Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/168df6ac-cd94-35be-a921-e7419c996b7b.roa
File:                     168df6ac-cd94-35be-a921-e7419c996b7b.roa (raw, json)
Hash identifier:          B7n5rDP6RamUc2IJghAg1UGDOteRLAi4jbAKbAQ9d1I=
Subject key identifier:   8F:DF:4F:DF:2E:93:20:A0:E0:8A:C7:A4:21:EB:56:BF:1E:8E:A0:37
Certificate issuer:       /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial:       010D0C9F4328584E3A0641B7F96FA3632E3A3BB0
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/168df6ac-cd94-35be-a921-e7419c996b7b.roa
Signing time:             Fri 19 Jun 2026 19:38:00 +0000
ROA not before:           Fri 19 Jun 2026 19:38:00 +0000
ROA not after:            Thu 17 Sep 2026 19:38:00 +0000
asID:                     198949
IP address blocks:        198.1.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:06:41:b7:f9:6f:a3:63:2e:3a:3b:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
        Validity
            Not Before: Jun 19 19:38:00 2026 GMT
            Not After : Sep 17 19:38:00 2026 GMT
        Subject: CN=31fcf79f-2f54-4ed9-a978-32368c43b178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c6:74:72:b7:ff:3a:f9:85:c8:99:af:78:e4:
                    1a:1b:1d:68:97:71:98:6e:4a:6d:83:4e:57:83:51:
                    56:42:72:24:53:c5:2a:fa:e5:a0:58:2b:4c:cf:62:
                    4f:7f:40:17:95:18:69:f4:f3:d6:11:83:fb:cd:b6:
                    41:62:a8:84:ab:f7:6c:09:1b:ca:aa:cb:6d:10:0c:
                    30:85:cc:f1:e9:a4:01:76:62:fa:c5:24:e6:b3:27:
                    ae:b6:42:03:3d:ca:47:ef:67:b6:3d:f2:cb:5b:93:
                    46:63:e1:d6:50:e4:ae:43:0a:c0:c2:98:67:18:a2:
                    fc:f0:ea:80:96:e4:2c:24:79:ce:14:bc:ff:43:33:
                    94:6d:70:aa:3d:e4:52:97:9d:a2:1c:89:20:bf:39:
                    9b:3a:c1:ac:d7:89:42:1c:0a:6e:8f:61:e6:7d:9e:
                    0b:20:11:17:5e:f8:4b:fe:39:72:7e:0c:37:a6:35:
                    1b:60:ca:16:c1:5b:cf:fc:63:80:d1:1d:78:33:8f:
                    88:6c:20:a0:5d:a6:58:d1:de:3f:21:69:b1:83:5e:
                    a4:25:1d:f4:80:98:35:4b:d5:5e:96:d0:ec:62:1a:
                    f9:95:42:48:85:aa:78:0f:27:c9:79:f4:22:c8:b0:
                    f0:53:9f:1f:b7:f1:f8:90:6e:18:b0:b7:46:31:eb:
                    58:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:DF:4F:DF:2E:93:20:A0:E0:8A:C7:A4:21:EB:56:BF:1E:8E:A0:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/168df6ac-cd94-35be-a921-e7419c996b7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl

            X509v3 Authority Key Identifier:
                keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:6b:6d:58:ed:99:28:ad:2b:57:aa:50:a0:e7:e7:5a:95:99:
         b0:11:05:54:d5:60:d5:36:9c:33:19:c6:35:c3:54:5e:33:ae:
         6f:21:50:b0:42:3d:1f:f5:c8:89:17:b6:5a:61:70:f6:fa:9e:
         cb:c9:df:d8:cb:a7:22:66:a5:a7:ec:37:8b:af:9f:5b:e1:ba:
         29:fe:8d:2c:fc:5d:a5:34:ae:03:00:bd:3c:c4:72:e9:06:c4:
         8c:a7:c2:c3:92:e9:7c:4a:4d:e7:95:32:63:02:ee:59:d4:bd:
         82:1a:d3:c9:fb:3f:f8:64:37:65:98:a5:ff:89:b9:61:e3:ad:
         e7:1e:3f:de:e9:33:12:3a:8e:f1:86:fc:2d:ab:bd:65:fc:d9:
         68:b5:b6:4c:0b:10:85:b3:7e:76:e1:ae:a1:24:6d:22:c2:ba:
         d2:3b:21:53:d4:80:e0:54:f3:ec:0e:7c:9a:58:32:02:25:8a:
         bc:0d:81:e7:4c:c4:7f:cf:30:bf:35:d0:b9:ad:d2:bb:f4:b0:
         55:67:1a:21:23:e5:68:d0:4c:b4:05:ed:3a:d0:ff:a2:2c:12:
         22:23:b4:e7:fb:46:01:c4:2b:cf:84:d6:ed:d6:dd:ae:5a:97:
         66:d3:4b:53:95:5d:40:86:19:2b:ef:37:fa:31:a0:06:82:31:
         11:c0:03:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:19:35 2026 by rpki-client