Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8083c5d7-ca5a-491b-96c7-83d4c0a565a7/a7c4bf72-6de3-3997-82d2-ea4d09bf7eec.roa
File:                     a7c4bf72-6de3-3997-82d2-ea4d09bf7eec.roa (raw, json)
Hash identifier:          2CEIio+ekcfwhU/2plZ1O0GPly4Xq6heB9JQuMIen4Q=
Subject key identifier:   67:37:EF:79:3C:FD:C0:7D:A2:9C:B7:60:B7:83:C4:D7:9E:60:C1:B9
Certificate issuer:       /CN=8083c5d7-ca5a-491b-96c7-83d4c0a565a7
Certificate serial:       010D0C9F4328584D86955059ACD4EC3CFA7B5140
Authority key identifier: 5E:B4:1C:10:B0:9C:06:6D:DE:DC:52:2D:FB:8A:FB:95:75:E7:07:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8083c5d7-ca5a-491b-96c7-83d4c0a565a7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8083c5d7-ca5a-491b-96c7-83d4c0a565a7/a7c4bf72-6de3-3997-82d2-ea4d09bf7eec.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     33742
IP address blocks:        199.6.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8083c5d7-ca5a-491b-96c7-83d4c0a565a7/8083c5d7-ca5a-491b-96c7-83d4c0a565a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8083c5d7-ca5a-491b-96c7-83d4c0a565a7/8083c5d7-ca5a-491b-96c7-83d4c0a565a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8083c5d7-ca5a-491b-96c7-83d4c0a565a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:50:59:ac:d4:ec:3c:fa:7b:51:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8083c5d7-ca5a-491b-96c7-83d4c0a565a7
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=401ba3ff-3e9c-4148-b3c2-a1952e36516c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6d:ab:63:f3:05:f7:c2:5c:27:db:25:90:72:
                    22:72:01:9b:c7:ab:f7:db:90:38:76:a6:20:61:26:
                    05:8e:06:e2:4f:31:58:f4:70:29:29:6d:09:99:9a:
                    2c:b8:30:82:7b:ad:37:5b:88:57:75:a2:12:7c:17:
                    df:10:da:c3:a9:31:ca:f2:14:f3:91:ed:fa:10:0f:
                    eb:3f:9c:b5:11:2d:83:42:34:c0:51:65:aa:0e:0f:
                    2d:6c:30:98:0f:fc:52:16:b7:85:3b:74:a1:01:bf:
                    17:31:b5:3d:4a:16:f8:d6:fe:b4:fd:95:80:61:8a:
                    5c:80:56:2a:9c:45:c7:aa:a6:bf:4d:5a:3f:55:5a:
                    0c:c3:82:da:6c:7e:9b:12:e6:64:23:35:0b:6b:87:
                    2e:61:75:77:3d:86:57:0f:40:c6:af:6e:d6:01:3c:
                    0a:22:69:e9:ef:20:f0:c1:0f:69:d4:66:22:e9:82:
                    7f:11:8b:1a:86:2f:9a:7b:a8:2e:fd:3b:1c:9a:2f:
                    70:16:20:bb:42:b6:00:27:cd:24:5d:3b:42:0a:16:
                    4a:3b:13:f7:35:09:10:55:ab:5f:17:8a:07:30:4c:
                    3d:e7:59:f3:31:e5:2e:ba:96:47:61:52:e9:5b:58:
                    b2:f1:be:a2:30:b4:e8:27:84:96:31:5d:b1:f7:65:
                    a5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:37:EF:79:3C:FD:C0:7D:A2:9C:B7:60:B7:83:C4:D7:9E:60:C1:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8083c5d7-ca5a-491b-96c7-83d4c0a565a7/a7c4bf72-6de3-3997-82d2-ea4d09bf7eec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8083c5d7-ca5a-491b-96c7-83d4c0a565a7/8083c5d7-ca5a-491b-96c7-83d4c0a565a7.crl

            X509v3 Authority Key Identifier:
                keyid:5E:B4:1C:10:B0:9C:06:6D:DE:DC:52:2D:FB:8A:FB:95:75:E7:07:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8083c5d7-ca5a-491b-96c7-83d4c0a565a7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.6.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:d9:7c:5c:63:54:b9:b3:75:ce:98:12:a7:ba:78:ba:63:8d:
         be:df:3f:44:a9:35:3f:f0:96:93:5b:8e:d9:bb:8f:14:08:51:
         a0:d1:af:47:4a:86:8f:b4:1c:be:ec:90:40:8a:a4:78:37:3f:
         4a:0f:6e:1e:97:52:31:f0:b7:79:3d:b3:d3:c2:ae:db:f9:49:
         b0:29:5a:c5:26:75:59:7f:e4:d0:b0:f9:71:dd:ef:13:cd:74:
         88:ef:2d:29:dd:0a:46:82:f0:4d:74:54:77:c7:b6:6a:01:d5:
         7d:7b:4c:1e:12:29:ad:bd:53:fb:f0:7f:3d:61:f4:65:ea:72:
         54:c3:a8:50:35:22:43:34:87:b5:c2:fe:43:5d:a9:58:6c:75:
         a4:e2:1d:bc:6a:66:74:8b:9f:de:7d:13:53:04:c2:6c:97:16:
         bb:72:ab:5b:df:af:6c:ef:bd:79:a5:25:2c:2f:13:dd:2d:aa:
         4e:07:04:0d:7e:cd:6f:55:80:13:e0:6a:4e:68:1f:aa:36:4f:
         21:56:89:98:04:f6:12:df:b8:81:37:c4:df:0d:3d:64:e6:32:
         25:c2:52:a1:53:c0:c7:68:a5:d9:eb:00:18:c4:02:f9:00:6d:
         f3:1a:9c:df:0c:1e:2f:ad:8b:03:3d:c2:fe:d3:e2:c8:70:72:
         f0:a0:01:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:29:15 2026 by rpki-client