Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/224a8eaf-90ca-3555-ba36-8b880b90fb50.roa
File:                     224a8eaf-90ca-3555-ba36-8b880b90fb50.roa (raw, json)
Hash identifier:          bnJiW7QUern3sAfG9S2zy+2FceleEK/XHUXF4yYyw2c=
Subject key identifier:   BC:CC:16:0E:B3:56:64:D3:46:EB:19:D9:81:F3:8C:5E:8C:3E:15:5C
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584D24E0F9DB09FE4AFF37CFF200
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/224a8eaf-90ca-3555-ba36-8b880b90fb50.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     15169
IP address blocks:        173.194.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:f9:db:09:fe:4a:ff:37:cf:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=123a98ba-1040-4652-88f4-35493c0460a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:7f:fe:25:f7:5b:e6:94:da:15:02:4c:24:80:
                    7b:94:ab:1b:d0:6d:8f:ed:42:c6:11:93:43:9e:4a:
                    7b:9b:0f:69:0e:37:92:f2:ae:7e:d5:98:4e:de:f4:
                    6f:7d:6b:55:de:09:5d:f6:9b:08:67:86:96:e8:17:
                    69:f8:08:b0:a9:d0:7c:af:2b:8d:73:7f:75:04:a8:
                    a2:b5:88:94:0a:bd:52:2f:14:8a:79:12:e9:0f:b6:
                    57:15:4d:28:58:c0:0b:01:29:2e:b9:4b:cf:83:b1:
                    6e:4f:95:3a:e0:65:dd:64:ca:a7:1e:cb:73:d5:92:
                    c4:73:dc:4d:4b:7a:6a:b5:30:3f:10:c1:b7:b6:2c:
                    6b:e2:87:84:75:70:5b:de:1a:bd:38:00:6d:7c:c7:
                    8e:d7:c7:b0:bf:77:67:04:09:55:e5:71:b6:f4:ca:
                    28:d0:be:2c:a7:a2:13:9d:ec:20:33:d6:d6:76:38:
                    46:a0:0d:b4:9c:42:1a:6a:70:ab:78:60:3b:fb:2f:
                    fc:06:f3:3c:20:8e:80:27:ae:cc:e6:a5:8c:fe:91:
                    9d:0a:2d:e4:af:c4:8a:19:6d:63:7d:bb:24:e2:33:
                    af:63:91:cd:82:84:ef:db:9c:60:13:ac:41:25:24:
                    65:9f:60:5a:0d:da:a6:78:de:c5:96:39:a1:c7:1e:
                    10:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:CC:16:0E:B3:56:64:D3:46:EB:19:D9:81:F3:8C:5E:8C:3E:15:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/224a8eaf-90ca-3555-ba36-8b880b90fb50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.194.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:bc:89:ee:72:87:ff:05:dc:3f:43:ce:50:44:34:15:43:66:
         b4:5b:b2:eb:7d:68:19:93:f8:05:91:f5:85:44:fe:aa:e5:db:
         f4:6f:b6:16:90:ea:39:57:4d:6a:13:df:84:95:e3:dc:12:5f:
         85:f7:81:b1:5b:00:73:2d:c5:22:c3:fc:99:93:12:71:32:28:
         86:b1:b8:e0:71:c8:de:3e:41:9f:69:5e:8d:66:bc:52:48:e8:
         e8:65:4f:79:57:25:6a:1d:2d:e7:a7:5e:0c:1f:6b:11:3f:88:
         92:8a:fa:ed:97:46:41:21:64:d1:28:59:07:4b:af:b5:d5:74:
         8a:c9:13:7b:3b:cf:26:88:5f:57:f6:bc:c5:a7:0a:d6:15:01:
         f4:84:a4:b9:29:e1:54:c9:f9:0a:22:b2:32:81:62:1c:64:d2:
         91:ae:97:58:0a:65:48:3d:16:fd:5f:43:8b:b3:d9:40:f2:50:
         37:23:ae:dd:b9:af:24:d2:d0:95:62:4b:7e:0d:34:78:bf:90:
         be:4c:64:8a:c0:81:b8:2b:9b:4b:81:ea:56:97:47:45:dd:a5:
         2b:1e:78:f2:db:98:b6:f5:c1:1b:8d:2d:c9:a9:ed:57:72:92:
         d9:c6:64:3d:10:e5:27:29:d3:70:66:4b:92:41:04:48:37:64:
         e9:78:3c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 20:31:50 2026 by rpki-client