Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/e5757afa-2bb3-3b20-a457-bbb049fdc4d5.roa
File:                     e5757afa-2bb3-3b20-a457-bbb049fdc4d5.roa (raw, json)
Hash identifier:          JCGzwLjz0/fsxwqmiqzS6oUibekQFM43lJh4RV4vJJI=
Subject key identifier:   AF:F5:07:81:E5:6C:94:6E:95:74:16:63:F8:72:CA:AB:5B:50:F3:F6
Certificate issuer:       /CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d
Certificate serial:       010D0C9F4328584EA7927D40E77FB62887C50180
Authority key identifier: C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/e5757afa-2bb3-3b20-a457-bbb049fdc4d5.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     26512
IP address blocks:        199.119.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:92:7d:40:e7:7f:b6:28:87:c5:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=bdc3a93a-d420-4ca8-bdba-e5c407fbcac9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:dd:3a:5b:71:13:78:c6:e0:59:e0:f1:23:a6:
                    39:ed:cc:03:32:6d:70:ce:a4:f8:cd:ea:43:02:35:
                    76:5e:6a:ab:31:5b:a1:7b:64:f1:69:a7:b4:2d:f4:
                    4f:bb:bd:93:16:23:f4:07:56:9d:99:52:e2:3a:03:
                    b4:d0:2e:2e:83:ee:1a:f0:f6:09:55:a4:dc:8b:92:
                    97:ef:ef:8c:29:97:8e:d9:50:11:bf:db:fe:c8:64:
                    7d:cb:19:b9:b8:68:d2:0f:dd:83:d2:70:4f:3a:2a:
                    bf:cf:e0:bb:7e:4e:ca:d7:00:60:3b:f0:57:29:22:
                    a3:e1:c3:81:5e:57:9c:0f:b3:41:71:1d:4e:81:49:
                    9f:0c:e4:d6:4b:34:68:44:07:17:82:4c:60:14:a6:
                    51:e2:89:83:2e:ab:a9:41:30:ec:88:24:b5:d3:d0:
                    2d:52:d9:5c:0f:06:c3:11:b3:b3:3f:e0:e0:48:d2:
                    3b:38:a1:01:6a:01:12:d3:57:78:66:b2:d2:02:94:
                    b3:9b:5b:e6:0d:9c:b7:2d:92:98:4b:4f:42:43:18:
                    82:5d:4f:8b:40:d0:6f:b4:16:f6:31:69:fe:c5:34:
                    77:8b:8e:96:5f:8e:d7:46:19:ee:8a:9a:fa:c6:85:
                    e6:7e:86:70:8e:10:12:b5:24:49:88:1c:93:a7:c2:
                    4c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F5:07:81:E5:6C:94:6E:95:74:16:63:F8:72:CA:AB:5B:50:F3:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/e5757afa-2bb3-3b20-a457-bbb049fdc4d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl

            X509v3 Authority Key Identifier:
                keyid:C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.119.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:82:03:82:29:17:05:d3:19:c3:06:d7:53:28:bc:45:5b:ee:
         23:e7:f6:be:e5:4d:13:4c:14:00:3b:be:f0:ee:cc:1a:dc:b8:
         50:bd:0d:e2:00:09:92:42:79:50:df:a9:9b:5c:8c:8c:92:b5:
         18:8e:96:32:3d:e5:bc:fa:78:ec:0f:0f:2c:32:71:54:fe:ce:
         02:80:b2:60:9c:63:36:3e:bb:53:5d:2b:1b:ea:f6:88:41:b1:
         fe:7d:bf:6f:b6:f8:17:af:49:0a:43:48:17:34:c0:e1:0a:5a:
         73:c3:e3:49:af:16:5d:a4:cb:cf:cc:dc:6b:68:ad:39:30:d5:
         6d:ad:28:6a:1c:39:bf:8e:88:c7:71:50:06:04:63:77:31:9d:
         14:4c:92:d3:da:cd:f4:47:0c:5a:f9:23:a0:0c:a6:26:a8:50:
         13:e9:be:c6:83:af:b0:69:94:13:f6:dd:69:dc:a8:fd:2d:4b:
         68:88:0d:74:7a:31:c2:0d:a3:30:55:61:9b:b7:de:61:70:f6:
         70:67:bb:31:00:da:20:fd:ad:03:fc:2a:90:0b:5f:33:7e:67:
         3f:64:13:47:91:64:0f:07:41:7b:24:7d:80:9b:53:72:3b:84:
         98:f9:db:2a:47:68:d4:2e:d2:3d:50:39:89:c1:5f:13:c7:14:
         22:f3:c0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:45:56 2026 by rpki-client