Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8e8f8c7-948e-4994-91f1-b8f02a360f65/6cdd0b4f-ecfe-3af2-8e9f-6a8542b26bc2.roa
File:                     6cdd0b4f-ecfe-3af2-8e9f-6a8542b26bc2.roa (raw, json)
Hash identifier:          0UF5T+GZp6gHyK9HMsr7L6/e1lPT0qHkY2Iioxf7gcM=
Subject key identifier:   1F:A1:8A:2F:B9:24:3D:07:5B:24:AE:09:AD:F5:D6:D8:F0:27:3C:DA
Certificate issuer:       /CN=e8e8f8c7-948e-4994-91f1-b8f02a360f65
Certificate serial:       010D0C9F4328584D63AF9A23DC975C40507DD300
Authority key identifier: 74:D3:07:A4:EC:9B:DB:A4:55:1D:1C:F8:C1:0C:D8:DD:35:7D:5B:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8e8f8c7-948e-4994-91f1-b8f02a360f65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8e8f8c7-948e-4994-91f1-b8f02a360f65/6cdd0b4f-ecfe-3af2-8e9f-6a8542b26bc2.roa
Signing time:             Sat 04 Apr 2026 01:00:25 +0000
ROA not before:           Sat 04 Apr 2026 01:00:25 +0000
ROA not after:            Fri 03 Jul 2026 01:00:25 +0000
asID:                     17008
IP address blocks:        198.135.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8e8f8c7-948e-4994-91f1-b8f02a360f65/e8e8f8c7-948e-4994-91f1-b8f02a360f65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8e8f8c7-948e-4994-91f1-b8f02a360f65/e8e8f8c7-948e-4994-91f1-b8f02a360f65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8e8f8c7-948e-4994-91f1-b8f02a360f65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Apr 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:63:af:9a:23:dc:97:5c:40:50:7d:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8e8f8c7-948e-4994-91f1-b8f02a360f65
        Validity
            Not Before: Apr  4 01:00:25 2026 GMT
            Not After : Jul  3 01:00:25 2026 GMT
        Subject: CN=26e1009e-c813-497c-a20c-0f1e265cfa4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0e:3c:ed:ea:18:f6:f4:81:87:25:7a:13:f9:
                    2d:51:2a:7c:ea:a1:3d:22:ea:b7:55:7a:8c:ac:f2:
                    50:29:c2:91:08:5c:c3:7c:02:2f:19:3c:d5:b3:00:
                    c6:a4:97:f4:04:8c:f1:0f:a9:8e:86:b3:ad:00:97:
                    4f:13:9b:3a:58:cd:27:59:64:38:2e:22:61:16:f6:
                    d8:d1:97:c1:13:46:a6:af:27:d6:0b:37:ef:99:f7:
                    ad:7d:96:2e:e6:46:66:d3:cd:05:8a:d4:59:8c:2f:
                    00:d4:7e:30:26:7c:e0:b7:d5:9e:e9:ab:ce:3f:1f:
                    7a:00:e7:c8:e5:11:fa:7b:f4:3b:08:b4:66:e9:44:
                    ca:25:c8:09:5d:e4:60:c6:07:72:8b:e4:88:dd:df:
                    10:67:e8:ac:cc:73:43:8a:22:c2:f3:e2:28:25:c8:
                    f1:86:df:60:c3:59:2b:8f:fe:93:2f:2e:54:8b:40:
                    e0:ce:e3:f7:a7:8e:6b:ab:51:f5:0c:96:1b:1e:d4:
                    e5:b6:e4:3a:5a:69:04:58:a9:67:9e:ad:9c:1a:d9:
                    12:d3:75:5e:3a:52:ee:86:fd:79:29:ec:ef:e0:b9:
                    58:bc:c0:64:81:c2:86:b4:d3:59:38:9d:fa:13:c6:
                    85:31:f4:28:58:fb:bd:37:63:f3:b4:aa:cd:d4:40:
                    2f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A1:8A:2F:B9:24:3D:07:5B:24:AE:09:AD:F5:D6:D8:F0:27:3C:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8e8f8c7-948e-4994-91f1-b8f02a360f65/6cdd0b4f-ecfe-3af2-8e9f-6a8542b26bc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8e8f8c7-948e-4994-91f1-b8f02a360f65/e8e8f8c7-948e-4994-91f1-b8f02a360f65.crl

            X509v3 Authority Key Identifier:
                keyid:74:D3:07:A4:EC:9B:DB:A4:55:1D:1C:F8:C1:0C:D8:DD:35:7D:5B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8e8f8c7-948e-4994-91f1-b8f02a360f65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.135.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:aa:3c:d0:7b:c4:af:bd:16:83:2f:78:f8:d9:de:14:5b:25:
         d6:43:9f:79:da:9b:fa:03:a0:4f:ac:8c:c2:5f:64:14:17:36:
         f6:c8:65:1b:3d:60:a1:7c:4d:aa:e8:25:a0:13:1d:ca:31:64:
         e5:dd:b2:97:23:b8:63:18:d9:4f:9f:4d:f4:43:a3:92:19:3a:
         5b:3e:62:81:c2:e1:c8:b3:f4:1b:eb:cc:ba:ca:e6:da:24:3b:
         22:47:3b:59:e3:bb:21:77:0c:4a:52:97:1c:00:65:5e:bd:a7:
         dd:09:3e:05:23:c3:5c:7b:63:d3:3d:05:b6:b2:d5:9c:f8:ee:
         2f:7e:89:f4:cd:31:3b:39:e2:35:e6:db:14:a2:f1:15:53:57:
         56:3c:e5:5d:8b:90:4b:df:c0:f5:9f:a6:ea:38:1e:bd:70:f4:
         93:62:d2:5b:92:46:99:27:6a:da:4d:9a:8e:a4:ee:e2:5a:f9:
         91:fc:6a:52:01:61:22:87:e1:5b:55:e6:c2:b6:e3:a9:37:3d:
         a2:74:20:3e:f6:47:19:48:fd:fc:e6:70:82:1d:0b:03:49:85:
         b0:78:c2:c0:7e:69:5b:32:40:7d:6e:5a:79:af:dd:9a:b9:66:
         26:72:6c:72:c5:73:8e:f3:4f:c1:49:c3:2c:2d:63:6e:a5:25:
         ec:73:e0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 19:31:39 2026 by rpki-client