Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7/c6492204-28f2-37fd-b247-ea6f897ad2f3.roa
File:                     c6492204-28f2-37fd-b247-ea6f897ad2f3.roa (raw, json)
Hash identifier:          eigrSGJaBDOeik6WGZYvTqhfQKtj2TC157TJX/vNsAM=
Subject key identifier:   FD:E1:06:B3:38:91:E2:63:1E:40:22:A1:DB:C4:67:F9:82:64:B6:52
Certificate issuer:       /CN=4af28314-8fe0-47ff-83fe-2ca111b759a7
Certificate serial:       010D0C9F4328584EA5AA6C20E79690EF67678840
Authority key identifier: 03:36:A2:35:7E:18:31:11:23:8D:BE:B0:62:AA:60:0A:E5:CC:3C:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7/c6492204-28f2-37fd-b247-ea6f897ad2f3.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     14618
IP address blocks:        198.160.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7/4af28314-8fe0-47ff-83fe-2ca111b759a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7/4af28314-8fe0-47ff-83fe-2ca111b759a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:6c:20:e7:96:90:ef:67:67:88:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4af28314-8fe0-47ff-83fe-2ca111b759a7
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=0421d771-22cf-4503-abf0-49931b1cf2a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:62:23:8f:e1:cf:ed:62:a2:ca:86:6f:81:91:
                    aa:35:c2:06:64:aa:a2:52:53:2c:03:a1:8a:1f:f8:
                    39:81:c8:5e:4e:ae:b1:ac:d9:dc:33:3d:79:b5:05:
                    5f:26:9e:4f:6d:ec:3e:59:ee:02:44:9d:80:e1:9a:
                    34:2d:57:56:d2:6d:bf:bb:50:b7:36:63:7a:a1:35:
                    d3:20:42:07:95:f3:f3:a0:15:ad:e7:d9:b8:b1:df:
                    ef:18:d8:97:64:33:c2:d8:45:be:c8:4c:23:d5:43:
                    8f:cc:a7:05:92:39:3e:1f:ed:45:2f:53:1b:44:5c:
                    c8:73:0f:7f:27:6f:dd:01:10:a3:23:54:69:0e:5a:
                    b7:39:82:8b:5f:af:e5:17:79:55:52:bf:1a:0a:75:
                    00:1f:8f:db:56:49:a6:e1:f6:7f:a0:2b:17:5a:74:
                    29:4a:83:13:ed:ec:41:df:97:65:8c:05:8c:2e:3b:
                    08:d7:94:f8:7f:4e:bd:e8:88:d0:28:ca:e9:d2:51:
                    64:78:76:32:d0:54:62:4c:ab:cf:2a:4a:78:69:bf:
                    6c:05:68:55:0e:3c:d6:9f:33:e0:d9:12:e2:b6:2b:
                    86:ee:be:4c:68:11:bf:f5:7b:6b:29:5c:c5:7a:de:
                    13:bc:e6:8f:e7:c9:2a:76:8c:98:c5:1c:6d:b4:f0:
                    4c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E1:06:B3:38:91:E2:63:1E:40:22:A1:DB:C4:67:F9:82:64:B6:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7/c6492204-28f2-37fd-b247-ea6f897ad2f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7/4af28314-8fe0-47ff-83fe-2ca111b759a7.crl

            X509v3 Authority Key Identifier:
                keyid:03:36:A2:35:7E:18:31:11:23:8D:BE:B0:62:AA:60:0A:E5:CC:3C:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.160.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:d7:c3:8f:6c:60:af:28:62:19:23:b0:3d:f6:a1:75:03:5c:
         35:fb:fd:3b:f6:35:c5:46:ea:49:27:15:74:29:23:b0:32:b8:
         ba:74:3a:4b:1d:6d:1f:17:18:92:46:01:b3:6a:13:fc:46:53:
         e4:08:3f:f8:10:71:91:dc:be:2d:6d:af:0a:ae:0e:90:c6:5c:
         ed:5e:63:fc:15:03:f3:c7:79:5f:4f:33:b7:e7:51:73:e6:9a:
         35:a9:8d:2b:92:98:3e:9e:a6:e4:92:b9:d0:0b:61:14:4c:5d:
         87:e7:8c:6b:cb:9a:2f:ec:e5:10:24:92:3d:79:bb:03:d1:5c:
         02:ce:12:53:93:fd:ba:88:f7:80:ae:00:5e:dd:49:ea:98:4f:
         9a:3c:4e:40:22:ac:0d:14:9b:8f:cd:fe:ee:3b:a5:6b:2b:b3:
         45:8f:e6:e1:e2:5a:14:c6:e1:20:79:f8:86:bb:d1:45:c5:04:
         df:20:6d:4f:b8:b2:82:c8:0f:15:b7:22:2d:e3:74:23:a6:11:
         03:04:cf:eb:4a:bc:a2:d8:af:19:37:5a:d2:d4:d0:59:c2:ce:
         fd:3d:0b:49:90:62:88:e4:f8:f7:ea:be:95:ca:c9:2e:32:f5:
         4a:7f:0d:d2:70:74:6a:fe:c1:d6:aa:be:9a:cd:ff:18:90:16:
         bd:c2:b7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 01:07:49 2026 by rpki-client