Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4193106-1da6-3b64-83df-cc8029b7fa3d.roa
File:                     b4193106-1da6-3b64-83df-cc8029b7fa3d.roa (raw, json)
Hash identifier:          pThEHIh91e0yXPotod2CVm9FY3LCuvzxwjmPEl1NseM=
Subject key identifier:   4B:F6:D8:4E:84:8A:A4:2D:A1:4D:07:5D:3F:65:B7:F6:C3:7B:72:99
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ECBD1CEA1D2721E27A41DAC80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4193106-1da6-3b64-83df-cc8029b7fa3d.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     396560
IP address blocks:        198.17.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:ce:a1:d2:72:1e:27:a4:1d:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=a68d28e2-2fa7-4355-ac78-f0ff71170f31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e9:f0:f8:8c:f2:fa:30:53:b3:4d:0e:32:a5:
                    94:41:2a:30:2e:e2:1f:59:ef:4f:12:fc:ba:96:35:
                    25:ff:f2:32:33:62:cc:46:78:a2:53:d8:99:e3:e3:
                    19:d3:a9:b2:55:71:7e:31:86:74:71:6b:e7:06:7f:
                    65:b2:fb:13:cb:bc:e9:ca:14:73:27:f2:9a:fc:ad:
                    dc:e4:12:20:8b:32:cf:04:f5:ef:2a:d0:d1:13:be:
                    59:3d:9a:62:37:48:56:59:b9:d1:83:c5:bf:a1:d7:
                    d2:0e:43:a2:75:5f:86:99:62:f4:ab:bc:4b:df:6d:
                    aa:97:c2:0b:31:7e:11:68:91:9e:5b:49:6f:67:28:
                    4f:12:1a:0e:ea:9f:22:53:e0:b1:35:a3:4c:1c:0d:
                    eb:e3:47:24:c9:27:28:d6:ca:87:c5:9f:bc:f7:f3:
                    49:9b:13:94:33:42:45:f3:45:19:27:78:a9:9b:32:
                    f8:01:33:c7:07:c1:06:19:e2:0c:b8:20:33:6d:90:
                    2b:93:9a:ff:3e:c0:4d:b7:cc:e0:37:6f:be:b2:bb:
                    0c:cb:d7:59:9d:ea:84:cf:15:64:9e:d0:11:93:32:
                    30:64:84:25:f4:66:0d:a5:72:51:2c:2a:d2:1d:11:
                    2c:04:97:56:53:1d:4e:6a:81:42:be:e4:e0:ac:8b:
                    32:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F6:D8:4E:84:8A:A4:2D:A1:4D:07:5D:3F:65:B7:F6:C3:7B:72:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4193106-1da6-3b64-83df-cc8029b7fa3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:0a:33:8e:4d:fa:cc:eb:7b:8f:95:fe:96:db:35:28:09:57:
         81:77:98:b6:6d:4b:bf:3e:b6:27:8f:89:50:b7:74:6e:98:cb:
         f8:d7:a4:cb:8d:64:c0:9a:03:10:b9:44:d7:c1:0e:e0:ca:13:
         ea:bd:81:c2:c6:fe:bd:bd:fc:79:fa:4f:6e:f5:84:12:b7:f8:
         88:32:a4:37:f6:50:f7:54:9f:7b:0e:5e:e3:51:35:d5:35:43:
         f3:42:fa:99:db:52:04:e3:b6:da:36:38:6a:a8:63:85:6e:4b:
         3c:51:e1:46:73:10:ec:d8:62:73:1c:ec:cb:96:57:82:33:f1:
         d4:91:11:97:a0:43:b6:3d:0d:8c:13:3e:d4:35:b1:c0:7a:14:
         49:a2:27:d7:b1:d3:fb:e1:24:d7:80:d4:e2:fc:89:4b:18:9b:
         e5:a4:be:14:01:74:d9:d4:a3:eb:b7:4e:3c:26:57:32:61:93:
         db:62:92:c2:7a:ed:92:93:2d:68:ea:30:17:fd:0d:29:7b:0f:
         9b:b9:e7:57:48:66:3b:83:5b:fc:ff:72:ed:2c:aa:5b:07:c0:
         e7:bf:b6:45:fe:9d:94:e2:a1:17:7b:5f:62:1c:dc:87:6d:79:
         e8:b2:f3:4c:05:4d:4b:cc:68:ea:cc:bd:ff:6d:6c:47:c4:f3:
         15:04:08:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 18:45:08 2026 by rpki-client