Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/cfb6983e-4848-36b6-a5e3-eb6247e2218a.roa
File:                     cfb6983e-4848-36b6-a5e3-eb6247e2218a.roa (raw, json)
Hash identifier:          AzuA1/7NQX5eqPMYDJz0uNsaxCV9H4uAk6SxMb8Goak=
Subject key identifier:   22:08:08:F0:AA:FE:6D:CB:A6:75:D2:28:34:AB:29:3A:05:F5:B7:4F
Certificate issuer:       /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Certificate serial:       010D0C9F4328584D8AC557C2091CBF3D08279100
Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/cfb6983e-4848-36b6-a5e3-eb6247e2218a.roa
Signing time:             Sat 18 Apr 2026 01:00:24 +0000
ROA not before:           Sat 18 Apr 2026 01:00:24 +0000
ROA not after:            Fri 17 Jul 2026 01:00:24 +0000
asID:                     6922
IP address blocks:        198.216.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8a:c5:57:c2:09:1c:bf:3d:08:27:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
        Validity
            Not Before: Apr 18 01:00:24 2026 GMT
            Not After : Jul 17 01:00:24 2026 GMT
        Subject: CN=9a2fd182-d41c-4714-a838-2b90e068983d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:4c:46:7d:a1:3f:8e:40:dd:dd:fa:94:f1:92:
                    2e:22:8e:99:bd:b8:8a:bd:38:43:9a:7e:32:07:17:
                    41:3c:e2:58:54:42:b4:35:f7:37:00:89:60:92:3d:
                    75:2c:c1:90:25:57:ee:f6:43:4a:53:03:43:4f:4a:
                    86:6d:dd:9f:5e:5d:b2:4e:cd:0b:20:82:63:80:98:
                    22:37:e2:f3:42:f9:37:94:f0:26:74:b0:fe:8f:fc:
                    fa:b0:05:11:22:07:11:e5:50:bc:54:24:7c:c5:70:
                    35:4c:3c:9c:9a:a5:aa:b5:70:51:97:cc:a9:50:4c:
                    21:4f:25:59:c4:31:12:00:0a:f6:4b:09:69:29:8a:
                    bf:65:2a:81:6e:f5:45:89:bc:76:02:33:a9:22:17:
                    cf:0e:bb:a4:ed:52:ee:ed:87:3a:31:8d:01:70:22:
                    47:a1:56:38:6f:ea:24:2e:a6:8e:d8:07:1b:89:44:
                    82:53:e9:cf:e0:5c:80:56:36:5c:f6:3d:6c:2c:f5:
                    5d:e4:14:9a:35:36:2a:98:8d:6d:67:15:5c:a8:fa:
                    83:60:21:86:b9:42:ff:a7:9e:7f:b4:61:bd:71:36:
                    45:0f:db:8a:47:5c:ff:18:ee:d4:6b:c2:0f:92:97:
                    c6:17:e3:8c:f7:ed:0c:9f:23:5c:22:b5:8f:31:40:
                    43:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:08:08:F0:AA:FE:6D:CB:A6:75:D2:28:34:AB:29:3A:05:F5:B7:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/cfb6983e-4848-36b6-a5e3-eb6247e2218a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl

            X509v3 Authority Key Identifier:
                keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.216.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:40:44:87:c6:52:0b:60:70:50:eb:14:ef:c3:89:90:97:74:
         1e:9d:1d:2e:22:6e:de:4f:32:0c:7f:55:21:d8:70:f6:d8:a2:
         b6:77:46:07:e1:98:de:b7:4c:6e:ad:fb:e7:ec:f3:40:a5:ba:
         e0:23:4f:3d:86:3e:de:1d:de:2d:4b:ce:74:90:0d:5b:e9:e2:
         2a:89:e3:04:35:a1:3f:bb:59:36:44:9a:9f:6e:1e:ab:e3:f9:
         36:40:84:97:6b:f9:2a:b1:15:5e:c0:68:17:30:46:a4:66:dc:
         84:c9:e7:b5:77:44:a5:b7:67:b7:e7:97:0f:4d:75:62:d0:e5:
         67:5f:f2:4b:ba:c3:12:6b:f9:91:eb:66:ca:41:39:89:7e:32:
         28:d6:68:18:6e:60:e5:92:62:75:6d:86:bd:68:3c:d0:5e:f4:
         eb:c8:eb:2c:0b:f4:85:71:67:0b:77:90:18:0d:5a:3a:4e:74:
         02:96:05:5f:cc:54:3b:22:98:00:ab:5e:ea:af:05:12:7b:e0:
         c5:ee:3b:c8:9f:97:69:8d:91:19:3a:82:db:5e:46:07:78:4c:
         72:de:12:73:f7:37:e0:b2:ca:3c:93:89:9f:7c:50:63:d0:e4:
         a7:4f:5f:53:c8:2e:19:2b:83:61:0d:5b:63:5c:b7:cc:24:5d:
         ab:43:f7:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:51:39 2026 by rpki-client