Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d7c7699-15af-4ea4-8825-93e2f116691f/611240e0-65a6-3754-a0a6-84e5e23b35ff.roa
File:                     611240e0-65a6-3754-a0a6-84e5e23b35ff.roa (raw, json)
Hash identifier:          Wr6hlLcyfisDl6/TroD7YXCZ3HrLD1MEZkNNRm/fW6Y=
Subject key identifier:   27:4A:C5:8F:E3:6F:67:E6:86:71:5D:B9:67:D1:AF:42:D8:BE:93:B4
Certificate issuer:       /CN=3d7c7699-15af-4ea4-8825-93e2f116691f
Certificate serial:       010D0C9F4328584DEF45E31CC4E2F6346F157080
Authority key identifier: B0:85:4C:6A:84:A4:29:6A:40:D3:2B:12:A3:B9:68:99:26:EE:02:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d7c7699-15af-4ea4-8825-93e2f116691f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d7c7699-15af-4ea4-8825-93e2f116691f/611240e0-65a6-3754-a0a6-84e5e23b35ff.roa
Signing time:             Sun 24 May 2026 01:00:27 +0000
ROA not before:           Sun 24 May 2026 01:00:27 +0000
ROA not after:            Sat 22 Aug 2026 01:00:27 +0000
asID:                     376
IP address blocks:        199.84.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d7c7699-15af-4ea4-8825-93e2f116691f/3d7c7699-15af-4ea4-8825-93e2f116691f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d7c7699-15af-4ea4-8825-93e2f116691f/3d7c7699-15af-4ea4-8825-93e2f116691f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d7c7699-15af-4ea4-8825-93e2f116691f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ef:45:e3:1c:c4:e2:f6:34:6f:15:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7c7699-15af-4ea4-8825-93e2f116691f
        Validity
            Not Before: May 24 01:00:27 2026 GMT
            Not After : Aug 22 01:00:27 2026 GMT
        Subject: CN=a9de59aa-73d9-4164-9f40-9fd6190718bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b3:75:9e:92:2b:2a:33:20:5d:7b:c8:5d:de:
                    33:b0:52:89:4b:12:bf:c6:ea:db:a6:ab:eb:6a:bd:
                    ba:f2:1f:cb:48:4e:7b:db:52:91:78:0a:7e:1f:4a:
                    41:07:1d:9e:51:46:93:f9:08:64:46:30:7a:85:a3:
                    6d:ff:fb:89:16:8c:68:cc:1c:e4:78:5e:e5:40:a7:
                    2e:24:16:ba:a8:0e:a5:09:e4:d6:32:6a:45:92:8c:
                    42:6e:2e:a2:97:a5:13:a6:57:fb:30:b7:26:15:e1:
                    5e:c2:a4:e8:55:b0:aa:bd:14:93:28:fc:95:fd:f5:
                    d7:a0:ba:f1:cb:74:1f:e0:74:90:5d:30:f4:a4:71:
                    0d:2e:10:53:5a:4e:cc:32:34:8f:04:6b:be:d3:5a:
                    46:db:2f:b6:ee:94:05:6c:50:80:99:21:cc:59:29:
                    ac:51:76:88:26:7a:89:ca:ac:ca:27:89:3b:00:9a:
                    fd:05:0f:de:e1:9a:52:56:65:ae:40:22:68:01:26:
                    46:10:15:29:56:ed:b9:e1:b2:52:4b:dc:0b:1d:ee:
                    04:f6:2d:78:1f:db:cc:64:e2:41:07:28:bd:b5:a9:
                    aa:c3:df:4b:03:10:8c:53:5f:6f:39:3f:8a:2a:9f:
                    5c:34:ad:e1:eb:ee:34:93:c2:ad:a9:da:52:7b:0b:
                    42:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:4A:C5:8F:E3:6F:67:E6:86:71:5D:B9:67:D1:AF:42:D8:BE:93:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d7c7699-15af-4ea4-8825-93e2f116691f/611240e0-65a6-3754-a0a6-84e5e23b35ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d7c7699-15af-4ea4-8825-93e2f116691f/3d7c7699-15af-4ea4-8825-93e2f116691f.crl

            X509v3 Authority Key Identifier:
                keyid:B0:85:4C:6A:84:A4:29:6A:40:D3:2B:12:A3:B9:68:99:26:EE:02:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d7c7699-15af-4ea4-8825-93e2f116691f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.84.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:b3:ca:90:bc:4a:ac:95:62:ce:24:08:b0:b4:2c:5b:0e:9c:
         ec:8d:80:f0:c0:fc:07:97:4e:89:a2:fe:34:10:af:10:96:3d:
         68:ba:7b:52:44:41:8e:ca:73:39:6f:15:65:b7:22:a5:2b:8d:
         ef:86:b4:e4:c4:07:e5:0f:05:97:3d:d1:d8:7e:ed:d3:97:7e:
         61:64:a2:5c:4d:32:63:41:7c:60:9c:eb:c6:63:4d:4a:51:b9:
         23:de:7c:7f:8f:a8:75:ea:90:d6:47:43:18:2c:90:dd:22:28:
         be:20:c0:b3:3f:b9:0f:2f:59:4e:8b:90:16:75:1b:4b:c7:6f:
         cf:27:c8:cd:15:ad:40:e8:71:5b:fc:f3:f7:55:c4:4f:a2:1c:
         61:28:10:95:78:70:f1:8f:37:64:4d:37:de:23:f5:61:bf:97:
         e5:a8:83:18:e0:f8:76:92:cf:0a:9f:2c:f2:f8:5f:f3:3f:09:
         3f:dc:f0:9b:f4:b1:a6:15:31:ba:d4:9a:28:f2:60:0d:8a:9c:
         0d:a4:07:29:9e:d2:e0:dc:32:33:8f:41:44:ad:8d:60:19:79:
         ed:49:b7:48:01:50:09:df:4e:f9:52:2b:2e:6f:26:25:90:f8:
         ea:2e:af:53:54:ee:5a:96:29:22:49:ab:e2:05:7f:ea:d1:bb:
         da:3e:c5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:44:07 2026 by rpki-client