Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/198c7e87-9641-4652-a9eb-2296a876b143/d9d6f00c-eafc-3eb9-bd54-47962f1c682c.roa
File:                     d9d6f00c-eafc-3eb9-bd54-47962f1c682c.roa (raw, json)
Hash identifier:          hsENlhB32y35IHGLugSizuuNHoqnQThPPaZkkH/p020=
Subject key identifier:   33:54:13:5A:91:9D:0B:DA:F6:A1:64:05:B1:AD:D2:2C:14:97:D9:05
Certificate issuer:       /CN=198c7e87-9641-4652-a9eb-2296a876b143
Certificate serial:       010D0C9F4328584CF422295A86F2867A83D1F000
Authority key identifier: 9E:66:B6:41:57:ED:E5:DF:56:DA:ED:F4:52:C7:A3:B1:EC:53:B2:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/198c7e87-9641-4652-a9eb-2296a876b143.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/198c7e87-9641-4652-a9eb-2296a876b143/d9d6f00c-eafc-3eb9-bd54-47962f1c682c.roa
Signing time:             Mon 23 Feb 2026 02:00:31 +0000
ROA not before:           Mon 23 Feb 2026 02:00:31 +0000
ROA not after:            Sun 24 May 2026 01:00:31 +0000
asID:                     8075
IP address blocks:        199.34.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/198c7e87-9641-4652-a9eb-2296a876b143/198c7e87-9641-4652-a9eb-2296a876b143.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/198c7e87-9641-4652-a9eb-2296a876b143/198c7e87-9641-4652-a9eb-2296a876b143.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/198c7e87-9641-4652-a9eb-2296a876b143.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f4:22:29:5a:86:f2:86:7a:83:d1:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=198c7e87-9641-4652-a9eb-2296a876b143
        Validity
            Not Before: Feb 23 02:00:31 2026 GMT
            Not After : May 24 01:00:31 2026 GMT
        Subject: CN=121a94d7-acb0-4381-a64a-d753f083e5c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:db:ed:44:44:70:56:3b:7c:6e:26:99:ca:a7:
                    e7:40:3c:5e:02:12:a5:22:64:ce:34:59:f5:ac:ba:
                    94:fb:1e:80:41:b5:b3:b2:43:2f:c1:90:54:3c:bc:
                    1b:fa:9e:da:d3:09:10:4b:74:2d:d2:4b:ce:e4:c9:
                    a8:73:0c:4a:67:c6:31:94:56:d9:33:a1:4f:1a:e8:
                    34:65:3f:f2:27:85:ff:e7:bc:0e:d6:b6:27:de:72:
                    69:e0:08:a9:9e:5f:fa:07:64:56:18:e2:d5:27:e4:
                    d5:f0:4c:31:39:21:50:e0:2f:8d:79:a8:44:76:ea:
                    92:4a:82:9a:2a:da:44:e2:d8:2f:88:0a:8e:15:3d:
                    5a:32:71:47:5b:e5:48:49:6b:0a:77:7e:d0:50:9e:
                    12:94:24:7b:b5:c2:c2:8c:b4:b2:00:88:dc:3d:dd:
                    ad:73:56:3f:58:11:32:65:5b:76:a2:1a:f7:d8:a7:
                    50:d6:bc:9e:e8:21:78:f0:69:6e:85:bd:35:cb:18:
                    13:25:11:18:e8:43:41:0e:d3:34:a2:75:d1:21:26:
                    c7:21:d6:70:31:fa:94:a5:5f:28:2d:97:1c:fe:f5:
                    ba:89:d0:65:18:0e:e0:89:3b:08:6b:7c:a2:80:56:
                    94:3e:d2:72:b1:35:69:e4:6f:62:96:43:24:a0:a4:
                    47:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:54:13:5A:91:9D:0B:DA:F6:A1:64:05:B1:AD:D2:2C:14:97:D9:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/198c7e87-9641-4652-a9eb-2296a876b143/d9d6f00c-eafc-3eb9-bd54-47962f1c682c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/198c7e87-9641-4652-a9eb-2296a876b143/198c7e87-9641-4652-a9eb-2296a876b143.crl

            X509v3 Authority Key Identifier:
                keyid:9E:66:B6:41:57:ED:E5:DF:56:DA:ED:F4:52:C7:A3:B1:EC:53:B2:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/198c7e87-9641-4652-a9eb-2296a876b143.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.34.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:6b:ae:38:f1:38:02:ee:97:01:37:47:61:98:11:69:71:c1:
         e4:e1:f1:91:ec:14:d5:d6:26:8e:85:58:0c:3a:b8:b0:02:67:
         fc:eb:91:6a:7a:b2:a2:2e:36:b7:07:ab:ce:2b:da:77:b3:5f:
         34:77:5f:05:95:61:fb:02:8e:19:f4:3c:f5:be:78:7d:c0:de:
         dc:f5:23:6e:ff:36:92:bc:d1:46:b3:33:68:b8:02:81:a7:53:
         c0:7d:47:9c:bd:eb:4c:c6:54:70:a4:4b:41:98:2f:0c:ba:c2:
         7d:be:21:f3:d3:3e:07:82:92:08:90:a7:74:c3:12:f2:17:1d:
         e6:6d:34:77:df:20:b1:ef:b4:6b:e3:63:e4:69:2d:51:f6:2b:
         2d:62:3f:04:8f:8c:b6:99:c1:9a:60:53:57:51:3e:39:e8:99:
         09:f9:d6:3b:2a:51:75:1c:f1:73:a8:8a:d2:77:a2:1f:3c:33:
         2a:0a:e1:e4:17:ba:fb:85:4e:e2:d1:60:71:b9:f4:9f:30:d6:
         b7:d5:17:d0:7b:73:c8:10:36:57:0e:79:8a:60:3f:7c:c4:7c:
         ff:a6:8b:f7:34:bf:0a:b4:9a:1e:2a:5a:cb:97:7c:e0:f6:9b:
         db:bd:6f:e6:1e:05:61:5e:07:7f:de:d6:ff:f1:5e:ec:4d:18:
         62:ac:fa:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:30:48 2026 by rpki-client