Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/1f5d279c-2644-363f-a153-6489368c7e8c.roa
File:                     1f5d279c-2644-363f-a153-6489368c7e8c.roa (raw, json)
Hash identifier:          +AVyn+ZHMZGbUIJ+8tRxosV+QFboHEze7QtPvNIDTrE=
Subject key identifier:   8F:40:AE:1E:5F:B2:67:BF:8B:1E:FA:02:32:3E:B9:B1:BA:A3:C6:C1
Certificate issuer:       /CN=8eaf014d-0b3e-4494-b07f-b3254fddef6a
Certificate serial:       010D0C9F4328584F1CC7B17345B8D4CF5A6F7A80
Authority key identifier: AA:77:EC:D7:ED:F3:CC:EC:71:4B:19:7A:98:89:7F:7E:8F:90:76:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/1f5d279c-2644-363f-a153-6489368c7e8c.roa
Signing time:             Wed 09 Sep 2026 01:00:11 +0000
ROA not before:           Wed 09 Sep 2026 01:00:11 +0000
ROA not after:            Tue 08 Dec 2026 02:00:11 +0000
asID:                     394772
IP address blocks:        199.241.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/8eaf014d-0b3e-4494-b07f-b3254fddef6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/8eaf014d-0b3e-4494-b07f-b3254fddef6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:c7:b1:73:45:b8:d4:cf:5a:6f:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eaf014d-0b3e-4494-b07f-b3254fddef6a
        Validity
            Not Before: Sep  9 01:00:11 2026 GMT
            Not After : Dec  8 02:00:11 2026 GMT
        Subject: CN=a168f99f-864a-43f3-baee-fb62faab9dab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:63:ea:9a:c4:6c:39:e9:44:24:f0:f5:d9:88:
                    62:19:b3:12:b7:a7:b8:5f:18:71:d7:d1:6c:5d:21:
                    7f:8f:88:2c:63:b0:85:fa:94:0a:1f:ee:3b:0d:a2:
                    14:2f:84:27:c4:4e:15:71:69:61:b6:80:0b:c1:15:
                    7f:2d:23:82:05:06:7a:6a:a4:66:c3:98:64:2d:bd:
                    4f:77:95:26:74:75:25:d7:c0:ba:63:41:b6:da:fa:
                    57:1b:fc:a8:50:bb:b0:f6:30:da:62:13:b8:9b:55:
                    96:5e:b9:dc:d4:a2:1e:6c:d0:ad:c9:50:2a:52:f8:
                    ee:c3:ca:93:ab:7e:15:c5:4b:a7:90:f9:bb:0b:b7:
                    6b:73:4e:68:34:e7:88:c4:8f:b2:bc:a2:9f:17:23:
                    39:50:02:26:57:93:28:e8:81:e1:c0:39:58:5b:aa:
                    a6:07:8b:e6:d7:18:ea:5c:0e:2a:5c:e8:51:05:18:
                    73:13:6c:d2:fb:62:3f:8f:3e:f4:da:a4:30:65:4a:
                    9d:3d:ce:06:49:61:fb:e1:7e:47:29:22:2c:41:a6:
                    d7:61:2f:f8:3e:c6:ee:d4:05:3d:d5:63:ed:f2:41:
                    63:e4:45:8e:1f:2b:db:3b:8a:22:21:c6:20:7d:70:
                    7d:aa:f0:62:9e:45:f6:dc:d4:98:0d:1c:fa:3f:4e:
                    d4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:40:AE:1E:5F:B2:67:BF:8B:1E:FA:02:32:3E:B9:B1:BA:A3:C6:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/1f5d279c-2644-363f-a153-6489368c7e8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/8eaf014d-0b3e-4494-b07f-b3254fddef6a.crl

            X509v3 Authority Key Identifier:
                keyid:AA:77:EC:D7:ED:F3:CC:EC:71:4B:19:7A:98:89:7F:7E:8F:90:76:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.241.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:3f:3d:13:af:b3:12:cb:19:12:15:94:d3:a4:99:11:ea:17:
         b7:92:33:f6:21:d3:38:fb:45:de:98:b0:5b:25:58:d3:0d:14:
         91:ca:44:b5:d4:79:48:bc:41:8b:e4:27:6e:4f:c4:cf:a4:7f:
         88:c1:98:ba:10:c9:d3:c8:fe:fb:c7:92:93:69:18:9d:e2:4b:
         35:bd:31:81:02:b0:49:2d:3c:3d:83:24:40:3a:5b:1e:05:4e:
         93:6c:9e:5d:b2:a4:69:f9:e2:e9:91:14:71:7a:51:0a:6d:ba:
         98:2d:72:89:24:26:f4:a1:b9:97:d5:67:55:fc:83:9a:de:de:
         65:61:bc:3d:1f:b4:f9:ff:59:c0:35:d0:0d:60:c4:16:cb:20:
         ca:f1:d5:f0:e0:74:ce:f6:04:b7:71:23:18:24:b8:c9:b3:e4:
         73:42:8e:46:4c:01:3f:d6:b0:9e:7f:b7:93:33:7e:f1:75:e0:
         d5:e0:77:29:59:33:01:04:9e:c3:61:57:e9:aa:1b:b9:98:63:
         f0:13:45:15:85:47:8a:a0:90:46:4d:00:c1:68:2b:2d:a3:a8:
         d6:bf:83:66:fa:0d:b6:ac:79:3c:01:34:87:a4:bb:ba:18:44:
         e4:24:ec:a8:11:2c:12:3a:6f:41:31:64:e9:00:ea:a9:9a:c8:
         72:25:3d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:31:49 2026 by rpki-client