Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0437edd1-ccab-471d-b4d5-5c78b6de78ae/9f731987-8b43-328d-9318-20f1e0cc8100.roa
File:                     9f731987-8b43-328d-9318-20f1e0cc8100.roa (raw, json)
Hash identifier:          WsG6iGi+vbbf3p4h5bVSzLmuRjUPzQTLZID0D9cv3LI=
Subject key identifier:   DA:BA:DE:32:84:92:56:31:B3:47:7A:24:46:4B:41:3B:88:F0:91:3F
Certificate issuer:       /CN=0437edd1-ccab-471d-b4d5-5c78b6de78ae
Certificate serial:       010D0C9F4328584EA2DFCFB769D568C1163506D0
Authority key identifier: BE:F0:67:39:06:85:B7:94:CB:53:AE:41:6C:DD:B7:08:C2:9E:13:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0437edd1-ccab-471d-b4d5-5c78b6de78ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0437edd1-ccab-471d-b4d5-5c78b6de78ae/9f731987-8b43-328d-9318-20f1e0cc8100.roa
Signing time:             Mon 27 Jul 2026 09:00:12 +0000
ROA not before:           Mon 27 Jul 2026 09:00:12 +0000
ROA not after:            Sun 25 Oct 2026 09:00:12 +0000
asID:                     899
IP address blocks:        199.245.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0437edd1-ccab-471d-b4d5-5c78b6de78ae/0437edd1-ccab-471d-b4d5-5c78b6de78ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0437edd1-ccab-471d-b4d5-5c78b6de78ae/0437edd1-ccab-471d-b4d5-5c78b6de78ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0437edd1-ccab-471d-b4d5-5c78b6de78ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a2:df:cf:b7:69:d5:68:c1:16:35:06:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0437edd1-ccab-471d-b4d5-5c78b6de78ae
        Validity
            Not Before: Jul 27 09:00:12 2026 GMT
            Not After : Oct 25 09:00:12 2026 GMT
        Subject: CN=31cc2442-de81-4a83-956c-d114bc82bcd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:92:43:37:64:8b:63:12:17:e6:b9:3c:4f:b8:
                    41:dd:a8:f7:09:d3:70:a0:92:66:9a:da:e6:00:39:
                    06:bc:0f:cd:70:e4:5e:01:f2:c6:ca:a9:c4:f1:bd:
                    2e:e2:86:d7:6d:3e:fb:42:69:7b:45:6b:9c:37:cd:
                    20:c4:5b:f1:d8:fc:7a:bc:cd:cb:68:2c:7c:10:27:
                    c6:35:90:2b:10:76:b9:9e:0d:f0:11:50:7e:aa:a2:
                    c4:35:d1:41:47:08:17:af:b1:8b:bc:30:f5:de:29:
                    37:f7:74:ff:bb:ff:40:5e:77:1f:ab:a9:25:d8:5d:
                    c0:b9:ac:47:5a:7f:3e:05:4b:d8:9d:c9:b7:86:d2:
                    38:c5:77:4b:fa:85:d6:6f:ad:eb:96:14:82:30:29:
                    ef:c5:a2:1c:c5:74:7a:7c:57:cd:a8:11:3a:f7:17:
                    25:69:e9:de:de:cc:05:29:93:f9:37:97:56:71:07:
                    fa:5b:bd:ea:1f:8f:4d:b7:90:89:2f:fe:b1:63:6e:
                    ac:ca:10:2b:3f:0d:cb:2f:1f:95:67:47:c6:a1:a9:
                    85:f1:1e:4e:5d:b3:97:10:d5:c0:1d:17:ab:f1:13:
                    af:e3:2e:33:a0:2e:aa:7c:48:a0:53:68:97:b2:ce:
                    1e:2a:64:d4:1d:6d:b0:2d:e1:cc:ce:6c:a9:a2:95:
                    1e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:BA:DE:32:84:92:56:31:B3:47:7A:24:46:4B:41:3B:88:F0:91:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0437edd1-ccab-471d-b4d5-5c78b6de78ae/9f731987-8b43-328d-9318-20f1e0cc8100.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0437edd1-ccab-471d-b4d5-5c78b6de78ae/0437edd1-ccab-471d-b4d5-5c78b6de78ae.crl

            X509v3 Authority Key Identifier:
                keyid:BE:F0:67:39:06:85:B7:94:CB:53:AE:41:6C:DD:B7:08:C2:9E:13:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0437edd1-ccab-471d-b4d5-5c78b6de78ae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.245.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:da:90:d0:0c:18:90:88:d1:16:09:82:df:ab:75:c6:01:1b:
         6b:7e:c2:69:9f:f4:c0:9e:df:17:d3:32:2a:22:e1:83:3d:52:
         5a:b7:7f:1b:09:78:b0:ab:a4:ae:21:69:2a:5b:5c:15:eb:1e:
         69:e8:5e:ec:46:b5:d7:56:4e:fa:77:57:a1:1a:81:11:f4:d5:
         5a:aa:d7:13:42:85:20:6a:52:dc:d5:ee:3f:20:86:78:aa:ea:
         24:0b:94:0b:93:1f:0a:6b:97:5d:a7:50:90:c0:5d:b6:6d:86:
         78:ea:3b:2a:d9:d9:99:59:66:2b:f6:59:a8:a5:c4:ca:44:e1:
         89:32:5e:82:19:65:5a:f8:08:04:f8:70:11:04:47:94:8a:df:
         aa:22:4c:ed:0e:4a:26:5a:bf:28:be:54:a4:b0:c8:8a:78:be:
         51:1f:2c:95:4a:75:72:63:c9:87:8d:94:3e:3f:d4:60:c9:8e:
         94:78:71:df:b8:38:c5:f5:90:a0:2d:09:47:10:f2:ae:b2:41:
         ab:dd:58:6a:eb:c1:bc:65:91:8c:ff:56:d2:d0:65:c3:53:9c:
         6c:35:6a:40:98:88:39:87:ae:c3:eb:57:f1:a9:22:5f:8e:db:
         b7:8d:61:47:1d:79:22:53:01:66:a1:b7:66:5b:c2:1c:f1:14:
         71:89:df:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:40:24 2026 by rpki-client