Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3681bd83-0e2a-3bcc-83dc-9d604ff63dc2.roa
File:                     3681bd83-0e2a-3bcc-83dc-9d604ff63dc2.roa (raw, json)
Hash identifier:          jKBDKL68/fdrUiWrCD/dOG5NwCbIk4El+JQUsij+Pj4=
Subject key identifier:   9F:9B:B8:5A:4F:A6:F9:81:FF:86:13:BF:AF:D5:55:5C:14:02:F3:A1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E296F15BF0C5849EAF9448880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3681bd83-0e2a-3bcc-83dc-9d604ff63dc2.roa
Signing time:             Sat 13 Jun 2026 21:00:12 +0000
ROA not before:           Sat 13 Jun 2026 21:00:12 +0000
ROA not after:            Fri 11 Sep 2026 21:00:12 +0000
asID:                     396591
IP address blocks:        198.17.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:29:6f:15:bf:0c:58:49:ea:f9:44:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 13 21:00:12 2026 GMT
            Not After : Sep 11 21:00:12 2026 GMT
        Subject: CN=9ed17f69-0285-4ac0-be4a-16e7c087cc5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c8:6b:c3:3d:2d:ea:4a:c0:f4:65:17:99:84:
                    23:c9:92:dd:0d:a6:12:e2:58:29:d5:ad:ad:de:63:
                    05:ea:d9:e1:5e:07:05:b8:cf:81:ba:b8:f7:ba:4e:
                    8c:6c:f5:89:d8:b1:e3:16:03:b0:74:12:05:18:73:
                    72:7a:cc:30:f6:f0:72:bf:08:dd:be:b0:e5:72:66:
                    78:86:61:b7:78:ed:58:bc:98:4f:20:43:c9:82:70:
                    4d:f1:11:c6:4a:60:c9:9d:d9:0a:42:2c:55:19:10:
                    1e:de:60:c0:29:b5:7c:5c:f3:28:ec:8c:8c:42:e7:
                    4d:f5:d7:4b:de:c3:ad:0c:10:55:e6:a6:71:ab:e7:
                    03:2b:b8:15:a5:b0:ae:9f:2d:ae:74:94:c0:ee:e2:
                    bb:e2:37:3a:c2:75:35:b4:63:4c:f9:1a:ec:07:4f:
                    6b:c0:f6:76:05:e8:8d:bf:07:89:1d:ab:7f:32:2b:
                    df:f5:e9:52:7a:21:e0:ca:e1:72:66:ad:2b:04:b3:
                    67:7c:46:f0:69:f3:66:75:ba:d4:de:d8:e6:69:ca:
                    7b:98:e3:ee:0e:06:a0:3a:47:56:a3:2f:f0:84:45:
                    95:2b:d9:a2:99:70:2b:40:08:b1:fa:b7:e4:9a:b8:
                    45:ed:28:ed:ed:0e:11:84:a2:58:71:4a:c2:6d:fe:
                    9c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:9B:B8:5A:4F:A6:F9:81:FF:86:13:BF:AF:D5:55:5C:14:02:F3:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3681bd83-0e2a-3bcc-83dc-9d604ff63dc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:a5:ac:3e:78:84:46:fc:5e:c2:94:83:58:e7:77:d6:78:77:
         ae:a2:6d:b6:fd:2b:a4:d5:41:90:57:5b:e4:8b:69:d9:a3:d3:
         3d:5f:e6:6f:77:75:92:34:ea:de:b3:c4:0d:7c:a4:d3:21:41:
         d6:97:86:55:9f:9e:12:15:2f:c9:de:1f:6f:1b:3f:23:46:b8:
         cd:eb:83:81:12:e3:a6:1d:c1:9f:27:4c:ff:94:ce:6a:2f:56:
         68:b3:c0:96:cf:40:15:a0:d6:cb:2a:1c:56:3e:96:c7:b4:9c:
         9c:68:ee:a3:e4:11:fb:6b:4b:36:41:4a:74:7a:cb:2b:3d:a9:
         21:79:a2:bb:41:4b:07:d5:df:40:09:52:a5:4e:c0:48:03:e8:
         fe:b4:9b:f7:ba:9c:10:3d:2d:3f:94:ed:ed:53:ba:fd:05:31:
         04:b7:d8:04:6f:fd:a9:a6:ff:a5:44:6a:2b:25:59:cd:b7:48:
         0c:13:bc:03:cb:77:1e:58:63:1e:7b:db:96:db:be:fc:5f:e0:
         fc:03:a4:cb:d6:37:f0:d6:ac:e3:3c:b3:76:85:cf:86:b3:16:
         11:65:05:d3:b3:cc:69:6a:58:e5:ec:fc:66:b1:4e:5d:59:c2:
         d8:ef:39:ed:7c:4d:63:a2:46:d5:d6:d7:aa:2f:5f:b3:b6:9c:
         8c:e8:81:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 20:37:12 2026 by rpki-client