Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/6848cf17-e19e-3688-8f82-d884c0f05abe.roa
File:                     6848cf17-e19e-3688-8f82-d884c0f05abe.roa (raw, json)
Hash identifier:          CbLmuU8zVHYhZ7sv/Bxb9Ech2rWViJDUvC1jaECwwXU=
Subject key identifier:   1D:F9:D8:42:91:BB:43:0D:1A:BF:F2:C3:FC:4A:D6:A2:72:50:CD:D4
Certificate issuer:       /CN=835152c2-2ed8-4151-8f82-ac9407335b2c
Certificate serial:       010D0C9F4328584EBC77087E910D4CC563CCDE00
Authority key identifier: 8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/6848cf17-e19e-3688-8f82-d884c0f05abe.roa
Signing time:             Wed 05 Aug 2026 13:00:12 +0000
ROA not before:           Wed 05 Aug 2026 13:00:12 +0000
ROA not after:            Tue 03 Nov 2026 14:00:12 +0000
asID:                     198949
IP address blocks:        198.20.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bc:77:08:7e:91:0d:4c:c5:63:cc:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835152c2-2ed8-4151-8f82-ac9407335b2c
        Validity
            Not Before: Aug  5 13:00:12 2026 GMT
            Not After : Nov  3 14:00:12 2026 GMT
        Subject: CN=00e2fdb5-a9c4-4999-abad-4d05dbfc0b7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ff:49:b1:db:ec:b3:9c:59:35:97:ae:99:63:
                    41:c1:49:1c:00:87:ce:e8:f8:60:ce:c9:44:a7:57:
                    5d:ae:7a:c9:33:ae:e0:39:bd:8e:1e:0a:48:bf:c9:
                    46:5f:d8:52:ca:8e:7c:9e:25:6d:01:03:b6:9e:ea:
                    3f:57:e4:01:6e:7a:d2:65:4b:ff:e7:ce:1a:4c:ac:
                    2b:2c:78:5b:71:0a:1f:83:24:a0:cd:88:0e:86:24:
                    f5:ee:c4:70:ac:8d:2a:d4:0b:a5:18:10:7f:19:82:
                    49:ef:5c:05:b5:29:0d:04:04:d4:da:d3:cc:3e:b0:
                    96:9b:e5:0c:e7:c4:cc:1f:41:10:ec:8a:af:cd:4d:
                    97:67:c0:10:44:db:4a:ef:dc:f8:88:82:90:5a:9d:
                    41:c8:4a:f1:92:07:78:18:13:a2:37:5e:b4:37:5e:
                    18:99:36:68:40:37:f5:2d:a8:47:5b:17:64:6b:22:
                    30:59:cd:4f:ac:f8:86:eb:a3:e1:f6:7f:65:37:6f:
                    28:cd:1b:62:96:04:f0:f8:98:e7:ee:55:65:80:d5:
                    c9:57:ba:8a:b9:63:79:e0:ff:ae:9b:81:00:33:70:
                    85:f6:0e:c9:9c:96:32:9a:fb:02:ab:ae:69:b4:3f:
                    7f:3f:6e:b6:4d:71:63:b8:a3:43:ac:28:a6:8a:10:
                    57:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:F9:D8:42:91:BB:43:0D:1A:BF:F2:C3:FC:4A:D6:A2:72:50:CD:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/6848cf17-e19e-3688-8f82-d884c0f05abe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.20.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:a5:2c:68:2e:59:2b:8a:85:2c:5d:d6:a5:f0:ba:c1:ad:57:
         64:03:de:02:d9:3b:25:7b:70:16:c8:50:ed:70:2f:17:b4:a2:
         44:ea:33:ca:fc:4e:6e:a2:99:04:b4:27:a4:45:d0:be:58:3f:
         ab:00:bf:5f:7e:11:d8:32:06:45:8f:d2:7f:a4:24:fb:29:b4:
         c0:2e:8e:13:19:a8:5d:a9:f5:7d:77:cb:77:3b:eb:8c:da:cd:
         15:74:eb:6a:9f:c5:54:c2:4c:46:93:56:b3:36:a9:ca:7a:54:
         0f:ae:fd:0f:a1:bf:ec:37:b2:d2:19:ff:a3:36:6f:6c:ee:9f:
         8a:ea:64:4f:cf:5b:9e:bb:d2:58:a4:87:af:82:e8:4c:7c:17:
         b5:3c:57:cb:d2:48:36:b6:7f:75:a6:dd:4a:65:bb:e7:ed:04:
         62:35:2f:58:fa:b0:d7:24:77:46:eb:ac:f3:eb:5e:f5:47:ba:
         89:70:04:7c:6e:3b:2b:3d:98:9c:c1:56:66:2b:a7:f6:76:d8:
         5f:ff:dd:ef:7b:0d:99:3f:f1:6a:86:73:0d:70:39:00:a1:f8:
         55:56:bf:73:e7:6e:3b:47:84:97:7d:44:cd:a6:2a:fa:52:6f:
         ac:93:d2:2a:95:ff:7f:51:db:c6:ac:a4:3f:a2:8d:d3:5b:3a:
         c5:f3:6b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 15:39:00 2026 by rpki-client