Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/723e80d7-8d06-49fe-8dbd-afe1d6e4ce03/415ac8da-4a43-34c6-808d-23a07ebedef8.roa
File:                     415ac8da-4a43-34c6-808d-23a07ebedef8.roa (raw, json)
Hash identifier:          W7Xn5eyjlbYHG6YqqOEJWtSWWcLkqily6alMDXu0/pE=
Subject key identifier:   07:D9:1A:05:6B:CC:5A:EA:FE:B2:05:3E:39:E0:39:D8:09:4F:39:A1
Certificate issuer:       /CN=723e80d7-8d06-49fe-8dbd-afe1d6e4ce03
Certificate serial:       010D0C9F4328584D81A476F18DFDA4952503D200
Authority key identifier: 4B:B8:56:7E:22:AD:DF:AC:8A:7B:0F:EB:8B:23:8F:12:3B:76:54:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/723e80d7-8d06-49fe-8dbd-afe1d6e4ce03.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/723e80d7-8d06-49fe-8dbd-afe1d6e4ce03/415ac8da-4a43-34c6-808d-23a07ebedef8.roa
Signing time:             Tue 14 Apr 2026 18:32:14 +0000
ROA not before:           Tue 14 Apr 2026 18:32:14 +0000
ROA not after:            Mon 13 Jul 2026 18:32:14 +0000
asID:                     402366
IP address blocks:        199.242.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/723e80d7-8d06-49fe-8dbd-afe1d6e4ce03/723e80d7-8d06-49fe-8dbd-afe1d6e4ce03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/723e80d7-8d06-49fe-8dbd-afe1d6e4ce03/723e80d7-8d06-49fe-8dbd-afe1d6e4ce03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/723e80d7-8d06-49fe-8dbd-afe1d6e4ce03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:a4:76:f1:8d:fd:a4:95:25:03:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=723e80d7-8d06-49fe-8dbd-afe1d6e4ce03
        Validity
            Not Before: Apr 14 18:32:14 2026 GMT
            Not After : Jul 13 18:32:14 2026 GMT
        Subject: CN=20c1c5e1-a2e6-41ed-a91e-788ed2a2bf2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a0:b1:b3:93:4f:e3:80:4f:c6:de:8b:53:f6:
                    c8:99:09:ca:a1:15:f5:1d:41:3f:80:21:59:9a:f9:
                    58:75:89:cb:ab:3a:03:f0:29:32:f2:86:a8:58:e5:
                    3b:a2:94:48:0e:68:bd:7e:c8:ab:20:0c:10:73:e4:
                    43:49:65:a9:93:77:28:b2:63:50:d6:07:fa:63:51:
                    e1:0b:d1:e5:76:85:9d:f0:5f:f7:d8:61:d5:50:15:
                    1d:a9:72:15:f8:7c:b7:60:11:9f:35:8c:e8:3a:19:
                    63:29:b8:36:80:6b:ab:41:70:9c:f7:b5:ef:85:85:
                    6d:b2:85:ba:29:0e:61:02:c6:e1:7a:13:e9:87:19:
                    5e:09:0d:db:c2:60:d8:3b:57:c4:6d:d9:aa:1f:53:
                    40:38:73:3f:42:a4:12:5f:a0:34:3a:04:17:a6:d9:
                    d2:e2:13:da:f1:06:ed:92:15:45:6f:4f:f0:c3:d0:
                    02:1a:58:63:3e:0f:88:68:cf:19:27:7c:bd:19:7f:
                    89:ce:10:cb:e4:f1:c1:5c:af:d9:cb:96:bd:7e:e6:
                    e0:15:99:94:44:f1:55:8a:b4:cb:64:d5:bf:7f:ae:
                    5b:67:4b:93:d2:cf:cf:f3:fe:b5:da:df:2a:58:99:
                    c7:2f:96:ec:d2:6d:ec:0b:49:42:79:b2:e8:54:ef:
                    b4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:D9:1A:05:6B:CC:5A:EA:FE:B2:05:3E:39:E0:39:D8:09:4F:39:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/723e80d7-8d06-49fe-8dbd-afe1d6e4ce03/415ac8da-4a43-34c6-808d-23a07ebedef8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/723e80d7-8d06-49fe-8dbd-afe1d6e4ce03/723e80d7-8d06-49fe-8dbd-afe1d6e4ce03.crl

            X509v3 Authority Key Identifier:
                keyid:4B:B8:56:7E:22:AD:DF:AC:8A:7B:0F:EB:8B:23:8F:12:3B:76:54:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/723e80d7-8d06-49fe-8dbd-afe1d6e4ce03.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.242.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:0b:b4:50:7d:7d:30:4e:6f:27:dd:9f:53:86:83:ce:8d:49:
         25:14:09:89:e9:25:40:6d:5e:8a:7c:85:ae:dd:da:ea:4f:6d:
         5c:ac:d4:59:9c:54:2d:95:5d:9b:58:b8:3c:0d:8f:72:b5:08:
         c0:2a:81:8a:b0:73:7e:6d:dc:67:5a:6f:23:1f:f9:d2:98:5f:
         58:d1:56:a6:89:18:2d:65:c2:59:b7:94:83:32:2b:d7:ac:3a:
         e1:a8:30:13:9a:bc:e5:6c:f0:48:59:08:d2:6a:b7:bf:b6:9a:
         20:cd:0d:9c:51:99:c2:9e:74:a5:52:c2:cf:65:f2:70:93:af:
         ce:a0:df:3a:35:f8:be:72:39:b0:17:77:7c:2a:22:41:41:80:
         03:c0:bf:38:2e:89:c7:93:05:0b:60:90:6e:f4:86:77:6e:75:
         2a:f3:2b:fe:39:33:1d:e7:21:f3:a1:86:39:12:1e:69:85:c7:
         fc:0e:c8:4e:09:0d:1d:3c:4b:63:00:01:0f:a1:93:a4:dd:39:
         27:89:af:e2:ef:a3:cd:e0:4a:d1:c9:b8:d0:df:33:be:ce:8f:
         57:ee:55:cd:dc:96:b0:7c:45:df:f7:de:c8:4e:22:fa:20:74:
         2a:15:be:80:0b:5a:74:ee:a3:d9:8b:fe:aa:0e:00:2b:08:e1:
         d8:7f:4f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:36:36 2026 by rpki-client