Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f7faa8c0-cb89-4cf1-88d5-44cfb76ac61b/62164b1a-2a93-3539-8ed8-6f3e659a573b.roa
File:                     62164b1a-2a93-3539-8ed8-6f3e659a573b.roa (raw, json)
Hash identifier:          1k5x0w37Dkf0AIvC8ib33g3jw3BY/WVw3Y3aMVghSBg=
Subject key identifier:   36:B0:E9:C8:E0:49:6A:08:46:72:60:31:74:F7:36:D4:E7:57:1E:45
Certificate issuer:       /CN=f7faa8c0-cb89-4cf1-88d5-44cfb76ac61b
Certificate serial:       010D0C9F4328584EA795C835C4673CEA549DB440
Authority key identifier: 48:9A:2A:CA:39:4C:A3:EB:81:9D:5B:07:4C:E3:34:1D:B6:52:C6:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f7faa8c0-cb89-4cf1-88d5-44cfb76ac61b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f7faa8c0-cb89-4cf1-88d5-44cfb76ac61b/62164b1a-2a93-3539-8ed8-6f3e659a573b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     26018
IP address blocks:        199.4.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f7faa8c0-cb89-4cf1-88d5-44cfb76ac61b/f7faa8c0-cb89-4cf1-88d5-44cfb76ac61b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f7faa8c0-cb89-4cf1-88d5-44cfb76ac61b/f7faa8c0-cb89-4cf1-88d5-44cfb76ac61b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f7faa8c0-cb89-4cf1-88d5-44cfb76ac61b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:c8:35:c4:67:3c:ea:54:9d:b4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7faa8c0-cb89-4cf1-88d5-44cfb76ac61b
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b89bd315-5432-42c4-af3e-eb8080f56317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7c:a7:a7:6a:1c:f0:32:b3:01:9b:c4:ca:d0:
                    fd:0c:83:09:cb:27:10:a2:18:fc:83:f6:b6:f4:31:
                    0a:86:4a:09:56:6c:fe:ef:84:25:f8:6e:32:a4:71:
                    d6:25:1c:ed:5e:bf:29:97:e8:c8:51:e3:57:9f:51:
                    fb:0d:67:ea:50:f5:9d:b8:d9:30:a9:d9:d6:1c:b2:
                    92:04:c2:b3:10:1f:fe:8b:68:10:dc:6a:d4:83:9c:
                    7a:09:e6:9d:86:5b:de:a6:32:df:01:9e:bf:73:12:
                    09:53:22:3a:be:3f:d4:41:a5:d7:71:ea:ad:f8:55:
                    43:e8:ec:88:a4:16:37:a8:05:1e:19:47:e9:b9:a2:
                    ee:fd:d0:eb:46:7b:65:c4:d1:69:5c:da:d2:59:bc:
                    67:0d:89:c9:16:77:d9:78:23:67:9a:5e:f4:bd:37:
                    0a:1c:c1:1d:bf:ed:70:f9:95:f9:32:86:95:20:de:
                    1b:83:36:0d:5a:74:5d:19:11:aa:17:f4:2d:fc:de:
                    18:18:15:30:9d:6c:b7:8e:70:9c:ab:5b:34:73:6c:
                    f3:59:fd:03:00:92:13:87:c5:af:ca:61:d3:0f:c2:
                    1d:ce:2f:e3:ea:59:a1:73:46:fa:ef:61:29:08:f7:
                    2e:96:69:f6:0a:36:40:17:ca:50:06:14:28:e1:10:
                    05:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:B0:E9:C8:E0:49:6A:08:46:72:60:31:74:F7:36:D4:E7:57:1E:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f7faa8c0-cb89-4cf1-88d5-44cfb76ac61b/62164b1a-2a93-3539-8ed8-6f3e659a573b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f7faa8c0-cb89-4cf1-88d5-44cfb76ac61b/f7faa8c0-cb89-4cf1-88d5-44cfb76ac61b.crl

            X509v3 Authority Key Identifier:
                keyid:48:9A:2A:CA:39:4C:A3:EB:81:9D:5B:07:4C:E3:34:1D:B6:52:C6:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f7faa8c0-cb89-4cf1-88d5-44cfb76ac61b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.4.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:ae:d1:d4:15:16:0c:22:a1:04:ad:89:93:0b:eb:84:86:e2:
         0d:09:ab:b0:01:36:96:7b:89:d0:1f:36:9f:dd:0d:98:98:1c:
         7c:92:34:12:7f:2f:ab:ee:1e:c5:93:19:5c:55:63:47:72:f9:
         60:3f:3f:96:7d:0d:64:29:b2:58:90:0f:3f:05:9d:a8:f5:18:
         64:e0:18:42:d4:f1:90:ce:d7:01:69:a5:fc:b5:83:11:5b:cd:
         1d:a0:ac:f6:92:a9:69:9b:fa:80:15:66:45:de:e5:09:17:ae:
         71:59:42:45:d9:11:3e:22:55:6a:8c:fb:45:fe:e2:01:51:d8:
         8a:46:0a:65:ab:6c:e4:b5:c8:81:8d:d0:fd:23:e7:45:69:9b:
         2a:a0:15:d4:e5:14:c3:7e:86:14:8e:29:7e:8f:4a:8a:23:96:
         e8:0f:36:7c:1d:bc:65:42:8f:fc:ac:91:c4:ef:ad:00:a0:c1:
         67:16:19:b2:7e:11:01:1c:aa:d8:ca:b0:cb:a7:48:fa:5a:bc:
         07:b6:29:b6:02:c4:b7:79:21:a5:4f:1e:9a:46:cb:55:4e:93:
         e5:c3:07:94:99:59:0c:7e:98:c2:5d:08:09:2f:cc:47:1b:92:
         b3:ea:f6:ee:c5:99:7b:ec:ad:09:e8:6a:eb:e5:58:75:0d:a8:
         41:fc:dc:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:23:58 2026 by rpki-client