:7E:E9:91:63:F7:59:E5:05:97:1E:2B:B0:6D:73:71:B5:47
Certificate issuer:       /CN=2f4dd615-5a9e-4057-98d2-c069dd16f4f7
Certificate serial:       010D0C9F4328584E1A143BA6808324F7CF381500
Authority key identifier: 91:19:AF:EC:80:9F:5F:21:48:94:A1:B7:8D:E6:61:E5:8B:78:C1:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f4dd615-5a9e-4057-98d2-c069dd16f4f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f4dd615-5a9e-4057-98d2-c069dd16f4f7/c95f12bd-6100-3771-b253-a4f96a626c93.roa
Signing time:             Mon 08 Jun 2026 09:00:12 +0000
ROA not before:           Mon 08 Jun 2026 09:00:12 +0000
ROA not after:            Sun 06 Sep 2026 09:00:12 +0000
asID:                     16509
IP address blocks:        172.99.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f4dd615-5a9e-4057-98d2-c069dd16f4f7/2f4dd615-5a9e-4057-98d2-c069dd16f4f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f4dd615-5a9e-4057-98d2-c069dd16f4f7/2f4dd615-5a9e-4057-98d2-c069dd16f4f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f4dd615-5a9e-4057-98d2-c069dd16f4f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1a:14:3b:a6:80:83:24:f7:cf:38:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f4dd615-5a9e-4057-98d2-c069dd16f4f7
        Validity
            Not Before: Jun  8 09:00:12 2026 GMT
            Not After : Sep  6 09:00:12 2026 GMT
        Subject: CN=2ba532ee-cb27-421a-8960-fcb98c8a0336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:14:1d:dc:77:01:1c:db:4d:d9:42:2d:34:80:
                    a1:4b:21:57:6d:f9:dc:b3:29:3b:81:15:f1:b2:17:
                    ea:79:dc:cb:bb:2a:0e:5e:82:8a:63:cf:fa:a3:47:
                    7c:05:08:69:ff:5d:b3:06:e1:ab:61:70:a7:32:e4:
                    2d:88:72:8b:c9:4b:20:3e:a7:e4:dd:a9:90:8e:ac:
                    6d:cd:b6:60:12:fc:67:ad:5c:68:35:bb:b6:f3:a6:
                    6f:76:ca:46:8e:10:fd:b5:ce:76:74:57:bb:f3:d3:
                    da:fd:76:34:21:59:2e:0e:c7:76:b4:e0:f2:71:83:
                    76:ff:ff:1b:84:d5:9b:af:53:0d:30:33:f6:37:e7:
                    83:66:c9:41:d6:69:0f:81:48:b8:90:fe:de:50:6c:
                    9d:28:47:29:82:eb:21:50:b2:9a:07:b8:c9:97:b0:
                    d6:0b:7b:62:ed:81:ff:37:04:27:12:ac:f4:c9:13:
                    90:22:a4:b6:ce:41:d4:dc:2b:1d:0c:30:72:f6:7d:
                    0d:65:b1:6c:7b:61:84:5f:12:fa:d0:ec:04:d3:99:
                    ff:be:cb:39:33:1d:ce:5c:a9:0e:cb:b0:33:5f:36:
                    19:48:41:6f:09:3f:ea:02:a8:f2:9a:2c:7c:58:af:
                    46:4e:c0:5c:df:c3:dd:d6:98:1d:64:e1:96:65:41:
                    bc:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:3B:8B:7E:E9:91:63:F7:59:E5:05:97:1E:2B:B0:6D:73:71:B5:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f4dd615-5a9e-4057-98d2-c069dd16f4f7/c95f12bd-6100-3771-b253-a4f96a626c93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f4dd615-5a9e-4057-98d2-c069dd16f4f7/2f4dd615-5a9e-4057-98d2-c069dd16f4f7.crl

            X509v3 Authority Key Identifier:
                keyid:91:19:AF:EC:80:9F:5F:21:48:94:A1:B7:8D:E6:61:E5:8B:78:C1:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f4dd615-5a9e-4057-98d2-c069dd16f4f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.99.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:64:4d:89:cc:d6:16:dd:bf:f8:c4:6e:2e:93:92:10:10:4f:
         dc:67:1c:62:ec:2b:93:80:29:c7:70:c5:7f:7b:f1:94:f3:82:
         72:74:94:c5:70:8e:e8:76:a9:36:b0:16:2a:8d:6e:40:29:14:
         4d:49:a6:ac:4a:02:9d:85:74:a6:a0:52:b7:6c:90:5f:ef:92:
         d7:96:fc:b9:e8:f4:cb:f3:eb:9d:75:f2:ee:b8:f8:1f:db:9e:
         30:e4:48:ca:34:b9:8d:2f:82:d2:c5:fa:f2:cf:66:92:a4:08:
         a6:ca:87:23:53:71:d0:57:cc:a9:21:8c:db:b1:f2:ca:db:22:
         cb:2a:df:61:e5:a9:89:cb:06:6e:dc:ef:69:43:ed:e4:97:61:
         22:f5:5c:e9:bd:a1:90:46:4c:25:a7:7e:7d:64:67:e3:16:f8:
         f6:6c:2c:a5:24:f7:ae:bf:d8:58:a4:31:d0:0f:ac:7d:84:4e:
         89:b4:90:9c:6c:83:48:d8:cc:e4:d9:88:5d:03:ae:2d:15:15:
         15:8a:b7:78:13:e8:fb:07:11:5a:5b:0e:93:90:60:ad:84:7b:
         68:27:2c:d5:9b:58:3f:eb:71:56:f5:89:d9:65:42:32:be:58:
         32:b8:02:ec:95:cd:2d:36:e9:23:2d:af:c7:0b:f8:cc:a5:d4:
         ac:8f:b0:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:46:47 2026 by rpki-client