Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b40fb3c4-5bbd-3165-accd-9e1cde45c85c.roa
File:                     b40fb3c4-5bbd-3165-accd-9e1cde45c85c.roa (raw, json)
Hash identifier:          okifBabRGTu51k1NkGCIwOodIJybiBg6/unAlldZu4E=
Subject key identifier:   DB:79:BE:F3:96:98:24:C2:1F:C1:86:FE:41:2B:A4:0D:49:C4:04:68
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ECBD1CE0412295C0C24EE5580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b40fb3c4-5bbd-3165-accd-9e1cde45c85c.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     397205
IP address blocks:        198.17.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:ce:04:12:29:5c:0c:24:ee:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=a8fa5ff3-23cb-435c-b38d-60aef979b7af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cf:16:17:b2:d4:a9:cb:33:5b:d4:d2:65:ef:
                    f2:45:a4:26:c9:30:1c:d4:06:88:5a:33:7d:db:7b:
                    6e:b7:9e:b0:83:57:10:57:78:69:d4:fe:2b:a0:ab:
                    f7:6b:d3:13:e5:c2:4c:19:ab:a2:a3:f9:6b:88:d2:
                    77:55:40:a9:b3:b7:84:5d:c5:33:af:76:00:d1:a0:
                    40:ae:df:9f:1f:4f:27:5a:66:87:0d:0e:3c:4e:a0:
                    1e:b6:26:ae:4c:34:81:1c:8c:38:23:d1:4c:2c:2d:
                    19:52:bb:c7:4e:0a:a8:69:91:5b:80:c8:8b:b8:23:
                    a1:e0:46:eb:90:d4:da:43:a0:94:f4:1f:da:78:1d:
                    d4:9e:12:ff:20:7d:a9:5a:b5:f6:a1:57:da:4b:b4:
                    d0:ee:7b:52:b9:43:d9:59:7e:7a:ad:ef:39:40:9f:
                    1a:d1:eb:f7:a4:9b:52:76:72:97:45:7c:ed:56:6b:
                    f1:e4:10:0d:f4:6b:16:32:ac:73:45:e4:f2:37:29:
                    76:df:b5:cc:c9:6b:dc:3c:3d:a5:46:b3:fa:90:06:
                    ed:d8:b3:6e:93:4d:e9:8a:95:5c:ea:2d:d0:53:86:
                    34:aa:ae:c9:b0:ea:9f:0c:59:e7:66:fb:db:1c:92:
                    40:05:4c:1a:4a:56:cb:86:48:a2:c9:83:0f:0f:33:
                    bc:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:79:BE:F3:96:98:24:C2:1F:C1:86:FE:41:2B:A4:0D:49:C4:04:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b40fb3c4-5bbd-3165-accd-9e1cde45c85c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:8d:9d:50:f9:15:2b:fb:73:70:8f:37:4b:32:0f:48:43:50:
         11:f0:48:69:0f:44:8b:47:85:d6:33:8a:88:36:f5:27:5f:de:
         41:d2:01:96:26:14:9e:9d:8a:83:61:e0:bc:ec:32:20:ca:42:
         8b:5d:bd:c0:7a:92:02:5a:d7:6a:de:08:17:1d:ee:32:6f:25:
         bc:b7:a1:dc:8e:91:18:0b:32:1f:32:88:e4:21:81:8a:8f:77:
         92:91:c7:61:45:ae:ab:29:c9:9f:71:f9:21:f0:32:52:36:74:
         0e:27:7a:54:18:5d:96:1c:48:6f:ff:f6:c9:59:0a:57:6b:94:
         0b:fa:a7:34:b9:2c:b2:be:85:8f:41:b7:d0:ee:b7:88:54:85:
         25:85:72:6f:a7:17:10:47:0c:a5:cd:14:73:60:62:bb:60:f3:
         81:99:77:aa:c1:7b:70:e7:b2:4c:9c:69:4a:55:49:69:5b:68:
         ab:0c:51:0d:7a:27:6e:83:2d:39:2b:35:01:f6:b4:bc:3e:a2:
         6f:71:2e:04:eb:78:6b:d8:56:65:c7:41:b5:bb:87:0d:89:0c:
         23:c0:28:fe:df:0c:04:65:78:40:2e:0b:a5:65:c0:f6:ad:13:
         d6:4c:d3:a8:e1:90:69:08:78:ec:b2:7a:17:7c:1b:e2:fa:16:
         d2:9e:ad:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 18:43:31 2026 by rpki-client