Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6aac013f-1398-3ea0-811a-33991cd19bcd.roa
File:                     6aac013f-1398-3ea0-811a-33991cd19bcd.roa (raw, json)
Hash identifier:          1gU/d/gtcaoqsTUvq6dQrqo/zIt4+1YqTVGYkYmvdBg=
Subject key identifier:   72:9B:D2:41:1D:B8:E8:46:C7:4E:27:28:D9:1F:6C:2D:E6:09:F4:B3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E296EFEFF43A5E101B8369D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6aac013f-1398-3ea0-811a-33991cd19bcd.roa
Signing time:             Sat 13 Jun 2026 21:00:12 +0000
ROA not before:           Sat 13 Jun 2026 21:00:12 +0000
ROA not after:            Fri 11 Sep 2026 21:00:12 +0000
asID:                     22547
IP address blocks:        198.17.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:29:6e:fe:ff:43:a5:e1:01:b8:36:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 13 21:00:12 2026 GMT
            Not After : Sep 11 21:00:12 2026 GMT
        Subject: CN=ef11d55a-a9c9-4c49-91cc-00b8bb80b65d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:4c:88:bb:bd:d2:91:2b:4f:f5:61:83:e2:5a:
                    7d:24:23:be:5e:cb:83:31:b8:82:e1:0c:fe:ff:97:
                    c8:6a:27:eb:8b:95:3b:58:08:1d:bd:6a:e5:f6:9b:
                    0b:6a:2d:7c:55:eb:b9:0b:ce:28:6e:3b:1b:40:30:
                    10:17:02:ce:d5:54:3b:78:6d:62:e4:ba:be:1c:f9:
                    01:99:e1:92:ca:16:82:38:f6:85:9c:bc:74:4d:26:
                    50:cf:4b:ac:7c:e2:6b:c8:c5:65:08:7a:f0:13:04:
                    28:90:99:ee:2a:7f:2a:36:52:3b:c3:cc:2c:88:92:
                    95:27:b9:53:de:cc:95:eb:74:cb:98:25:3d:19:6a:
                    1c:6e:b0:99:57:40:a2:30:b3:12:5c:0b:f8:8a:fc:
                    6c:2a:8a:90:d0:88:f0:27:c4:1e:31:19:15:78:b0:
                    31:87:25:28:43:21:3a:fb:e9:84:49:7b:db:c0:5c:
                    9a:38:2d:e1:62:a2:30:eb:54:a6:76:a6:ca:63:ff:
                    15:d1:da:b4:a5:e1:d9:24:5b:ed:fe:cc:a8:38:45:
                    c5:69:84:30:fa:43:1a:67:e2:3b:4b:b0:14:26:90:
                    07:9f:f0:c9:6a:db:d6:0f:69:91:0c:8c:2a:52:43:
                    24:2b:0b:ae:32:7f:3d:48:36:c7:8f:a1:24:f3:91:
                    58:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:9B:D2:41:1D:B8:E8:46:C7:4E:27:28:D9:1F:6C:2D:E6:09:F4:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6aac013f-1398-3ea0-811a-33991cd19bcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:66:1f:ea:e7:df:67:cc:7f:fc:d0:d5:95:8f:cf:52:c8:a7:
         03:fb:e6:41:d6:75:b0:22:03:49:b3:99:43:47:75:2a:29:74:
         c3:85:9c:8a:64:db:e3:1f:af:70:4b:0e:51:aa:81:c6:89:7e:
         32:f5:e5:fc:71:86:7a:94:56:e8:a7:58:38:9a:de:65:05:19:
         f2:f4:f2:d0:77:aa:3a:a7:2c:e0:78:65:b7:ef:71:ee:6a:85:
         b2:b1:d2:4c:0d:ae:0c:de:e8:8b:92:32:65:00:1a:b0:81:d6:
         56:de:ae:99:7c:ed:78:d6:44:42:6a:f5:62:06:eb:76:f3:0c:
         e3:54:5e:01:0b:e7:29:80:ff:62:85:6b:59:cc:22:ee:bf:ff:
         b0:6b:55:fb:45:cb:1b:45:b6:1d:3a:c4:a4:fa:34:fd:2a:ed:
         78:9d:7d:71:1c:6a:78:4a:67:17:3c:0d:58:40:fc:89:fe:cb:
         37:11:aa:ed:eb:47:63:a5:20:91:dc:a5:57:92:13:bd:6a:b6:
         87:58:94:bd:d0:7f:a9:cf:24:7e:ce:b2:62:e5:d6:e5:26:de:
         5e:c6:0c:d8:12:2c:79:7b:fa:8f:14:9c:82:d1:c5:06:42:c0:
         f0:15:f1:04:fd:c6:94:32:e9:06:21:64:a9:3c:47:0b:fc:01:
         47:2c:ea:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 19:38:16 2026 by rpki-client