Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/8d49585c-078a-3eae-a1d7-7c479bf35c7e.roa
File:                     8d49585c-078a-3eae-a1d7-7c479bf35c7e.roa (raw, json)
Hash identifier:          ppnycN9KDLnUYsGKTVGsnIV4gfzy275/eej5AhlxAoc=
Subject key identifier:   D5:64:85:FA:EF:68:75:EE:96:31:88:40:59:B6:62:55:AA:50:10:94
Certificate issuer:       /CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d
Certificate serial:       010D0C9F4328584DE9B084C3CA766514443DAB40
Authority key identifier: C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/8d49585c-078a-3eae-a1d7-7c479bf35c7e.roa
Signing time:             Fri 22 May 2026 01:00:24 +0000
ROA not before:           Fri 22 May 2026 01:00:24 +0000
ROA not after:            Thu 20 Aug 2026 01:00:24 +0000
asID:                     26512
IP address blocks:        199.119.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:b0:84:c3:ca:76:65:14:44:3d:ab:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d
        Validity
            Not Before: May 22 01:00:24 2026 GMT
            Not After : Aug 20 01:00:24 2026 GMT
        Subject: CN=8ad994fc-acf2-4f28-9700-f03c2a2401f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:71:76:2b:5c:a4:e1:ea:f9:77:54:eb:44:6e:
                    73:f0:01:92:e9:2e:e8:09:f1:e2:be:25:bd:9e:64:
                    5b:74:4e:4d:63:cf:a4:a9:c2:a0:b4:91:57:d3:12:
                    b6:1c:59:63:e1:e3:8b:41:8b:5e:58:ff:9e:ce:b8:
                    40:51:fb:06:be:16:f7:cc:f9:b5:00:4c:c0:bb:96:
                    cc:5e:d8:d4:98:e2:3b:3b:06:27:65:91:e5:c2:36:
                    db:13:ee:aa:8c:8f:66:25:ab:8c:91:fd:2f:1a:3d:
                    fa:5f:3e:b3:85:f5:73:57:4c:79:e9:48:32:0f:c9:
                    a3:a4:b1:9c:76:84:0f:26:95:1a:20:79:4c:80:0b:
                    e4:17:47:a4:b2:d3:21:82:8a:7b:e8:05:c8:5c:f1:
                    32:86:0e:5a:2a:b9:60:e0:20:d5:64:a9:30:83:fc:
                    dc:6f:b3:11:81:67:7f:b5:bf:3a:aa:45:bd:69:a0:
                    de:ab:85:d7:00:39:3f:1f:bf:ab:8b:c4:15:12:7c:
                    af:ee:32:f7:c7:af:93:32:21:cb:d0:92:8d:34:1e:
                    d4:2e:6d:66:46:b6:ab:5d:9a:19:1a:71:d8:7b:97:
                    63:66:fc:4d:de:c1:e0:14:31:1a:9a:e6:26:f0:08:
                    8c:60:37:61:97:2c:7c:3b:84:9e:95:69:47:71:5b:
                    b5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:64:85:FA:EF:68:75:EE:96:31:88:40:59:B6:62:55:AA:50:10:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/8d49585c-078a-3eae-a1d7-7c479bf35c7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl

            X509v3 Authority Key Identifier:
                keyid:C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.119.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:dd:b5:9f:7a:58:40:74:0d:c8:a9:28:22:5c:36:43:70:82:
         49:a4:3e:23:84:9c:fe:d6:49:36:b2:b5:d6:79:0e:ad:32:8e:
         fc:25:7b:4b:e9:a6:5b:d3:91:3f:da:d5:e1:fa:43:8b:f4:48:
         cc:43:3c:bd:41:03:e5:b5:d3:64:39:b0:60:54:04:67:ab:9a:
         54:5f:bd:c9:1c:42:b3:0f:26:8c:f4:73:0c:da:43:5a:2a:db:
         4d:f0:64:c4:ca:13:2c:62:ae:a6:4e:13:07:a9:0e:0c:4e:6b:
         be:55:c0:5f:c5:c1:71:fb:b9:b4:fe:1b:ca:fc:ff:9c:f3:56:
         04:b1:d2:67:97:72:42:1f:c2:6b:7c:ad:3b:b7:65:ba:ad:e9:
         a4:99:46:ca:04:6d:27:84:be:58:45:32:17:fa:06:24:ef:10:
         d3:9c:16:29:9a:17:06:1c:2f:24:31:31:1e:e6:05:a7:30:45:
         e2:48:ee:99:75:94:10:c0:42:69:85:56:e0:76:23:a2:05:67:
         c1:69:66:69:2f:cf:46:58:10:f8:9e:ba:a9:18:1e:d8:63:44:
         ce:3b:ea:c6:4d:2b:7d:8c:99:54:f1:2e:e1:8e:3b:08:1f:36:
         4c:f0:66:3c:15:d4:b6:d8:71:0a:ad:e9:72:b6:eb:fe:67:5f:
         31:05:4d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:25:43 2026 by rpki-client