Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/af0792a8-ca3b-323c-af22-eba4e83ee68d.roa
File:                     af0792a8-ca3b-323c-af22-eba4e83ee68d.roa (raw, json)
Hash identifier:          WnQNmRlfEv9XEcTW6srnzHPI/hcjueeNbrKlVkZM/io=
Subject key identifier:   4C:F5:87:E5:79:41:A4:44:12:72:E3:9E:4B:8B:11:16:12:5D:5E:40
Certificate issuer:       /CN=9825dda6-0df7-4c35-af65-4bb69cf71053
Certificate serial:       010D0C9F4328584EEEB758D97A8E9501BF722500
Authority key identifier: 0F:56:7D:09:72:ED:0B:C9:0F:3C:0C:1F:33:01:04:38:6B:DA:DC:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/af0792a8-ca3b-323c-af22-eba4e83ee68d.roa
Signing time:             Sun 23 Aug 2026 13:00:12 +0000
ROA not before:           Sun 23 Aug 2026 13:00:12 +0000
ROA not after:            Sat 21 Nov 2026 14:00:12 +0000
asID:                     29909
IP address blocks:        199.248.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ee:b7:58:d9:7a:8e:95:01:bf:72:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9825dda6-0df7-4c35-af65-4bb69cf71053
        Validity
            Not Before: Aug 23 13:00:12 2026 GMT
            Not After : Nov 21 14:00:12 2026 GMT
        Subject: CN=06226423-9e4e-4b36-8d45-58da9585ad46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fb:0a:b3:41:d1:cf:fe:23:61:7b:a3:3d:5a:
                    48:14:45:ba:57:bf:08:19:0e:5a:a6:f7:51:a0:78:
                    1f:ec:19:19:c4:ec:5a:56:45:b5:6d:a6:0f:cc:97:
                    8f:c8:ba:7c:e5:dc:c9:1a:d5:23:4c:fb:97:42:68:
                    fc:be:8c:a5:8d:25:90:50:41:b9:e5:c6:14:bd:1a:
                    b9:7d:61:aa:64:a9:ab:d6:ab:b7:d9:aa:ed:ca:b7:
                    d5:47:78:4f:34:ae:08:98:44:73:92:5e:5d:f0:b0:
                    6a:f4:48:19:25:43:d3:40:b7:76:f7:78:88:df:3b:
                    eb:95:59:84:66:30:b1:0b:0f:60:bd:28:78:31:b3:
                    8a:ee:cf:48:7b:d3:d9:96:2e:50:61:82:d1:2c:c8:
                    b9:7b:41:66:d2:02:d4:39:4a:60:a3:05:4b:69:8a:
                    ff:36:ba:66:04:26:02:ba:a0:c0:49:6f:d7:59:8c:
                    c1:89:e6:25:90:c2:57:c8:9c:c4:d9:5a:e0:ac:f1:
                    50:e2:20:1b:5e:e7:b4:c5:e4:8e:be:ad:4e:30:83:
                    88:3f:f6:52:5c:d6:5d:5c:3b:d4:72:8d:70:e3:90:
                    8d:7d:ba:6a:31:01:79:f6:04:c9:b1:64:a7:55:dc:
                    e2:8c:05:03:ac:83:06:54:4d:26:b3:55:34:3e:92:
                    00:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:F5:87:E5:79:41:A4:44:12:72:E3:9E:4B:8B:11:16:12:5D:5E:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/af0792a8-ca3b-323c-af22-eba4e83ee68d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.crl

            X509v3 Authority Key Identifier:
                keyid:0F:56:7D:09:72:ED:0B:C9:0F:3C:0C:1F:33:01:04:38:6B:DA:DC:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.248.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:c4:06:2d:10:23:e1:ae:54:e0:f0:a0:8f:0a:30:3c:b1:7d:
         a0:26:bc:7c:2c:c0:e5:94:bf:ba:e6:d8:a8:9f:b7:bc:2e:f4:
         e1:f2:27:c4:8e:e7:91:3d:fc:7a:c2:7c:45:3a:8f:dc:0f:64:
         79:70:d9:49:c2:26:e0:4b:6c:7f:3e:f7:c0:25:c6:49:b7:42:
         80:a3:93:cf:ee:05:14:df:c7:06:de:94:cf:e1:bc:c4:76:12:
         b3:6f:6e:61:11:9c:51:9f:9a:b6:4a:c9:cd:33:a2:01:f8:04:
         5c:e4:bb:f6:59:48:44:80:51:71:a8:ba:6e:f0:6c:be:46:de:
         a9:2b:5a:17:05:31:ac:54:f4:48:8c:b1:43:66:93:74:bc:e0:
         e7:ec:5e:5e:cd:a1:2b:7f:a8:fe:97:66:fe:65:19:8d:35:d9:
         46:d7:34:5a:0e:8d:4c:6e:42:9c:53:cd:07:25:cb:e1:f4:22:
         51:4d:42:5d:3d:e7:20:93:d8:a4:46:72:1e:3e:a2:a5:2b:d9:
         55:22:d5:44:4f:c2:c1:e5:b3:6f:c8:fc:65:d3:d6:d7:9a:02:
         13:78:3c:1e:4a:83:b8:b9:5d:c9:9e:16:88:5e:ed:26:94:40:
         47:6f:00:9b:50:14:f5:1f:3e:9b:ca:0c:7e:31:cf:f2:24:05:
         80:b8:24:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:43:28 2026 by rpki-client