Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2f4d7166-541c-4452-8f3e-02dd3cd83b9c/ce7339c0-7832-3441-b396-1fafa8516da8.roa
File:                     ce7339c0-7832-3441-b396-1fafa8516da8.roa (raw, json)
Hash identifier:          XGRPtlkSJNjN3BSgu1NanmfJ7HRaJunb2XiA/WUjwNI=
Subject key identifier:   D0:78:C9:9C:75:FD:54:CB:64:EF:E5:2A:83:13:11:4F:30:AC:3D:8A
Certificate issuer:       /CN=2f4d7166-541c-4452-8f3e-02dd3cd83b9c
Certificate serial:       010D0C9F4328584EA787F8D2589242E776030800
Authority key identifier: C4:58:50:7D:E2:F0:C8:75:B8:FA:1F:D5:43:DE:77:2A:E2:7A:3B:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2f4d7166-541c-4452-8f3e-02dd3cd83b9c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2f4d7166-541c-4452-8f3e-02dd3cd83b9c/ce7339c0-7832-3441-b396-1fafa8516da8.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36354
IP address blocks:        199.244.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2f4d7166-541c-4452-8f3e-02dd3cd83b9c/2f4d7166-541c-4452-8f3e-02dd3cd83b9c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2f4d7166-541c-4452-8f3e-02dd3cd83b9c/2f4d7166-541c-4452-8f3e-02dd3cd83b9c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2f4d7166-541c-4452-8f3e-02dd3cd83b9c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:f8:d2:58:92:42:e7:76:03:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f4d7166-541c-4452-8f3e-02dd3cd83b9c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=cc2b316e-4d06-4fdd-88a4-120c062bb059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:cd:53:3f:0b:01:bc:ec:14:7c:ca:85:be:b0:
                    c2:a8:18:43:3d:7f:b6:05:c5:43:de:8c:ef:5b:77:
                    e5:8f:e1:ea:76:6b:49:fe:07:fa:02:82:dc:3e:40:
                    d6:8f:1c:27:bf:a2:e7:fb:84:5a:f2:e3:f3:6b:7f:
                    6d:f6:93:68:1b:d4:9f:99:d5:d1:4d:48:88:bb:21:
                    94:1d:c3:c7:fc:61:d9:0b:e6:38:48:36:3e:e8:d5:
                    4a:88:89:2b:a3:9f:b9:4f:d0:96:61:fe:04:22:7b:
                    3b:96:3e:4a:4d:46:a9:ff:a2:df:28:dc:d2:f7:b9:
                    de:a3:50:16:ef:dd:a4:71:51:54:80:c1:24:18:ec:
                    8a:ff:3e:d5:b4:db:b0:e4:67:ad:29:78:41:b3:83:
                    fa:3e:09:e3:f0:a5:6a:cf:48:00:8e:24:c7:a4:3f:
                    8d:26:2e:c3:6b:e0:5d:9c:70:bf:14:df:74:ef:fb:
                    02:b8:13:3e:29:1f:7e:99:0b:fb:8c:8a:0d:63:8a:
                    eb:01:18:c7:18:f2:72:96:b1:ad:04:cb:bc:c7:a8:
                    bd:22:a8:58:63:1b:65:bb:d5:bd:87:f9:2f:d1:ec:
                    fc:af:9c:25:cc:45:68:f0:91:7d:6e:aa:fc:b2:a9:
                    f1:13:97:25:07:84:b7:d2:01:35:da:0a:54:f3:3a:
                    a0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:78:C9:9C:75:FD:54:CB:64:EF:E5:2A:83:13:11:4F:30:AC:3D:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2f4d7166-541c-4452-8f3e-02dd3cd83b9c/ce7339c0-7832-3441-b396-1fafa8516da8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2f4d7166-541c-4452-8f3e-02dd3cd83b9c/2f4d7166-541c-4452-8f3e-02dd3cd83b9c.crl

            X509v3 Authority Key Identifier:
                keyid:C4:58:50:7D:E2:F0:C8:75:B8:FA:1F:D5:43:DE:77:2A:E2:7A:3B:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2f4d7166-541c-4452-8f3e-02dd3cd83b9c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.244.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:39:46:ab:9d:c8:74:ff:24:dc:9a:2e:53:a0:9d:84:ff:3e:
         93:08:26:7c:ad:02:23:ed:20:25:45:c5:a6:61:85:33:28:f0:
         90:ce:e9:85:f8:03:b8:f0:f1:3f:48:6d:8f:4c:df:65:e2:69:
         db:62:0d:0a:9f:c1:ed:f2:c3:d2:1c:87:55:b5:a4:2e:24:47:
         ed:e0:c7:69:cb:e8:60:e7:a5:3c:5b:cf:35:34:a0:1e:9f:04:
         04:9d:68:66:eb:07:a1:40:ac:44:35:61:f8:0d:9c:44:14:6a:
         1d:e8:a1:7b:31:eb:72:03:c0:db:c0:d0:94:e3:ae:f6:5a:b3:
         b4:0f:53:4c:cf:9a:55:78:65:60:e9:bf:1a:13:3c:ba:f2:94:
         72:93:48:d8:5e:1c:2e:ed:f5:a3:a6:e2:e3:07:53:52:b6:31:
         3a:c1:9c:43:cc:fb:fc:50:07:f8:2f:91:6f:0e:6f:6e:fd:c8:
         c7:88:40:ff:46:78:ef:e6:c7:8d:76:ad:87:f2:42:fe:80:02:
         43:51:27:bf:34:89:82:28:fe:d1:0c:88:06:c1:2b:55:3e:d6:
         95:ec:46:fb:10:39:e0:b6:9a:b4:55:7a:fa:b8:97:56:ed:f1:
         a3:b1:a3:36:88:ab:29:2d:7a:31:21:89:57:59:4d:9d:bc:7f:
         a8:ce:28:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:47:52 2026 by rpki-client