Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/2d0f54e8-9bfe-31c2-8db9-01b2bc5038e6.roa
File:                     2d0f54e8-9bfe-31c2-8db9-01b2bc5038e6.roa (raw, json)
Hash identifier:          bBX3h19iYiEM2HgHtXUnWC26VHFanLDjXxPCQroA+yk=
Subject key identifier:   A0:6B:A2:31:05:F4:B2:75:6A:EF:45:11:13:0E:15:33:84:34:F1:80
Certificate issuer:       /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial:       010D0C9F4328584E3A06927C45F8A850DB331040
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/2d0f54e8-9bfe-31c2-8db9-01b2bc5038e6.roa
Signing time:             Fri 19 Jun 2026 19:38:38 +0000
ROA not before:           Fri 19 Jun 2026 19:38:38 +0000
ROA not after:            Thu 17 Sep 2026 19:38:38 +0000
asID:                     31898
IP address blocks:        198.1.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:06:92:7c:45:f8:a8:50:db:33:10:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
        Validity
            Not Before: Jun 19 19:38:38 2026 GMT
            Not After : Sep 17 19:38:38 2026 GMT
        Subject: CN=5d6cb7aa-17e2-4f96-814e-4d248983aa6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a2:e0:b6:c5:53:c9:de:9b:22:4e:33:25:6e:
                    ca:0e:b9:c5:12:de:ad:4e:e2:f7:60:a2:d3:d7:47:
                    62:72:d2:b3:68:d9:89:72:f3:c3:f0:59:00:b7:16:
                    71:e2:9d:b5:30:da:eb:8f:f6:e3:86:90:d9:0f:c7:
                    46:7c:bd:68:55:cb:f0:e2:34:1a:59:cb:5b:70:a3:
                    87:31:92:f5:9c:af:b6:a6:e5:a9:b8:5b:4b:ac:51:
                    e5:e6:a8:96:57:49:d4:12:a0:7f:64:ba:a9:25:8e:
                    37:4b:8a:43:31:67:83:e0:0e:ba:2c:f5:13:e9:1b:
                    5d:1e:e1:cc:7c:5d:c9:58:8a:48:8f:1a:b9:19:2a:
                    49:e8:68:03:aa:63:03:7f:9d:f4:e8:d5:67:3d:05:
                    33:df:64:d0:d1:e8:aa:ee:e1:80:f1:35:80:53:b0:
                    38:44:28:fe:62:21:57:ca:40:29:43:c3:7a:49:e7:
                    e4:3b:19:6f:00:04:6e:25:de:ef:7c:f7:47:73:74:
                    47:c7:9d:92:63:67:3f:9d:e8:a8:05:c2:c1:8f:e4:
                    53:c4:88:df:d8:34:34:0c:5b:c2:38:dc:d0:b4:f6:
                    69:a2:03:42:43:c5:4b:4a:62:60:40:ba:a9:48:63:
                    cd:c9:da:2c:14:0e:b2:e0:aa:dc:e6:a0:96:ed:eb:
                    3b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:6B:A2:31:05:F4:B2:75:6A:EF:45:11:13:0E:15:33:84:34:F1:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/2d0f54e8-9bfe-31c2-8db9-01b2bc5038e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl

            X509v3 Authority Key Identifier:
                keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:e8:76:39:16:a2:f7:c9:23:9a:d8:de:73:8c:cd:dd:38:bf:
         af:2f:27:9e:f7:cc:d9:e5:74:1b:4a:ae:83:5d:6b:6b:61:eb:
         5e:3d:85:e0:d6:be:28:0e:cb:a4:1f:6c:55:e9:04:e1:72:86:
         bb:8e:0b:49:17:cb:30:c0:49:12:33:a8:29:c7:d1:59:33:32:
         50:f5:05:b3:69:2d:1d:08:6d:cb:e4:04:91:0d:eb:97:47:af:
         04:3d:c0:e7:1b:5e:50:e3:76:fd:e0:69:38:1d:66:63:7d:de:
         3f:1c:e7:2a:fe:be:5e:6d:ff:d5:b2:d2:3a:56:8f:26:1a:7d:
         8c:72:af:30:1b:5c:2f:db:e1:33:bb:78:4a:ff:90:08:3b:69:
         99:7c:de:2d:f7:05:5a:ca:cd:ff:3f:d8:6b:a4:73:fb:45:13:
         8a:42:29:b1:90:99:6f:13:cf:98:8d:e5:29:02:c5:f6:12:76:
         fb:ee:b2:8b:9f:ce:43:ae:7f:96:b8:98:30:82:75:32:8a:4d:
         39:64:f5:8c:d1:a3:7c:84:c6:d0:de:93:58:ca:35:8d:90:ca:
         e9:3e:b4:29:d0:35:86:9b:7b:f2:99:31:12:55:1a:e3:cc:77:
         c3:66:90:bb:0b:5a:fe:45:c6:c1:1a:3d:65:cd:b3:46:d4:7e:
         30:a9:87:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:44:36 2026 by rpki-client