Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4648e92b-636a-3832-863a-2c8a659263cc.roa
File:                     4648e92b-636a-3832-863a-2c8a659263cc.roa (raw, json)
Hash identifier:          KhlrjbX5cFS1p4gXCERZVYiPXiS2sNNKyQFRD18ckxM=
Subject key identifier:   BB:28:25:1B:DB:30:62:F7:62:10:9E:82:C4:FB:7A:BF:06:4D:1B:7D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E296F1AABF6830009F36D05C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4648e92b-636a-3832-863a-2c8a659263cc.roa
Signing time:             Sat 13 Jun 2026 21:00:12 +0000
ROA not before:           Sat 13 Jun 2026 21:00:12 +0000
ROA not after:            Fri 11 Sep 2026 21:00:12 +0000
asID:                     396584
IP address blocks:        198.17.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:29:6f:1a:ab:f6:83:00:09:f3:6d:05:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 13 21:00:12 2026 GMT
            Not After : Sep 11 21:00:12 2026 GMT
        Subject: CN=fcfc9d3c-43a7-4897-8181-26d1f3b5ae15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4c:3c:1b:04:7e:91:15:0d:27:fc:a0:75:97:
                    e9:2c:37:b6:be:bd:e7:35:22:3d:fa:c9:3e:c4:64:
                    70:e3:4d:a0:7d:9e:31:fe:50:70:73:6d:a6:5b:89:
                    a8:b4:bc:8c:f9:ff:78:74:c9:53:1a:2f:2f:e0:ec:
                    5d:b4:8a:86:94:dc:cf:ea:fb:b7:e9:35:0a:1f:49:
                    21:de:b9:32:e9:8e:2f:63:74:cd:2f:e8:b4:42:85:
                    ca:73:b4:84:01:76:94:c2:24:90:5b:44:a7:1f:a8:
                    c7:17:07:54:71:9b:27:55:dc:00:ba:ef:c9:f2:8b:
                    a3:04:09:af:e2:8c:a2:1f:d2:ba:a0:73:80:9e:a9:
                    bb:96:1d:00:62:28:26:97:68:9e:ff:91:a1:52:c3:
                    27:d6:39:bd:da:94:43:d1:f8:ca:83:fa:72:b0:92:
                    39:ab:e5:16:5e:04:b9:00:b9:14:39:ce:2b:19:cb:
                    6d:54:60:06:3d:58:89:cc:9e:d8:0b:b5:0f:48:12:
                    04:3d:be:46:eb:36:db:e9:12:0b:cc:3b:ba:f8:d8:
                    d7:f4:3e:8e:b8:db:71:a7:49:0f:f8:28:37:21:81:
                    f0:66:af:62:8e:f7:d6:b4:58:9e:28:e7:e2:96:65:
                    47:e9:f9:87:c2:a3:f6:de:a9:96:d6:c9:d1:8a:49:
                    da:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:28:25:1B:DB:30:62:F7:62:10:9E:82:C4:FB:7A:BF:06:4D:1B:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4648e92b-636a-3832-863a-2c8a659263cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:23:1f:59:95:46:3d:a9:5e:6d:b8:49:44:ce:1f:42:fe:93:
         18:96:39:3c:98:bc:a1:e4:03:df:b1:22:38:70:a5:78:21:95:
         90:12:57:ea:98:60:a0:69:27:8e:64:e5:48:5e:26:d8:0e:d6:
         3e:62:27:a3:c1:15:20:7c:1b:84:81:72:00:67:e0:78:0b:19:
         5d:17:b2:20:58:af:f3:de:47:0c:8e:41:f7:4e:bc:83:5e:7b:
         29:bd:44:7c:b3:79:97:31:01:f5:80:64:5b:96:8c:8d:00:46:
         6b:1e:27:2f:16:68:44:07:26:44:c0:2d:09:44:b0:58:44:46:
         d9:48:dc:63:84:17:f0:d4:ec:10:bc:ec:9d:82:37:bc:51:2f:
         27:93:7c:19:f4:8a:6b:7f:48:56:f0:f4:db:03:74:6e:8a:2c:
         4e:f7:93:46:c8:66:cb:aa:7e:e6:21:e3:9b:15:36:86:60:9d:
         42:d6:da:0a:a0:0a:bd:96:13:d0:38:4b:50:f8:3d:10:b6:27:
         07:ee:07:7d:8a:df:85:eb:a5:9e:0b:30:e1:81:32:63:db:40:
         ad:ce:24:d3:2e:30:e8:e4:2d:5d:fd:44:a4:4a:80:98:cb:06:
         c4:cb:9a:53:2f:95:2e:87:18:30:9c:5c:cb:23:a9:c4:46:d1:
         88:11:a7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 19:34:13 2026 by rpki-client