Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/ce24c538-2f55-371a-a4e4-abc029cd8b1b.roa
File:                     ce24c538-2f55-371a-a4e4-abc029cd8b1b.roa (raw, json)
Hash identifier:          WPYhOjSBjKvj6lWfBBy0tf+3noiZuQ088i0MzBAyfpY=
Subject key identifier:   27:A2:10:0E:1C:6B:85:25:59:9B:9F:41:28:1B:55:63:67:6D:24:5B
Certificate issuer:       /CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234
Certificate serial:       010D0C9F4328584F13024843B8F1889CDB1E4200
Authority key identifier: BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/ce24c538-2f55-371a-a4e4-abc029cd8b1b.roa
Signing time:             Sat 05 Sep 2026 13:00:12 +0000
ROA not before:           Sat 05 Sep 2026 13:00:12 +0000
ROA not after:            Fri 04 Dec 2026 14:00:12 +0000
asID:                     15296
IP address blocks:        199.216.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:13:02:48:43:b8:f1:88:9c:db:1e:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234
        Validity
            Not Before: Sep  5 13:00:12 2026 GMT
            Not After : Dec  4 14:00:12 2026 GMT
        Subject: CN=c9946006-1f9a-4e10-8908-94c3a44dd0fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:fb:58:af:b3:58:38:1b:82:2d:bc:72:66:ef:
                    43:cd:06:53:fc:5c:f7:95:2a:d6:b8:23:67:36:a9:
                    1d:be:3d:11:bc:2f:1d:f5:5d:58:59:9b:c0:9b:b2:
                    0f:cb:75:90:49:55:be:db:2f:ff:29:9b:c8:b3:00:
                    ca:f8:a8:01:30:98:91:73:c0:13:9f:14:f6:31:b9:
                    1b:31:f3:2e:38:0d:df:cc:36:c1:11:4f:9e:ad:5b:
                    56:4a:77:aa:20:20:a1:68:a5:20:3b:1e:4f:3b:6a:
                    d3:4b:7c:61:4e:19:30:22:f7:7c:8d:83:35:78:b5:
                    b7:1f:0a:fa:f1:65:0b:89:32:60:e5:03:a0:79:c6:
                    1f:eb:00:42:0e:84:92:f8:41:1c:0b:85:ac:80:ac:
                    bb:e2:67:8b:62:99:82:e1:8c:e1:1b:12:dd:a3:57:
                    53:fe:7f:d3:72:99:8f:c5:71:94:44:95:9b:47:d0:
                    10:54:c4:4f:38:2f:27:88:1d:12:18:07:20:d1:b9:
                    b2:43:3f:d6:17:72:d5:50:bd:2b:19:8b:4f:00:be:
                    e5:c4:58:00:10:4b:a3:81:3a:49:45:ff:ad:e7:2e:
                    9a:9c:a7:76:cf:e9:71:d1:cc:70:f8:dc:d4:ea:78:
                    85:cc:57:2a:80:17:6f:ae:a2:e3:8e:60:3b:01:bb:
                    d9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A2:10:0E:1C:6B:85:25:59:9B:9F:41:28:1B:55:63:67:6D:24:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/ce24c538-2f55-371a-a4e4-abc029cd8b1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl

            X509v3 Authority Key Identifier:
                keyid:BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.216.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:21:7f:54:fa:ff:f0:4b:14:44:a4:f4:0c:89:ad:2d:c6:63:
         81:48:e1:fc:d4:e7:d1:a8:75:26:d2:48:94:f8:57:e1:8a:10:
         ca:99:2f:c9:ce:a8:b7:6d:0f:46:b7:61:86:5e:e3:f5:d1:3c:
         7c:09:92:67:bd:e7:0e:0b:28:9f:a6:ae:c7:60:7b:bf:45:74:
         cf:cb:54:d8:8f:5a:3b:7c:02:2b:e3:fb:0c:1e:0f:7f:9e:13:
         93:f7:16:b4:70:41:03:5f:67:bd:c4:74:30:0a:8b:2c:21:74:
         5b:fa:6b:16:8c:99:2b:98:35:65:53:02:0c:8c:e6:40:40:c3:
         cd:98:52:0d:28:3d:f9:5c:ca:f6:be:86:16:0e:e5:04:bb:f0:
         57:a2:16:67:c5:5b:56:d1:a7:42:62:54:18:38:49:55:15:05:
         9d:a6:3c:3e:85:e1:97:98:36:42:4e:57:6e:56:18:f1:c9:d0:
         d7:ba:77:35:20:52:2b:31:38:2d:4f:31:49:ec:c2:72:29:75:
         87:e1:6f:35:da:3b:2e:17:66:00:1d:05:31:c7:2b:ba:4d:7b:
         b6:52:e5:f3:43:9f:b7:11:12:b8:29:99:04:ca:93:d1:39:54:
         a3:9d:ce:d8:7b:06:a6:25:a7:24:f5:c3:2f:3c:b4:dd:a0:e8:
         d9:d0:0c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:17:32 2026 by rpki-client