Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/ccf96d84-c010-35d6-a90d-ada74399338e.roa
File:                     ccf96d84-c010-35d6-a90d-ada74399338e.roa (raw, json)
Hash identifier:          V/8C+3vUMHhndWRQ+Ipu2gvZPiL41WNHqeATz32t4UE=
Subject key identifier:   E3:A7:60:91:78:8D:50:F7:8C:24:D0:7F:19:18:7F:FC:56:09:ED:2C
Certificate issuer:       /CN=2de5d746-3402-4263-b880-ea4d7ecfc168
Certificate serial:       010D0C9F4328584D60E517F67AF21D15517C26C0
Authority key identifier: 6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/ccf96d84-c010-35d6-a90d-ada74399338e.roa
Signing time:             Fri 03 Apr 2026 01:00:24 +0000
ROA not before:           Fri 03 Apr 2026 01:00:24 +0000
ROA not after:            Thu 02 Jul 2026 01:00:24 +0000
asID:                     53471
IP address blocks:        98.97.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:e5:17:f6:7a:f2:1d:15:51:7c:26:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2de5d746-3402-4263-b880-ea4d7ecfc168
        Validity
            Not Before: Apr  3 01:00:24 2026 GMT
            Not After : Jul  2 01:00:24 2026 GMT
        Subject: CN=b7978d60-3837-4914-a15f-0d6560b39d65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e4:06:b5:24:aa:b9:82:7c:4e:d5:e9:7b:2a:
                    7f:26:7c:80:66:8b:00:6c:4e:7e:23:09:e5:af:9c:
                    3d:af:67:d3:cb:8c:08:cb:fa:de:bb:40:f5:2c:f3:
                    99:09:92:8f:d3:09:c5:1d:9b:11:8a:68:be:40:29:
                    f7:c0:22:ab:28:ad:2b:43:a1:d1:94:f7:92:1e:4e:
                    ce:18:25:5a:88:f9:6e:4e:44:53:ee:d4:9f:27:fa:
                    1b:de:37:ac:55:5f:1d:70:ca:ec:40:9f:b3:fb:dc:
                    b7:94:4f:d3:80:df:d5:04:0d:a1:cb:0e:3e:fb:0e:
                    9e:85:68:8e:a4:6e:10:58:93:38:b0:42:33:7a:53:
                    ba:95:16:12:bf:e3:9f:19:cc:02:d0:cd:dc:6b:91:
                    ed:76:71:f4:4f:4e:de:fa:6a:86:96:b5:d1:44:64:
                    8b:17:04:96:e1:12:c5:3c:80:a8:29:36:71:92:20:
                    41:e6:7f:d1:e5:a2:20:d7:3f:9a:4e:c9:05:d6:ac:
                    9e:58:e9:10:84:9b:55:06:d4:7d:68:cc:f8:8f:d5:
                    97:3b:53:51:95:cc:fd:d1:9e:9b:30:17:ab:d8:ad:
                    cf:42:d4:be:4b:a1:60:88:aa:c7:a3:5a:3f:83:d0:
                    5d:d4:87:a8:3b:9b:a3:ed:03:3a:03:5b:ff:52:a0:
                    3e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A7:60:91:78:8D:50:F7:8C:24:D0:7F:19:18:7F:FC:56:09:ED:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/ccf96d84-c010-35d6-a90d-ada74399338e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.97.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:10:22:1f:40:16:75:4d:87:27:d1:2b:3d:83:31:6c:9c:56:
         0b:62:b5:89:7a:2d:7e:c9:16:75:1a:0b:f2:7a:80:34:82:4b:
         f6:c3:87:c0:a1:72:f3:d6:41:ee:ea:92:09:52:b5:37:db:b1:
         1b:f7:f5:8d:16:69:d4:2c:5c:c4:b4:22:fa:2b:f2:39:93:da:
         da:62:74:ec:62:fb:52:bc:4a:59:87:2b:49:90:57:9c:77:8d:
         00:73:cf:81:74:3e:a5:3e:ef:9c:d8:94:ed:b1:2d:cb:31:da:
         d2:9b:2d:3c:96:76:86:dd:5c:b0:c0:b5:85:bf:f8:9a:55:42:
         fc:27:91:08:3e:cf:71:c8:f6:f3:6c:db:5d:6d:4b:38:a6:76:
         3a:6d:4c:43:94:d5:db:97:5c:73:41:95:78:f1:0b:b8:48:f1:
         ed:0f:f3:a2:41:f3:21:50:9c:d8:66:41:22:ef:09:29:5e:37:
         c6:a9:e3:71:4b:f9:48:ee:5a:25:e5:b1:bb:a2:6f:84:5d:67:
         0d:f9:c9:7b:83:f8:ae:e9:e4:ea:63:75:e0:c5:e6:c3:08:3e:
         24:42:a1:9a:c9:1b:bf:a9:bd:71:a7:e9:bd:63:04:45:02:64:
         cc:a9:7e:e2:71:0f:45:56:8e:5c:54:58:ff:dd:2b:4d:f5:ce:
         34:ba:8d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:29:51 2026 by rpki-client