Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/cc81e71c-c5d3-34f6-b55e-f5ecac51af82.roa
File:                     cc81e71c-c5d3-34f6-b55e-f5ecac51af82.roa (raw, json)
Hash identifier:          PDlkgvPK/XJ65+meQIU3lsxg5yU5HGABIUNJVg1j9yM=
Subject key identifier:   FC:6E:13:12:AD:9B:CD:B0:F9:91:4A:56:3D:08:B3:92:B9:04:BD:CF
Certificate issuer:       /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Certificate serial:       010D0C9F4328584EB2B1F6786E8AE5D4F1BB24F8
Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/cc81e71c-c5d3-34f6-b55e-f5ecac51af82.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     6922
IP address blocks:        198.215.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:f6:78:6e:8a:e5:d4:f1:bb:24:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=f3870f0c-a206-4b77-a844-f53e7d933a27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c6:ef:17:ec:18:69:71:04:37:72:0b:f6:ff:
                    fa:1a:d2:a8:51:38:77:9f:ce:4e:15:f1:38:cf:78:
                    ad:d4:47:8a:92:f5:f4:9d:fd:97:72:81:60:9c:33:
                    22:a2:38:bc:c3:31:4e:63:86:bd:80:fb:6d:2e:e7:
                    09:cb:02:02:f9:b4:71:30:a8:52:55:e8:ff:05:13:
                    4a:c5:3a:c1:c2:c1:1b:5a:a8:11:34:c2:8d:2a:3b:
                    8c:70:ff:49:87:8c:96:4c:3a:e7:a4:1c:e6:98:59:
                    66:4e:eb:65:3e:cd:30:e4:0e:be:bc:7d:88:e7:b4:
                    c2:49:84:fb:e0:a0:83:b5:fc:a4:00:b7:66:02:70:
                    df:6b:56:7f:55:11:06:2d:e0:1b:3f:ec:c4:c4:ff:
                    e6:80:6f:ae:4d:5c:d1:b4:4b:2d:53:f6:59:27:ab:
                    53:7b:d9:12:0b:c3:58:ec:a1:d9:6d:24:05:dc:15:
                    f7:eb:89:5b:16:bb:c1:9a:31:9e:39:92:d3:96:51:
                    5c:48:3e:92:75:e9:a0:11:2f:3a:d5:ef:9a:13:09:
                    89:40:49:c9:88:9b:3a:f9:af:24:ed:e8:0d:94:d5:
                    bc:26:97:20:bd:d4:8e:49:b7:bd:11:68:74:d5:71:
                    61:8f:be:d7:07:87:7b:57:91:6c:dd:e1:c1:0c:b8:
                    8f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:6E:13:12:AD:9B:CD:B0:F9:91:4A:56:3D:08:B3:92:B9:04:BD:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/cc81e71c-c5d3-34f6-b55e-f5ecac51af82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl

            X509v3 Authority Key Identifier:
                keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.215.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:63:74:c5:31:29:13:44:d8:0c:23:0b:8a:7c:a8:ee:76:43:
         5b:e4:04:1a:7d:9d:aa:0e:c5:6d:c6:ff:1a:92:7f:2b:d2:56:
         47:3b:29:50:06:d3:1c:0c:cd:83:cf:01:01:5c:a5:66:31:af:
         b8:9c:3e:29:c0:85:45:70:e7:df:cf:e0:d0:a3:98:a9:ae:6f:
         b8:3c:9c:0f:9a:53:96:49:81:90:64:93:7a:4e:d8:f4:d8:16:
         be:cb:6e:20:a7:2d:b2:37:24:38:ce:17:5e:b4:ba:83:e8:2f:
         2c:0f:09:fa:ff:22:a2:0c:86:fe:54:0f:a6:68:a1:11:9b:78:
         63:c4:b4:90:f5:a8:09:8d:73:c2:62:0b:48:cf:e0:d0:5f:18:
         12:e7:a8:c2:e6:d4:ad:ba:4d:5d:e0:c0:4c:96:bc:8d:a3:a3:
         9f:fa:bf:39:bc:45:16:fa:b0:d8:63:b3:e7:30:da:3e:27:50:
         33:63:41:b6:73:fc:81:ea:36:c4:c1:01:48:e6:d5:63:b5:04:
         62:eb:b8:4a:92:1a:6f:2d:ef:bf:c3:a7:90:be:26:e3:d2:56:
         77:e4:78:0d:04:e3:64:51:89:c1:8c:ca:a7:ad:f0:aa:40:1a:
         69:2c:aa:0b:56:a6:7e:06:67:f9:ba:39:b0:29:dc:84:b5:b1:
         2c:b0:68:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 23:30:05 2026 by rpki-client