Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/232eebab-6a38-3cd3-9cf7-a515ea7308bc.roa
File:                     232eebab-6a38-3cd3-9cf7-a515ea7308bc.roa (raw, json)
Hash identifier:          43c9JGKqb9pxBSMXJv+Nxjhm2zUk6Yx7XUl6Vh77cDg=
Subject key identifier:   5C:47:84:A5:E6:AA:7F:CE:E6:68:C6:7A:00:58:1B:2D:D8:84:26:DB
Certificate issuer:       /CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234
Certificate serial:       010D0C9F4328584F13024557AA4F8A24A1881900
Authority key identifier: BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/232eebab-6a38-3cd3-9cf7-a515ea7308bc.roa
Signing time:             Sat 05 Sep 2026 13:00:12 +0000
ROA not before:           Sat 05 Sep 2026 13:00:12 +0000
ROA not after:            Fri 04 Dec 2026 14:00:12 +0000
asID:                     15296
IP address blocks:        199.216.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:13:02:45:57:aa:4f:8a:24:a1:88:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234
        Validity
            Not Before: Sep  5 13:00:12 2026 GMT
            Not After : Dec  4 14:00:12 2026 GMT
        Subject: CN=0e69c0e1-58f2-452b-825f-698c46d7075e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fc:c2:b5:be:33:a4:83:0c:7a:a3:cb:2c:2b:
                    23:bf:dc:20:86:e0:24:2c:15:fa:8a:c1:bf:f4:c1:
                    c0:cd:95:9b:11:24:d9:75:0c:f9:b4:57:ae:80:86:
                    5d:46:21:f5:1d:a6:80:2c:e1:0c:fc:3a:18:08:0e:
                    bf:5f:14:65:43:12:ed:e6:81:d0:21:7c:e6:ed:81:
                    3b:69:a5:9c:ed:d1:db:75:ed:e9:02:54:3f:aa:86:
                    13:21:3e:fa:9c:7c:fd:dc:4e:f8:e6:9c:6a:9e:5c:
                    4c:4d:8f:a2:f6:58:1a:1a:e1:99:33:52:06:6f:f8:
                    93:6f:63:bd:21:f5:fa:c8:57:96:df:03:38:bb:3c:
                    54:76:2c:f3:4c:e7:6a:44:ff:3a:05:6f:db:c8:4e:
                    2a:82:61:9a:ad:08:d2:ae:db:71:13:6b:b7:90:e8:
                    8d:cd:3e:7b:d0:86:05:8d:5e:66:75:cc:c3:ea:56:
                    21:0b:26:2a:9b:62:5c:f0:8e:d9:a8:43:d1:cb:82:
                    fd:3e:58:81:90:38:48:cf:be:05:65:da:50:db:78:
                    0a:35:f9:fd:b4:9a:64:b9:c0:06:2c:9f:2a:2c:80:
                    c7:e7:9f:76:8a:89:09:5c:12:92:20:cb:d2:63:2a:
                    f0:d0:67:f6:ac:f6:bb:41:5e:84:a5:56:fd:b3:3b:
                    fe:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:47:84:A5:E6:AA:7F:CE:E6:68:C6:7A:00:58:1B:2D:D8:84:26:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/232eebab-6a38-3cd3-9cf7-a515ea7308bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl

            X509v3 Authority Key Identifier:
                keyid:BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.216.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:65:0a:23:5d:91:15:70:db:49:2c:0a:67:5c:a4:e2:c8:2a:
         c2:ce:aa:20:55:5e:cd:71:e7:4d:e5:20:9e:3c:98:7f:b9:23:
         9e:19:c6:b4:b8:c2:05:7b:c0:d7:52:63:e6:30:d8:d8:f9:7c:
         46:01:48:2a:88:13:30:0a:8c:48:63:8e:bb:e0:b0:16:ee:0c:
         8b:7e:e4:4e:de:96:73:f7:b2:04:5a:fd:82:fc:0a:36:d7:e7:
         3b:66:69:9f:94:fe:6d:42:86:8c:2f:86:16:a4:8c:c9:c9:d3:
         c6:d3:ac:8a:c5:ad:15:98:9f:ba:f1:f1:bd:02:26:3f:94:0a:
         8b:46:1d:66:9c:59:ef:d2:aa:8e:7f:9e:9b:64:ea:cb:7b:80:
         de:17:d8:94:b2:ec:cd:4c:40:03:46:6e:9f:41:57:48:f5:43:
         76:66:5e:fa:d9:2d:85:f9:9f:33:7f:ef:c7:72:fc:f9:0b:68:
         c7:cb:f5:33:7a:13:bd:1a:50:7d:9a:19:6c:62:87:8d:7e:e2:
         3a:55:20:32:3a:fe:60:02:25:6e:0d:5c:7e:e5:42:89:d6:c1:
         66:c9:c5:86:0a:dc:28:45:20:e5:c5:40:d0:7a:e0:42:a1:40:
         1f:49:b9:c4:bf:97:7d:97:34:75:d0:c8:c9:74:cc:4b:44:77:
         42:ac:f6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:40:24 2026 by rpki-client