Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65321976-3d8b-37dd-9b26-10fa0c24c2c2.roa
File:                     65321976-3d8b-37dd-9b26-10fa0c24c2c2.roa (raw, json)
Hash identifier:          Q3JLjhFMihFDKoqfv62mPVI8tAdD6vSpbcwIqr8UZ2k=
Subject key identifier:   44:3D:E7:DA:8F:06:07:0B:89:9B:E0:79:40:02:4F:21:54:AF:DE:E6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ECBD1BEE8BA96B6BC151A6B80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65321976-3d8b-37dd-9b26-10fa0c24c2c2.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     397210
IP address blocks:        198.17.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:be:e8:ba:96:b6:bc:15:1a:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=19fa30dd-4653-401e-aa37-5aa420961a3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:27:7c:7a:bc:39:59:f1:58:17:43:cc:81:da:
                    4b:96:a6:92:71:bd:cd:56:00:ab:44:6a:d0:56:58:
                    5f:39:db:49:fe:ed:1e:a0:74:ee:d8:c3:04:57:fd:
                    34:d1:86:1c:c7:8f:c3:fc:db:44:0d:94:a1:c0:65:
                    ca:c8:a0:0c:ad:1c:f0:00:63:cd:d3:51:99:c5:1f:
                    1d:8b:21:7c:52:ae:e0:b7:a4:3f:c9:5f:f8:66:bd:
                    46:3c:5f:b8:9d:22:f8:cf:fc:28:75:bd:c7:aa:76:
                    7c:46:c4:97:a3:70:b6:88:5c:89:44:03:1d:d9:df:
                    a2:56:c9:07:f6:12:2e:8a:c7:02:40:0c:19:f7:f8:
                    14:5a:b4:88:ef:dc:2e:9c:ec:90:4f:6a:4f:16:d1:
                    f7:3a:8d:f3:b8:78:8e:6b:59:58:94:9d:d9:3f:9d:
                    1e:ed:39:34:79:9a:8f:ec:34:95:85:ac:b1:7f:c6:
                    49:6a:e5:ba:7a:1d:17:4b:c0:ec:96:ed:30:6c:1c:
                    18:d3:4e:25:c4:fc:8f:19:9c:09:90:7c:54:fd:b6:
                    0b:d2:f5:c1:62:6f:b9:b4:d9:1c:52:eb:fd:55:28:
                    88:b4:4a:3b:af:72:07:ad:f2:e9:31:53:81:16:d0:
                    b6:4b:24:a8:02:cf:fc:e1:c3:13:54:99:64:a6:07:
                    ef:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:3D:E7:DA:8F:06:07:0B:89:9B:E0:79:40:02:4F:21:54:AF:DE:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65321976-3d8b-37dd-9b26-10fa0c24c2c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:15:37:ed:55:81:72:9d:9b:b0:99:6b:a2:7c:e6:70:3a:68:
         db:82:6a:24:73:81:fc:c2:56:77:81:95:e8:82:47:54:5b:0f:
         97:0e:6d:34:27:17:f4:b3:2b:aa:ac:78:43:e8:47:d8:18:45:
         9e:a2:9d:6a:33:c0:8b:ff:bd:e4:19:5e:75:f8:39:8d:aa:da:
         27:f3:fc:38:9e:2d:39:37:3e:06:29:c7:87:1e:e1:ba:fd:a3:
         30:96:d3:02:cf:b6:54:89:7b:2d:b9:8e:bd:bc:9b:11:34:a6:
         1a:88:81:aa:37:9d:bc:73:97:5c:c5:f3:8b:ab:b0:6e:94:15:
         ba:c8:2a:d6:d5:c0:1c:d4:e9:98:7c:39:09:f4:2a:d5:76:56:
         0e:01:37:04:5f:20:0b:c8:84:c5:55:e4:f9:af:5b:f1:6a:d5:
         2a:ec:ef:29:8b:bf:e1:a9:20:f1:eb:7a:2e:28:05:54:12:45:
         ac:b9:a1:90:ed:24:17:f2:5b:fd:d2:f1:e7:43:85:44:df:ee:
         ee:96:bc:5e:15:b3:f9:fe:75:e1:84:3a:fd:47:22:c8:e1:46:
         17:61:96:5e:12:4c:dc:9f:68:8d:71:6a:c5:e2:21:89:9a:23:
         21:aa:bd:39:10:f7:83:e7:1b:d1:8e:93:00:cc:22:ae:9d:3c:
         27:97:73:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:21:33 2026 by rpki-client