Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/785e0d9f-5862-3da8-82f6-4d828ad26366.roa
File:                     785e0d9f-5862-3da8-82f6-4d828ad26366.roa (raw, json)
Hash identifier:          xGDSIM+98QnCI3wSkyJjEJjJw+yUUQzE+/MlRqRhV0M=
Subject key identifier:   3A:D6:BC:9B:4D:DB:9C:AF:A1:D5:F6:9D:BC:87:52:F6:05:D2:C0:A6
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D14C8208B6053BD6841F89000
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/785e0d9f-5862-3da8-82f6-4d828ad26366.roa
Signing time:             Fri 06 Mar 2026 18:40:58 +0000
ROA not before:           Fri 06 Mar 2026 18:40:58 +0000
ROA not after:            Thu 04 Jun 2026 17:40:58 +0000
asID:                     16509
IP address blocks:        198.20.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:c8:20:8b:60:53:bd:68:41:f8:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar  6 18:40:58 2026 GMT
            Not After : Jun  4 17:40:58 2026 GMT
        Subject: CN=6b93d0ba-9e01-4e2b-b959-2f33465c6445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0f:48:42:de:56:27:81:d3:56:94:c2:ab:c1:
                    78:c5:10:3d:7c:a5:32:a1:7d:89:94:19:5a:14:bb:
                    5f:93:47:35:a6:0d:c6:25:8e:d7:95:c7:23:0a:a0:
                    44:fd:e2:94:37:b7:98:31:de:70:bd:a6:59:1f:3b:
                    7d:21:0f:f0:86:a7:90:32:33:4f:6e:49:90:6d:d0:
                    0c:af:d3:9e:3f:37:fd:5d:b3:f0:b9:21:67:4b:f3:
                    21:a7:b1:52:03:35:0c:e4:47:2e:8f:12:de:79:9e:
                    26:85:48:fb:ab:72:33:78:78:27:03:b8:2d:34:91:
                    7c:0d:13:1c:c7:c3:10:78:29:c7:aa:e9:5e:d2:80:
                    26:4a:4e:88:37:49:f0:3e:f4:14:18:72:33:35:3f:
                    55:d6:ce:27:2d:e5:09:ca:7f:03:8c:e4:15:c5:40:
                    5f:43:1c:f8:4a:99:19:fb:17:b6:ef:8c:7e:69:e0:
                    a3:91:7a:31:6b:ba:30:fd:8f:8a:04:57:1e:b7:51:
                    ad:67:96:4a:3e:66:2d:63:17:e4:68:c9:8c:c3:69:
                    46:51:a9:ca:05:26:f7:e3:ee:b3:1a:10:3d:5a:b4:
                    ce:58:f7:a8:04:21:f4:4a:03:9e:74:0d:b1:26:0d:
                    6a:65:8e:16:4a:6a:f8:ea:ae:43:4c:41:75:e0:21:
                    07:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:D6:BC:9B:4D:DB:9C:AF:A1:D5:F6:9D:BC:87:52:F6:05:D2:C0:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/785e0d9f-5862-3da8-82f6-4d828ad26366.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.20.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:f5:9c:08:e7:3a:4b:ce:8b:26:29:12:b7:06:b8:24:45:d2:
         1c:bb:80:71:93:9d:bc:0d:15:3b:08:5e:f5:5a:df:6a:4f:90:
         57:a1:93:05:82:f9:d7:c3:1e:75:f5:50:bb:43:cd:72:35:4f:
         bb:c4:c0:a6:49:5d:ef:ed:ea:51:cd:60:b2:13:dc:f8:fd:bb:
         9c:54:dc:27:89:84:28:04:f9:85:44:41:41:36:97:b5:1c:a8:
         da:a8:90:7d:de:d1:34:41:a9:cd:b1:ef:54:31:2c:85:ac:dc:
         6c:d9:86:28:e8:d8:0e:d9:62:a5:fd:d2:b5:d1:99:90:d2:fc:
         2e:80:bf:8a:3e:1a:ae:9c:2d:62:bf:a2:33:b2:48:d7:23:17:
         03:4c:64:37:a5:c2:9f:56:37:ff:1d:5b:a9:0e:a3:55:b1:29:
         b9:33:46:03:9b:52:03:a2:62:2b:77:6e:3f:66:ec:5c:ce:75:
         b2:ac:7b:8a:09:31:3d:59:76:b7:44:11:b7:a1:9f:93:e1:6e:
         c9:6d:83:71:63:84:35:78:45:32:d8:21:c3:aa:a3:57:69:26:
         40:5d:3c:78:11:ee:74:02:e4:23:02:92:9b:1f:e8:d7:3e:56:
         79:ec:4e:16:e6:d8:bc:24:34:73:bb:d4:ee:1a:77:30:b6:c2:
         8a:6d:22:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 12:31:10 2026 by rpki-client