Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fb545837-dc13-4101-916f-b5207537624f/a71f91cb-3a57-3a03-ab60-85cb351f192c.roa
File:                     a71f91cb-3a57-3a03-ab60-85cb351f192c.roa (raw, json)
Hash identifier:          2eH8kAM0zTt+3KUY0RXCVk7aVb9XNU9ZIdnal3f00BY=
Subject key identifier:   D8:F5:2B:9C:9B:3C:D0:DD:18:43:DE:00:E3:75:84:FE:1C:40:84:AC
Certificate issuer:       /CN=fb545837-dc13-4101-916f-b5207537624f
Certificate serial:       010D0C9F4328584D7328A0BF244D8DF4755B7E00
Authority key identifier: 1A:E2:36:89:1C:B7:F1:C7:A1:B6:DF:13:19:62:84:E3:C8:86:B1:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fb545837-dc13-4101-916f-b5207537624f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fb545837-dc13-4101-916f-b5207537624f/a71f91cb-3a57-3a03-ab60-85cb351f192c.roa
Signing time:             Thu 09 Apr 2026 14:01:24 +0000
ROA not before:           Thu 09 Apr 2026 14:01:24 +0000
ROA not after:            Wed 08 Jul 2026 14:01:24 +0000
asID:                     53586
IP address blocks:        199.27.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fb545837-dc13-4101-916f-b5207537624f/fb545837-dc13-4101-916f-b5207537624f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fb545837-dc13-4101-916f-b5207537624f/fb545837-dc13-4101-916f-b5207537624f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fb545837-dc13-4101-916f-b5207537624f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:73:28:a0:bf:24:4d:8d:f4:75:5b:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb545837-dc13-4101-916f-b5207537624f
        Validity
            Not Before: Apr  9 14:01:24 2026 GMT
            Not After : Jul  8 14:01:24 2026 GMT
        Subject: CN=0c772410-485e-4ed4-9620-baab86c3895e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e7:c9:0d:80:4e:87:7c:93:07:33:34:fc:a9:
                    ff:f0:23:33:79:23:e7:87:79:95:ed:4e:ed:7b:b7:
                    86:e6:1a:8b:93:9d:a9:ae:1c:91:ad:12:8b:a1:e7:
                    b0:20:7c:f3:cb:f0:9c:12:dd:a2:65:31:c9:50:f1:
                    b2:64:4c:d3:62:6f:0c:8c:9e:5f:9c:4b:ff:c5:07:
                    be:6c:fb:e4:98:6f:0f:e5:c6:63:39:af:df:77:95:
                    a2:b1:a8:31:e1:80:49:e4:11:82:20:db:e3:76:fb:
                    1b:f3:01:7e:3b:92:e6:a3:3c:3e:ee:27:2c:95:56:
                    69:54:eb:59:43:6b:83:56:35:2b:a9:97:fe:77:19:
                    b0:d4:68:9a:31:b9:04:23:4d:c8:a4:04:61:8a:fa:
                    b4:3c:90:db:5f:a5:d9:01:c9:ac:22:33:6b:7a:7c:
                    8b:70:4f:c3:17:ff:62:a4:2c:36:0e:03:2f:e5:b1:
                    d9:61:47:9d:43:07:fc:35:56:2e:9d:ce:7d:e4:65:
                    d0:76:0d:6b:88:13:38:6a:38:28:c9:67:47:23:fa:
                    63:84:de:0e:4f:3f:ed:29:7a:66:d5:8c:dc:6f:b8:
                    a0:11:c7:5b:ce:1d:d5:ad:bd:3b:fe:d0:b0:7d:64:
                    c8:ca:7d:12:1a:10:96:c3:91:0b:b6:5d:cd:55:1e:
                    ad:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F5:2B:9C:9B:3C:D0:DD:18:43:DE:00:E3:75:84:FE:1C:40:84:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fb545837-dc13-4101-916f-b5207537624f/a71f91cb-3a57-3a03-ab60-85cb351f192c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fb545837-dc13-4101-916f-b5207537624f/fb545837-dc13-4101-916f-b5207537624f.crl

            X509v3 Authority Key Identifier:
                keyid:1A:E2:36:89:1C:B7:F1:C7:A1:B6:DF:13:19:62:84:E3:C8:86:B1:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fb545837-dc13-4101-916f-b5207537624f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.27.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:0c:63:59:30:66:91:c1:3e:09:bb:50:4a:d2:23:c4:85:5b:
         48:cb:c4:a6:0b:1e:ea:48:b2:85:f0:42:a4:54:2a:a4:4c:c9:
         3a:1b:5b:28:c2:46:e3:bc:5c:85:ed:b4:db:ef:00:cd:35:b4:
         b3:5d:e2:79:78:43:50:15:44:c1:03:4a:7a:cb:80:a2:86:09:
         43:4e:c0:df:40:31:be:3f:3c:20:01:9c:a7:33:0c:2d:ad:af:
         95:23:4f:c2:ba:f4:87:5b:e5:b2:97:cf:02:60:c9:2c:6d:14:
         e4:da:db:64:77:eb:26:27:9f:23:d1:36:1f:f4:77:d7:6e:25:
         3c:bc:a1:7b:23:59:8f:b5:48:01:6a:3b:f2:93:0c:6b:03:a8:
         07:7a:35:e7:45:d7:cd:ab:0b:51:d1:50:dc:19:c5:56:d0:fd:
         81:10:50:d1:c2:e5:81:86:96:81:11:84:a5:96:54:75:20:97:
         8a:d6:20:ed:e7:1f:1d:c1:ea:2a:10:7e:86:63:b9:1e:8f:a2:
         80:26:cb:88:ef:ee:7b:fa:4d:ed:26:de:1b:42:e0:33:d4:6b:
         75:86:9b:01:93:51:d6:6f:7b:27:3f:df:06:e7:8b:c4:6b:5c:
         32:3b:16:1e:5c:57:e7:94:6a:4f:40:5c:45:76:61:cc:9a:d0:
         3f:3e:82:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:07:19 2026 by rpki-client