Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/ee9ef05e-8e17-32c3-9a1b-be35525ff814.roa
File:                     ee9ef05e-8e17-32c3-9a1b-be35525ff814.roa (raw, json)
Hash identifier:          gfBZzS/qc2sCHiKfFGMwjS54uX0r7LUrToWQvgQZzVw=
Subject key identifier:   64:BE:93:5C:B6:64:49:FD:C7:AB:61:11:ED:DD:AA:69:21:EA:FD:28
Certificate issuer:       /CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
Certificate serial:       010D0C9F4328584EC371B940A0CFA17EA5414A00
Authority key identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/ee9ef05e-8e17-32c3-9a1b-be35525ff814.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     1403
IP address blocks:        198.16.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:71:b9:40:a0:cf:a1:7e:a5:41:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=618bf1c0-8772-4021-8d82-d384d7f9c17e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ba:50:18:8b:36:19:63:1f:a5:00:5b:aa:cf:
                    77:65:bd:45:a5:f2:30:26:8a:ef:2f:f0:12:df:85:
                    e1:a2:3c:f7:b6:95:7b:b1:51:4c:c9:54:3d:f6:6b:
                    22:c7:73:97:cd:de:7b:da:6f:5d:fa:8a:50:9c:ba:
                    12:99:1c:1a:c8:c2:c1:cd:15:c8:83:3c:64:5b:76:
                    92:c9:f3:4b:5e:d1:9b:2a:bd:fe:71:7d:6a:1f:eb:
                    0d:0d:c9:f6:ab:b4:57:4a:26:41:f3:9c:a5:e5:c1:
                    37:0c:fb:18:8b:c8:9e:32:ce:29:74:ba:fb:00:85:
                    4f:7e:08:65:66:fc:13:2c:e2:b8:5a:4e:4f:d2:84:
                    a8:bd:f9:90:ce:15:da:a1:a8:ce:84:ff:6c:4e:64:
                    2e:d1:6a:6f:54:8e:b9:d1:76:fb:0a:98:d5:ba:fc:
                    f4:7a:ee:11:19:52:fa:f4:55:ff:00:e2:7d:c4:52:
                    54:dc:61:86:51:4a:83:c2:0c:6e:0b:73:fb:bd:31:
                    19:9d:c0:8f:61:ba:ba:1e:d7:65:94:e2:88:8a:80:
                    d6:7d:60:20:0a:3f:af:ed:14:91:9f:f2:ee:1a:35:
                    d9:a7:61:76:c4:d1:fa:2e:a6:46:8e:dc:64:62:d9:
                    ce:ca:f2:d7:bc:93:ff:cc:01:ae:05:f5:ec:a2:c6:
                    e7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:BE:93:5C:B6:64:49:FD:C7:AB:61:11:ED:DD:AA:69:21:EA:FD:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/ee9ef05e-8e17-32c3-9a1b-be35525ff814.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl

            X509v3 Authority Key Identifier:
                keyid:DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.16.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:04:7e:d9:91:ec:19:f4:85:37:92:2e:43:dd:1b:09:13:54:
         14:9f:42:bc:f7:46:ea:90:81:2e:1c:c2:a3:c6:46:99:cc:62:
         4d:10:a4:80:29:62:5d:9b:16:be:b5:8b:72:28:8d:bd:27:b0:
         84:dc:60:df:d6:7c:3e:d4:eb:8f:a6:95:53:1e:dc:0f:c4:bf:
         38:ad:e8:e3:9b:a0:63:0c:90:a1:1f:8e:17:33:62:c5:68:17:
         00:84:69:39:fd:8d:60:f5:ce:5e:c1:c2:73:12:26:34:b0:1a:
         84:4d:3b:54:1c:8a:8c:d1:6a:0b:8a:1e:48:09:83:77:e2:4b:
         90:98:05:6e:54:6a:79:c0:a2:26:70:d4:94:74:b6:f9:68:7a:
         26:28:7f:02:0a:2e:ca:44:9b:c6:85:a0:55:1e:f7:2c:78:2a:
         90:db:8a:84:77:61:05:b9:88:62:a1:bc:a0:2b:ed:ea:7f:71:
         91:d8:45:e2:13:05:eb:e9:1b:2a:84:5b:74:3b:fc:c5:0d:f1:
         16:d8:de:17:1d:01:35:87:d5:7c:66:23:7a:4a:62:a4:83:dc:
         0c:99:3e:57:76:24:bd:f7:49:52:e6:8f:bc:cf:8d:05:76:38:
         0c:3b:4d:ee:d5:0d:c7:03:7b:4a:79:e2:03:ac:6e:1a:24:9e:
         a3:79:4e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 10:58:49 2026 by rpki-client