Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8083c5d7-ca5a-491b-96c7-83d4c0a565a7/3b4c08eb-be3f-3539-88e3-467a91cea7d4.roa
File:                     3b4c08eb-be3f-3539-88e3-467a91cea7d4.roa (raw, json)
Hash identifier:          Xy5mkKGvNbeoarWSfCAbTUTI/ReYhCKIjVKOfZZePVM=
Subject key identifier:   63:B7:33:12:F0:C5:0A:0A:4A:A6:4F:B7:68:14:78:1C:83:5E:57:82
Certificate issuer:       /CN=8083c5d7-ca5a-491b-96c7-83d4c0a565a7
Certificate serial:       010D0C9F4328584F4F0828C9BA9A6A7357CE5A00
Authority key identifier: 5E:B4:1C:10:B0:9C:06:6D:DE:DC:52:2D:FB:8A:FB:95:75:E7:07:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8083c5d7-ca5a-491b-96c7-83d4c0a565a7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8083c5d7-ca5a-491b-96c7-83d4c0a565a7/3b4c08eb-be3f-3539-88e3-467a91cea7d4.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     36086
IP address blocks:        199.6.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8083c5d7-ca5a-491b-96c7-83d4c0a565a7/8083c5d7-ca5a-491b-96c7-83d4c0a565a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8083c5d7-ca5a-491b-96c7-83d4c0a565a7/8083c5d7-ca5a-491b-96c7-83d4c0a565a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8083c5d7-ca5a-491b-96c7-83d4c0a565a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:08:28:c9:ba:9a:6a:73:57:ce:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8083c5d7-ca5a-491b-96c7-83d4c0a565a7
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=b0e7387c-9cc4-4863-996e-cbf455aeb413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:de:b3:ea:2d:8e:c0:e1:2b:1a:9b:32:57:2c:
                    e4:0d:10:0f:88:22:e6:48:28:c9:b3:8f:41:a4:60:
                    f5:30:07:2e:16:19:10:0d:8f:c5:a0:1b:cc:f2:f2:
                    fb:b8:85:06:4d:bd:18:98:b9:f8:a7:d9:29:f5:e4:
                    66:66:09:e0:22:df:8f:70:42:ac:c9:81:bb:95:d2:
                    40:dd:4a:18:c8:04:6a:fc:87:c3:dd:41:f0:5d:81:
                    2e:21:76:11:3d:20:1e:5e:5f:c5:69:06:35:a5:05:
                    47:50:35:78:0e:f3:f7:e2:24:c8:80:e8:be:74:f4:
                    ba:7c:7a:df:df:e7:7f:fd:62:ca:0e:ef:56:9d:f7:
                    6a:95:d2:14:4f:dc:ab:ff:e1:10:25:1b:7f:a6:32:
                    00:23:f0:0b:07:1e:e8:7d:d0:e3:27:40:5c:a6:7e:
                    e9:73:ee:6e:5c:d0:49:2c:b8:c7:5b:89:e6:24:8d:
                    70:6b:49:d8:53:aa:a3:19:42:f4:6f:f4:5a:0d:ef:
                    fc:3c:c6:80:7f:e6:44:58:69:df:b6:e7:11:a8:0a:
                    87:30:31:17:b3:d4:64:cc:8c:32:be:29:2a:ef:dd:
                    68:a2:75:23:2f:01:6a:5a:82:e1:af:41:91:3a:36:
                    49:9c:79:e3:eb:5c:07:a0:3c:43:97:44:06:40:eb:
                    50:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B7:33:12:F0:C5:0A:0A:4A:A6:4F:B7:68:14:78:1C:83:5E:57:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8083c5d7-ca5a-491b-96c7-83d4c0a565a7/3b4c08eb-be3f-3539-88e3-467a91cea7d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8083c5d7-ca5a-491b-96c7-83d4c0a565a7/8083c5d7-ca5a-491b-96c7-83d4c0a565a7.crl

            X509v3 Authority Key Identifier:
                keyid:5E:B4:1C:10:B0:9C:06:6D:DE:DC:52:2D:FB:8A:FB:95:75:E7:07:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8083c5d7-ca5a-491b-96c7-83d4c0a565a7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.6.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:10:8a:e6:33:86:cf:87:5b:5b:44:ea:2c:44:be:e2:71:d1:
         df:4b:5a:1b:a3:ec:a0:e4:59:63:86:46:b0:84:27:b0:52:84:
         53:6b:4c:3b:bb:d3:c4:cd:3f:96:0e:ba:85:aa:77:0e:cb:10:
         d0:b4:86:31:1b:7f:4e:da:d7:d1:3a:c3:47:c0:6f:5e:67:02:
         b4:78:c5:d8:05:48:3e:be:35:2f:ab:ad:e5:a6:b0:2f:fe:f3:
         06:73:b4:2e:f3:64:14:4f:bb:43:c2:17:aa:91:2f:16:de:fe:
         ca:55:70:59:f6:9b:52:4e:da:97:f5:6b:9a:63:66:89:cf:9e:
         c5:1a:1c:66:a3:bd:02:41:5b:52:69:ab:f5:de:e8:dc:ad:18:
         1e:ab:31:55:d0:1e:ce:ab:33:68:e0:b5:32:e8:df:1f:19:b2:
         9a:53:f1:da:a4:ba:42:59:6f:41:04:63:cc:29:00:fa:b5:78:
         4c:ab:9d:5e:42:ae:fb:59:83:f7:96:10:1c:ba:4b:55:22:7c:
         eb:1c:ae:00:38:f4:d4:9f:ee:fd:78:84:0b:5f:58:54:22:67:
         9e:fa:e0:d2:4f:a0:a4:16:68:66:a3:59:39:58:3c:21:21:0c:
         f7:ce:9d:12:e2:f3:d6:b9:30:93:29:c8:b4:1e:ab:a5:1c:c6:
         31:28:4e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:13:48 2026 by rpki-client