Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/06d3bb9c-8eeb-3028-a2b3-be307d608810.roa
File:                     06d3bb9c-8eeb-3028-a2b3-be307d608810.roa (raw, json)
Hash identifier:          XAyCygX+zWmdcBzfRH4RMJlGGkum8XFKpnrmYAW4z4A=
Subject key identifier:   C4:C7:01:F2:AE:89:FE:CB:69:9D:6A:4E:8E:D4:6B:78:02:6C:95:67
Certificate issuer:       /CN=ee7fb547-811b-4ddf-ac51-f3d6a4925515
Certificate serial:       010D0C9F4328584D7A052BA8FFA8EB7C2C3350A0
Authority key identifier: FC:56:E0:E7:6E:4B:6A:A0:7C:7E:D3:33:F9:06:DE:16:32:5B:F5:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/06d3bb9c-8eeb-3028-a2b3-be307d608810.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     16276
IP address blocks:        192.99.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/ee7fb547-811b-4ddf-ac51-f3d6a4925515.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/ee7fb547-811b-4ddf-ac51-f3d6a4925515.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:2b:a8:ff:a8:eb:7c:2c:33:50:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee7fb547-811b-4ddf-ac51-f3d6a4925515
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=c6e0b31c-4468-4151-92f6-39f955c55fcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:08:c1:77:d6:0a:6b:d3:63:71:b1:14:47:3e:
                    6a:87:20:f2:c0:46:50:34:9b:d3:7d:a6:e7:7a:e1:
                    cd:d8:1b:a7:e7:16:d6:aa:cb:03:ff:28:f7:f4:da:
                    1d:06:03:8d:ff:cc:6d:dc:0d:6d:78:d4:ea:11:2a:
                    64:a0:4f:ac:62:22:de:c4:2f:24:50:4a:9d:8e:e3:
                    37:78:8d:6f:29:f8:6e:e0:18:c7:d4:0e:97:bf:e0:
                    6b:44:cc:b5:68:01:27:b7:81:52:f0:79:d8:7a:0e:
                    a6:ed:36:27:ce:9a:41:73:54:38:d3:ee:a8:61:2e:
                    d8:c3:c9:26:86:8a:c9:e2:12:f5:78:48:8a:2d:5b:
                    bd:bb:a9:64:a3:db:c8:81:4e:6d:73:88:55:89:8b:
                    a1:6b:ab:b5:ce:84:07:42:6f:f3:a6:02:d3:48:55:
                    61:49:83:d9:1c:56:03:37:25:5e:70:55:ce:7c:e4:
                    c8:c8:6d:b2:52:09:0d:f3:3a:21:b6:73:dd:ab:98:
                    34:01:48:4e:35:70:9e:a4:08:33:5a:36:34:4f:53:
                    03:af:b4:91:36:31:65:51:7b:1a:93:53:e7:03:47:
                    45:00:60:ef:55:da:81:54:93:c6:6d:6c:47:21:5e:
                    3f:3c:de:19:78:59:57:57:47:80:b2:b1:31:0d:1a:
                    89:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:C7:01:F2:AE:89:FE:CB:69:9D:6A:4E:8E:D4:6B:78:02:6C:95:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/06d3bb9c-8eeb-3028-a2b3-be307d608810.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/ee7fb547-811b-4ddf-ac51-f3d6a4925515.crl

            X509v3 Authority Key Identifier:
                keyid:FC:56:E0:E7:6E:4B:6A:A0:7C:7E:D3:33:F9:06:DE:16:32:5B:F5:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.99.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:08:98:ab:88:a5:d1:29:22:20:6f:a5:e8:d1:53:ca:7e:96:
         98:5a:3c:cb:b6:cb:1f:f9:4f:ff:ce:7d:67:51:7e:50:fd:99:
         e3:7a:ed:e1:f8:c8:f8:d9:b1:ba:07:03:11:79:73:fd:f1:89:
         50:3f:e4:08:0e:16:5d:74:c2:81:3e:be:06:36:fd:9e:40:92:
         c5:ee:d3:77:73:5c:7d:a3:58:23:e6:e1:54:75:66:60:c7:47:
         85:8d:42:c6:82:58:ff:84:4b:ea:bd:bc:57:c8:7c:7f:8f:27:
         4b:85:23:cc:23:75:d4:b9:d2:69:eb:b4:0a:5c:41:fd:31:38:
         54:db:98:c7:ab:2e:0d:df:70:9d:99:b2:de:30:2d:5f:f2:ce:
         56:02:92:43:b6:85:34:8b:15:9f:39:33:07:72:1a:20:33:48:
         ed:49:30:57:e5:95:81:f2:9d:87:2b:80:e3:6e:d7:99:52:ad:
         ce:16:b7:83:2c:3e:94:0a:8b:ea:4d:47:19:8d:10:ff:fa:96:
         44:8a:17:d2:fd:1b:4d:88:13:71:f1:d2:4d:3e:36:d3:dc:c6:
         37:ba:73:3b:34:ff:65:cb:f9:f2:e2:d8:db:9e:89:63:74:bb:
         ac:1d:82:ba:6a:25:b8:0e:d4:ab:02:30:3c:73:a0:df:bd:6f:
         16:be:a9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:41:06 2026 by rpki-client