Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c7a06f57-f535-33e3-90e6-e105e1c8ae3d.roa
File:                     c7a06f57-f535-33e3-90e6-e105e1c8ae3d.roa (raw, json)
Hash identifier:          YBDWeDA3K0KQz7tsczMyF0hf9V+vYRT/IQCp4yJOoqE=
Subject key identifier:   62:37:F7:2B:25:12:84:15:65:DF:BB:E4:3F:E8:9E:9C:17:E5:09:72
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ECBD1CDAE6AF7E918662A3380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c7a06f57-f535-33e3-90e6-e105e1c8ae3d.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     396608
IP address blocks:        198.17.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:cd:ae:6a:f7:e9:18:66:2a:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=bdc228cb-057a-4a68-89ef-bf1483ec8fb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f7:00:e6:67:f5:85:d7:bc:b5:db:c2:6e:02:
                    ac:34:6e:e3:06:b8:fc:cc:34:2f:d7:3f:6d:f3:cd:
                    06:fa:0e:c7:ba:4d:cd:1d:85:0d:ec:a6:13:e8:2c:
                    8b:da:b2:02:32:fe:0b:47:d4:2f:41:97:44:61:03:
                    42:ad:20:6c:9b:bd:8e:df:ce:e5:aa:9a:29:5d:a8:
                    57:4d:ee:07:56:d7:9c:04:25:6e:2e:97:d1:32:a7:
                    80:e4:43:6e:32:f1:28:67:12:d3:c2:4b:ab:da:44:
                    c8:14:23:d7:c3:76:36:10:52:41:f5:e4:72:b5:f6:
                    e4:05:62:55:77:0f:55:02:33:cc:47:73:44:8e:4a:
                    cd:8a:24:ee:52:54:c6:fa:84:a6:b2:b9:f0:a9:64:
                    5c:c0:d2:5a:5e:a5:9e:d0:6c:9b:ca:38:c2:9e:e3:
                    f2:0c:bd:0c:d8:4c:36:71:4e:36:7f:74:45:03:4e:
                    c0:c6:b2:09:e9:b0:99:a6:6e:57:ef:d4:e6:0c:2b:
                    4d:17:5a:28:f4:a1:20:60:62:ba:03:eb:a3:b9:fd:
                    a8:ba:4f:04:b0:ec:15:3a:e2:46:ea:16:9b:dd:39:
                    2f:59:f9:46:a7:87:02:fb:2b:a7:80:56:d9:63:75:
                    f9:cc:fe:48:2e:8c:55:74:e5:b7:64:35:39:f8:48:
                    0c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:37:F7:2B:25:12:84:15:65:DF:BB:E4:3F:E8:9E:9C:17:E5:09:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c7a06f57-f535-33e3-90e6-e105e1c8ae3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:3f:f3:d5:c0:5e:71:b5:73:20:7c:3d:49:14:d5:6d:b7:a1:
         49:ba:8f:46:a7:6b:5e:11:63:f8:82:ae:11:39:d3:13:a8:f0:
         4f:87:cd:0f:fd:8a:07:7a:30:38:08:66:d7:5a:2f:fe:dc:e4:
         5f:e6:c8:65:37:a7:30:21:23:db:f4:91:2b:25:0c:a3:b9:c1:
         ab:e7:e8:9d:02:08:48:0b:4f:63:f6:21:38:31:cb:64:cb:46:
         aa:88:04:f7:b4:44:8f:d9:77:fc:9b:9f:01:17:c3:86:e9:de:
         98:6a:78:e1:be:39:1e:96:a2:4c:32:fd:fb:0d:d5:5b:75:1f:
         e3:bc:01:d4:bc:22:b1:03:65:c9:3e:7b:e7:f2:17:8c:5d:8a:
         71:aa:36:c3:32:5e:57:58:bd:e5:83:4b:29:74:3c:a1:2a:c6:
         27:07:9e:9e:32:a9:90:c4:f0:fa:81:17:34:2b:f8:81:49:13:
         6d:1c:81:2d:83:73:39:88:28:3a:1f:af:33:70:b7:0c:33:97:
         ca:ba:ea:fc:a3:74:c7:2b:ae:c3:38:14:2d:7d:a6:48:74:28:
         8c:0c:bc:3d:ea:67:ed:fa:7a:74:ad:0d:a9:dc:fe:4a:6f:a3:
         35:be:54:67:39:8d:8a:70:3e:65:ae:70:6f:7b:d5:b4:6d:6a:
         3e:3f:7d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 19:32:01 2026 by rpki-client