Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/afd61a45-4551-3ab1-a3bb-928990ff0f81.roa
File:                     afd61a45-4551-3ab1-a3bb-928990ff0f81.roa (raw, json)
Hash identifier:          YFRDJm+PHb581gs9zqb7+JbW7yI1Nj1tChfB+iGTd70=
Subject key identifier:   B5:0B:6A:4E:5E:AC:03:6C:BD:DE:41:5B:7A:0A:35:E2:17:33:F8:3C
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D905A9FC2BB53C44D9A699A80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/afd61a45-4551-3ab1-a3bb-928990ff0f81.roa
Signing time:             Mon 20 Apr 2026 01:00:24 +0000
ROA not before:           Mon 20 Apr 2026 01:00:24 +0000
ROA not after:            Sun 19 Jul 2026 01:00:24 +0000
asID:                     132892
IP address blocks:        198.41.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:90:5a:9f:c2:bb:53:c4:4d:9a:69:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr 20 01:00:24 2026 GMT
            Not After : Jul 19 01:00:24 2026 GMT
        Subject: CN=b4708837-24af-4b64-969c-70e15bf75cfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:4a:6e:1c:88:85:f3:87:58:5b:0c:3d:8d:cf:
                    8e:9d:4f:78:49:7a:29:40:c6:35:3a:94:2a:de:46:
                    5c:e9:f4:0d:40:42:d9:eb:e5:4c:46:63:55:48:55:
                    62:e6:9b:ed:30:b6:1b:d3:47:37:80:ee:8e:00:94:
                    31:05:b3:dd:ff:f7:5c:67:a5:75:30:bd:4a:c0:88:
                    57:93:29:9b:47:f9:bc:c8:a4:63:bf:69:41:71:de:
                    95:50:83:91:f1:c1:d1:0a:b3:9b:9e:59:7b:31:3e:
                    d0:db:49:6f:1c:0b:f3:4a:74:06:d3:bf:a9:4c:b0:
                    9c:55:0c:9f:6d:19:18:c9:c7:5c:1a:2c:d1:ce:4a:
                    60:b6:33:fd:b5:36:fa:89:93:a8:44:40:9d:73:c2:
                    07:03:01:24:9c:f5:6d:81:81:62:b2:11:78:62:b6:
                    59:3c:4c:e9:56:6e:32:6f:20:32:39:7e:14:3f:49:
                    95:be:85:dd:d5:e2:e7:30:82:28:90:da:62:81:bb:
                    14:46:72:6b:23:35:35:87:72:c5:77:d5:16:7f:79:
                    8d:df:69:94:96:a5:71:16:57:c9:b9:11:78:2c:4c:
                    45:97:0d:a8:7a:ff:86:84:28:58:ad:e4:d3:e1:1f:
                    b7:c9:55:ac:db:34:0c:36:9f:90:26:d1:b1:c7:f6:
                    9a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:0B:6A:4E:5E:AC:03:6C:BD:DE:41:5B:7A:0A:35:E2:17:33:F8:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/afd61a45-4551-3ab1-a3bb-928990ff0f81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:38:c2:f4:d3:c2:0b:da:04:b1:db:7c:38:49:9b:55:83:db:
         14:ec:f6:e9:88:0d:4b:b1:c0:2c:a3:03:74:ed:fc:b9:69:3f:
         16:7f:5d:84:e2:eb:1b:7a:7b:c2:5f:6e:75:05:d4:a5:79:d5:
         ef:6e:95:f7:04:f1:cc:4e:ee:b6:58:de:9a:6c:46:37:c9:8e:
         13:00:a5:47:67:cd:b2:52:73:01:0f:43:31:2c:bf:7e:4e:a0:
         bd:27:f8:ce:4f:ec:1b:79:df:2f:90:47:73:90:b8:4d:ae:b3:
         8f:c3:5a:8a:b6:61:01:f5:55:99:a8:ea:0d:24:ad:4b:fc:b8:
         a8:2e:f7:ae:87:74:02:4c:2f:1c:50:73:8f:63:65:e6:b3:c8:
         7b:83:cd:ea:bd:11:b9:64:cb:e8:ae:0d:cc:da:03:42:e1:49:
         da:33:90:df:e2:31:83:3f:9f:10:4a:75:a3:00:90:74:41:d0:
         cd:36:dc:6b:e3:9f:6c:41:58:00:8f:13:ae:75:d9:5f:59:ba:
         8b:88:d0:f2:9d:86:a7:6d:34:9a:86:08:ff:86:d4:1f:e9:00:
         e8:bc:46:24:05:33:31:7f:ad:18:d5:9e:42:33:06:4c:cc:55:
         17:53:f7:eb:98:d8:1f:0f:75:35:d8:63:c0:b3:4f:56:30:cd:
         05:30:14:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 06:13:09 2026 by rpki-client