Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d31b4a7d-fdad-44f3-ad1b-35d470b481b6/c299c2ed-fc1b-3bb8-b23d-546ac1f961fd.roa
File:                     c299c2ed-fc1b-3bb8-b23d-546ac1f961fd.roa (raw, json)
Hash identifier:          qxii5N2iOTl/bPAoEjsvmhbXhOd/h62fmJ43kk3Q47Q=
Subject key identifier:   5B:B9:4B:08:A0:7F:E2:1E:6A:81:77:24:ED:00:D8:44:E0:7B:AF:45
Certificate issuer:       /CN=d31b4a7d-fdad-44f3-ad1b-35d470b481b6
Certificate serial:       010D0C9F4328584B970CDBE7B1057D76279DEA40
Authority key identifier: 79:2A:B5:D6:3F:8D:27:64:C3:F2:CC:12:4A:94:19:C4:9A:01:EF:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d31b4a7d-fdad-44f3-ad1b-35d470b481b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d31b4a7d-fdad-44f3-ad1b-35d470b481b6/c299c2ed-fc1b-3bb8-b23d-546ac1f961fd.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     396982
IP address blocks:        199.166.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d31b4a7d-fdad-44f3-ad1b-35d470b481b6/d31b4a7d-fdad-44f3-ad1b-35d470b481b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d31b4a7d-fdad-44f3-ad1b-35d470b481b6/d31b4a7d-fdad-44f3-ad1b-35d470b481b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d31b4a7d-fdad-44f3-ad1b-35d470b481b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0c:db:e7:b1:05:7d:76:27:9d:ea:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d31b4a7d-fdad-44f3-ad1b-35d470b481b6
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=84bd9683-8cf7-4a5c-88c0-a3952f16c922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c6:4e:f0:58:21:66:e7:2a:04:7f:26:bb:c3:
                    c6:d0:0c:a3:38:1b:42:af:a6:ae:40:91:82:2c:2a:
                    28:46:08:c9:2e:36:19:85:ff:bb:01:73:18:26:2e:
                    54:24:9f:31:42:de:e2:9a:94:a6:b2:21:21:e9:5b:
                    3a:1b:35:ab:01:2c:bf:7b:f8:b1:a2:54:3f:b3:46:
                    ae:96:fd:48:62:aa:3a:0d:18:f0:43:08:75:81:97:
                    7a:a1:01:ea:00:6b:89:61:c5:cc:cd:43:e9:70:2b:
                    bc:09:5c:2f:ed:80:ac:a7:95:d8:75:99:a1:e7:72:
                    d5:c2:1b:86:47:04:37:55:c0:00:c4:88:c9:43:ca:
                    ae:b3:a0:1e:34:6c:8b:d5:fb:2b:01:ce:b0:68:45:
                    20:1a:c8:d4:7c:cd:ca:5e:7c:76:65:2a:49:26:ed:
                    4f:64:8a:e9:f6:73:6d:ca:8e:e2:86:d6:2f:61:88:
                    8d:7f:52:f6:d9:ba:70:5b:86:6b:a2:18:0d:ba:31:
                    cc:8a:4a:c0:c7:01:f4:61:e7:a4:d4:42:e2:91:2c:
                    89:30:d9:8d:95:df:a1:a3:44:29:33:27:99:05:2c:
                    34:f8:98:f6:27:a0:52:77:73:33:dd:36:c8:d4:c1:
                    65:25:02:33:59:1a:46:68:51:c9:d7:70:60:89:f0:
                    95:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B9:4B:08:A0:7F:E2:1E:6A:81:77:24:ED:00:D8:44:E0:7B:AF:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d31b4a7d-fdad-44f3-ad1b-35d470b481b6/c299c2ed-fc1b-3bb8-b23d-546ac1f961fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d31b4a7d-fdad-44f3-ad1b-35d470b481b6/d31b4a7d-fdad-44f3-ad1b-35d470b481b6.crl

            X509v3 Authority Key Identifier:
                keyid:79:2A:B5:D6:3F:8D:27:64:C3:F2:CC:12:4A:94:19:C4:9A:01:EF:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d31b4a7d-fdad-44f3-ad1b-35d470b481b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.166.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:ca:46:e4:ac:a5:eb:6d:cf:62:77:96:da:4c:05:db:f3:71:
         6c:54:a0:ad:e4:66:fb:6d:4e:53:f7:82:b0:df:be:82:ca:3c:
         ac:c5:79:48:49:b5:d6:13:b7:9b:6c:4d:f7:c1:de:69:d6:23:
         62:f2:06:d6:28:d4:f5:a8:07:a3:b8:c1:ac:27:28:fc:5e:55:
         81:12:2b:20:17:16:3b:fa:1a:b9:45:15:38:09:c5:29:5d:de:
         d1:10:71:a6:a1:4c:4c:68:93:78:54:5b:42:fc:b3:5a:00:37:
         e1:19:3d:5c:02:0c:02:af:be:bb:cb:24:73:de:00:58:e8:ff:
         9b:5b:ae:43:5f:e5:13:e2:73:ee:78:c8:2e:c3:3f:9e:03:4b:
         bf:6e:ef:61:9d:1b:4f:c5:a2:ad:01:26:a2:af:e4:7b:ee:e4:
         8a:ee:9b:3e:1d:89:80:30:0f:c8:ac:da:68:85:f6:3d:47:1e:
         5d:f9:03:2f:33:98:b1:54:5a:4c:cc:1f:3a:d7:5c:c7:bf:60:
         ae:64:62:b8:82:1b:3e:22:91:0e:9e:b8:76:6f:85:5c:00:30:
         b4:e5:c9:26:36:74:88:b7:5d:5d:f9:43:0f:49:0e:ce:77:cc:
         bd:71:dc:cd:6e:3b:ec:38:63:de:4e:0a:35:90:87:0c:7f:67:
         21:fa:e1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:35:03 2025 by rpki-client