Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/559623de-14dc-3254-abac-1b766ef6a5f9.roa
File:                     559623de-14dc-3254-abac-1b766ef6a5f9.roa (raw, json)
Hash identifier:          VoyraBDLba2+s4skDqUgQORpRPvomA9pR/gw/x3XE84=
Subject key identifier:   7E:D8:4A:83:66:BF:BB:53:34:13:6D:C5:B6:B8:1B:E5:D1:96:E1:2F
Certificate issuer:       /CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234
Certificate serial:       010D0C9F4328584CB0DF2EFE91ECBDAA9250FF80
Authority key identifier: BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/559623de-14dc-3254-abac-1b766ef6a5f9.roa
Signing time:             Thu 29 Jan 2026 23:46:36 +0000
ROA not before:           Thu 29 Jan 2026 23:46:36 +0000
ROA not after:            Wed 29 Apr 2026 22:46:36 +0000
asID:                     15296
IP address blocks:        199.216.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b0:df:2e:fe:91:ec:bd:aa:92:50:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234
        Validity
            Not Before: Jan 29 23:46:36 2026 GMT
            Not After : Apr 29 22:46:36 2026 GMT
        Subject: CN=46e3030f-ea3d-44b6-a0eb-f983b6b8ff09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:47:f7:fd:93:f2:c5:7e:cd:c2:32:0b:d7:2f:
                    6d:db:82:bc:55:d8:b1:70:6c:84:0d:af:4d:3e:6f:
                    fc:99:43:c5:a6:0e:e6:20:18:4f:12:2c:5b:2f:e2:
                    48:a9:3a:44:b3:42:a6:5e:87:9e:02:6a:70:7b:94:
                    dc:93:e1:b0:ce:0d:41:49:71:ae:95:33:d6:9e:19:
                    78:91:e2:48:2a:45:b1:08:3e:93:87:58:f1:14:cd:
                    9a:0a:99:d2:5e:df:4e:47:ec:5a:28:f1:62:5d:56:
                    3c:bc:9f:e3:7d:99:8f:a2:92:65:93:8b:d2:1d:31:
                    7e:85:fe:60:e1:cc:1d:41:84:a1:f0:1d:73:43:40:
                    13:13:56:10:f4:9e:0d:1f:00:a3:0c:b0:89:0f:95:
                    c2:05:b4:00:4d:83:1f:4e:17:17:c6:9f:b5:46:c1:
                    68:b3:a5:80:c2:12:56:33:8d:26:d4:c5:30:89:c2:
                    72:5a:84:4b:f1:1b:c4:2e:2c:7e:64:91:d2:b2:56:
                    f4:eb:7f:e2:5b:56:51:31:c7:ce:30:84:e7:1f:26:
                    3a:2c:24:56:6e:61:8d:53:21:1a:85:00:6f:10:f6:
                    d3:88:15:17:67:9b:26:ab:89:cf:1a:57:16:db:56:
                    d2:6d:26:c8:42:8b:62:05:51:5a:1a:d8:ad:27:c8:
                    98:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D8:4A:83:66:BF:BB:53:34:13:6D:C5:B6:B8:1B:E5:D1:96:E1:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/559623de-14dc-3254-abac-1b766ef6a5f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl

            X509v3 Authority Key Identifier:
                keyid:BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.216.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:04:f3:35:03:e0:30:2a:c8:f7:d1:9a:51:76:4a:5b:b6:68:
         e5:a8:50:c2:93:4d:a2:5c:a9:2d:e5:5b:5c:ac:c7:52:72:1e:
         6c:77:00:7a:02:a4:58:07:fc:f7:3a:6e:68:1b:cb:8b:37:dd:
         b5:c4:19:b6:91:89:f7:63:26:2f:a5:14:19:82:1f:40:42:3a:
         85:e3:59:99:ae:44:7e:b8:0c:f0:61:65:11:0e:2f:10:45:1c:
         ce:0b:07:42:0e:ab:6e:7e:4f:d9:a3:a8:d8:53:35:33:90:54:
         20:f5:29:7c:32:ff:be:19:fd:95:1f:80:a4:ea:89:38:56:9c:
         b0:b9:11:ad:e4:2f:20:e6:84:03:da:6c:1a:7f:af:cc:ee:be:
         65:b7:db:03:23:88:9a:88:3b:6c:1d:1c:b2:00:12:b1:ca:f3:
         c0:c8:29:24:5d:08:fd:bd:7e:08:d0:7f:8c:74:be:d3:a9:1b:
         e9:e3:d4:22:26:06:d4:c0:bc:78:61:54:48:39:3b:91:48:af:
         b0:3d:0c:cb:99:23:75:45:c0:c9:9b:35:06:cc:bc:89:e0:2d:
         07:61:0f:52:f7:85:1f:92:f6:6b:d1:e9:89:a7:0a:f3:a3:78:
         c1:fd:91:0c:e9:54:f1:e8:ee:ce:ea:b5:6e:08:80:cb:73:f4:
         0f:a7:39:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:27:21 2026 by rpki-client