Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ab86da4b-6cad-3670-b540-1336eb14127f.roa
File:                     ab86da4b-6cad-3670-b540-1336eb14127f.roa (raw, json)
Hash identifier:          Yj8nNJtqEzYo31tWODLDI4oVfm7vDuHRkTnzaYcnPfU=
Subject key identifier:   E3:CF:89:1B:D4:31:6D:2A:9E:BD:7F:41:F6:A4:01:5F:62:D5:93:B7
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E4129D76E6EE3DF69979D7200
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ab86da4b-6cad-3670-b540-1336eb14127f.roa
Signing time:             Mon 22 Jun 2026 09:00:11 +0000
ROA not before:           Mon 22 Jun 2026 09:00:11 +0000
ROA not after:            Sun 20 Sep 2026 09:00:11 +0000
asID:                     30036
IP address blocks:        198.40.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:41:29:d7:6e:6e:e3:df:69:97:9d:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun 22 09:00:11 2026 GMT
            Not After : Sep 20 09:00:11 2026 GMT
        Subject: CN=49103b04-a1b0-457c-bcad-c20c2a324bf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5b:ad:ee:31:b6:85:a8:93:a9:04:df:27:f4:
                    b8:b6:3a:2e:96:3e:7e:db:cb:62:c0:f2:d9:ca:f4:
                    99:c5:72:66:63:a9:fa:47:ef:02:f6:5b:ca:7b:e0:
                    ed:45:a1:4e:17:b7:a2:b6:07:ab:93:b0:23:96:ed:
                    e0:fd:2c:eb:e4:94:46:9e:fb:77:7f:39:2d:60:aa:
                    64:42:49:a0:a9:be:6f:25:3c:83:52:10:75:35:90:
                    a6:36:8b:3d:5a:f9:d6:30:27:87:9c:53:07:37:eb:
                    df:5f:13:43:3b:b4:09:fa:2c:ab:f8:cf:8e:e2:bc:
                    85:02:59:d9:d6:40:b8:8d:d2:13:6a:62:a3:8b:49:
                    45:5b:7b:07:a7:79:cd:34:9f:07:26:3d:16:3e:c4:
                    f4:7a:25:27:f3:44:41:70:33:ea:2f:7c:2c:bb:fa:
                    c5:c7:a0:1d:4e:31:a9:36:e7:41:0f:4c:bb:bc:7f:
                    7a:60:6e:b5:27:28:de:96:dd:2f:8a:a6:78:1f:bc:
                    9c:e1:05:10:96:ae:fb:02:4e:de:80:ec:0e:a9:da:
                    eb:90:96:54:d8:ad:66:32:e6:86:76:40:fa:5d:20:
                    59:d5:1f:e2:2a:bc:ae:0b:d8:1c:79:0c:b1:d3:be:
                    af:57:99:e4:5b:42:ea:f2:5a:38:cf:99:73:4e:86:
                    d3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:CF:89:1B:D4:31:6D:2A:9E:BD:7F:41:F6:A4:01:5F:62:D5:93:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ab86da4b-6cad-3670-b540-1336eb14127f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.40.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:6a:a7:f9:d0:9c:e6:70:60:87:78:d2:21:e3:28:fd:84:3d:
         2f:3b:2d:7b:36:2d:17:5d:4f:71:b3:89:7f:f3:a9:65:07:c4:
         08:e0:e5:fd:8e:d8:79:3f:ea:cd:63:15:46:3a:26:78:61:db:
         7d:63:54:0f:65:6e:d2:f6:4c:7a:41:12:92:d0:fa:f2:d1:52:
         5a:3d:d9:6c:d1:bf:b6:dd:7c:4e:0a:a4:c5:d6:6c:40:ea:2b:
         d7:79:e3:1f:80:f4:0c:97:07:96:03:61:d6:e1:44:5e:65:1f:
         d2:e3:cf:76:06:21:03:33:d3:fd:ae:ee:5f:61:98:01:7f:3c:
         47:46:96:6f:32:a8:eb:60:61:ed:88:ab:d4:d1:c5:75:6e:b5:
         bd:9d:e4:03:0c:f7:cb:11:69:14:c4:40:38:e0:75:51:59:de:
         65:3e:56:13:dc:ac:8d:b7:3b:7d:2e:c2:f2:7e:3f:f7:9e:d3:
         67:3b:7d:87:f4:71:56:9e:65:b9:23:83:b7:2e:12:9b:eb:69:
         b9:9c:69:13:60:e7:8e:f0:13:1f:89:0d:a4:28:bb:48:70:e8:
         c8:ec:2e:ba:42:64:13:90:f4:04:9d:ed:33:df:5b:f7:72:54:
         61:43:0d:34:27:97:be:2a:2e:81:cb:a8:3c:9a:4b:71:70:28:
         76:52:5f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 03:22:15 2026 by rpki-client