Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/030fc748-abaa-3cea-bd4c-e3f3aff66c3f.roa
File:                     030fc748-abaa-3cea-bd4c-e3f3aff66c3f.roa (raw, json)
Hash identifier:          xAjlhNstAWNQWOO29labyzRXWO3u7gWoDup1QqZ2Q1k=
Subject key identifier:   52:9D:2E:0E:26:BA:02:19:33:74:D3:51:05:6C:CD:6D:29:48:B5:02
Certificate issuer:       /CN=6511a5cc-df0b-4c6e-a228-2902fbea4263
Certificate serial:       010D0C9F4328584D59EA656F38D88CA617912740
Authority key identifier: ED:B2:04:0A:65:F6:8A:00:34:25:EC:FC:AB:A5:2B:F8:26:99:1B:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/030fc748-abaa-3cea-bd4c-e3f3aff66c3f.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     16509
IP address blocks:        140.98.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/6511a5cc-df0b-4c6e-a228-2902fbea4263.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/6511a5cc-df0b-4c6e-a228-2902fbea4263.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:65:6f:38:d8:8c:a6:17:91:27:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6511a5cc-df0b-4c6e-a228-2902fbea4263
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=876555b7-67c8-4117-8011-bd5db2c2eae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2c:25:e0:5f:44:0f:41:8b:7d:2a:42:c1:c5:
                    df:41:7e:ab:c6:65:43:c2:9d:be:d8:98:7f:d5:f8:
                    a8:e5:a7:10:ea:4a:10:5f:ed:51:ed:94:af:a1:5c:
                    5f:3d:33:38:00:01:aa:b9:8d:1c:a9:69:b2:b9:d0:
                    47:46:80:58:07:be:66:44:d9:f9:ee:b3:62:17:5e:
                    e7:4d:c6:ae:f5:a6:a4:50:2d:51:8e:de:b6:d6:30:
                    95:5b:fa:35:2a:cd:03:00:d2:d9:a6:d1:0f:76:08:
                    c4:33:75:3a:74:b5:af:e0:86:7a:83:03:79:a9:d9:
                    c3:39:68:c2:60:28:00:37:e5:26:78:d8:4d:1d:54:
                    11:64:ce:91:86:0c:55:d7:a4:48:50:65:b3:1f:ae:
                    7c:d0:94:ce:5c:7b:57:4f:77:ac:55:0e:9d:cc:da:
                    c9:f2:6e:e1:35:8f:70:9c:dd:db:13:8d:e6:99:5c:
                    16:a6:39:b5:e6:87:09:15:0f:f2:2b:ea:d8:8b:f3:
                    20:bf:db:31:10:11:b1:34:f3:90:b9:63:2e:cf:90:
                    2b:31:a1:70:41:84:b2:98:ff:1a:fe:1d:f4:4b:93:
                    19:99:99:2c:0f:44:94:5a:8d:2b:88:2c:74:00:6e:
                    2d:8f:98:07:53:a8:88:9e:87:97:f3:14:ab:98:fc:
                    b7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:9D:2E:0E:26:BA:02:19:33:74:D3:51:05:6C:CD:6D:29:48:B5:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/030fc748-abaa-3cea-bd4c-e3f3aff66c3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/6511a5cc-df0b-4c6e-a228-2902fbea4263.crl

            X509v3 Authority Key Identifier:
                keyid:ED:B2:04:0A:65:F6:8A:00:34:25:EC:FC:AB:A5:2B:F8:26:99:1B:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.98.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:06:b1:c0:75:3c:ac:d4:9a:56:be:10:f7:91:de:8a:05:ce:
         1e:4b:94:7f:ff:c5:4c:aa:48:b7:9e:e1:d2:c8:e1:9e:ac:1b:
         8e:b2:03:79:a1:e3:d1:f6:2f:30:ad:d0:75:bd:6f:39:37:96:
         46:6f:d3:4f:4b:ab:55:9f:83:14:9a:83:12:33:63:1a:a0:10:
         2f:26:7d:b7:a3:38:40:f3:7f:3b:2a:79:e8:f0:d5:40:7e:7d:
         37:39:fe:c8:22:5e:e7:20:b9:7d:8a:4d:ba:f2:10:9c:c1:80:
         93:fe:d0:5a:f5:d0:5f:39:3b:f6:ee:c9:d6:e7:11:79:e8:6a:
         01:a4:11:f7:23:75:11:1b:bb:ce:9f:c8:f6:60:3b:b2:c9:c6:
         ce:0b:ff:c6:c7:c6:24:49:8b:67:68:57:1f:49:cb:5b:2b:df:
         43:3a:f4:bf:81:e7:a0:11:97:01:76:0f:bb:6a:a2:0d:45:ce:
         8a:14:df:75:d1:c3:69:c2:05:88:01:3d:28:2c:1b:f7:8f:bf:
         9a:7b:de:4c:84:da:8b:80:b5:67:d7:99:55:94:d0:cc:57:17:
         24:d7:09:53:47:44:0e:5f:84:1e:13:ed:aa:01:85:ae:08:c1:
         26:fb:86:56:91:aa:4f:32:af:40:62:97:94:14:88:64:23:51:
         ac:4f:43:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:27:52 2026 by rpki-client