Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/96bd39ad-279b-3a41-8e9b-207af3af6a5d.roa
File:                     96bd39ad-279b-3a41-8e9b-207af3af6a5d.roa (raw, json)
Hash identifier:          i1h5kmPXE7DCuaVQr8HP0xKp7ktBkwttb4AeXNFhCcc=
Subject key identifier:   E2:ED:2E:6B:53:8E:76:8D:62:43:63:D3:F0:47:88:8D:E6:30:11:2B
Certificate issuer:       /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial:       010D0C9F4328584E8C8A4195A3348DEEF46FB220
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/96bd39ad-279b-3a41-8e9b-207af3af6a5d.roa
Signing time:             Sun 19 Jul 2026 09:00:11 +0000
ROA not before:           Sun 19 Jul 2026 09:00:11 +0000
ROA not after:            Sat 17 Oct 2026 09:00:11 +0000
asID:                     35758
IP address blocks:        216.158.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8c:8a:41:95:a3:34:8d:ee:f4:6f:b2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
        Validity
            Not Before: Jul 19 09:00:11 2026 GMT
            Not After : Oct 17 09:00:11 2026 GMT
        Subject: CN=1e37c31b-8dfd-4c7c-8af0-c889054e9985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8a:49:58:76:db:5b:bf:e5:b7:f3:0b:c8:2d:
                    7a:53:18:29:6b:f1:61:3a:47:ef:2a:7b:6f:e8:69:
                    6b:17:92:92:13:88:c9:e4:a9:2d:2a:02:1e:cb:41:
                    18:f0:48:ca:36:e1:93:e5:10:7f:3d:da:a8:0a:6f:
                    e3:48:2b:74:19:5b:aa:90:a4:f9:b7:4c:45:be:0b:
                    bc:df:54:3b:bd:6d:75:0a:dd:fa:7d:49:70:ae:98:
                    07:81:20:5f:4b:98:1d:05:cb:dc:ef:92:53:73:3e:
                    dd:11:de:1e:18:99:ca:57:1f:1f:08:a1:59:71:d8:
                    e7:bc:3f:69:e7:73:02:84:74:bc:a3:0e:74:e4:01:
                    34:59:45:69:68:69:bc:82:fe:e5:43:31:13:e1:11:
                    69:61:76:6d:e1:e9:70:4f:fa:fd:d7:86:70:16:cf:
                    36:05:17:78:27:86:51:b6:df:6b:68:e5:fa:a7:f8:
                    ca:15:3a:0a:52:4a:69:a7:e6:b4:f9:1d:83:6e:ae:
                    b9:df:a0:b4:07:bb:61:30:97:53:ea:ef:fe:8e:3a:
                    1a:24:d9:2c:34:a5:8c:67:91:33:f3:a8:77:4f:33:
                    ef:0f:d2:64:01:97:71:50:cd:cd:26:30:72:00:0f:
                    ac:02:83:d5:bc:7e:c8:25:67:65:44:6f:ed:38:65:
                    87:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:ED:2E:6B:53:8E:76:8D:62:43:63:D3:F0:47:88:8D:E6:30:11:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/96bd39ad-279b-3a41-8e9b-207af3af6a5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.158.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:ba:af:ee:79:ee:15:0f:88:14:ca:3a:4f:35:3c:a3:1a:5c:
         0d:2c:4e:2e:29:d3:a6:3d:4d:80:8c:48:07:a7:e1:2e:a9:c4:
         8c:87:52:15:0f:5c:a1:95:27:cd:bb:37:1c:38:21:40:39:71:
         26:46:7d:b4:72:73:75:a4:d6:0b:54:ed:79:b0:c1:99:47:48:
         e6:f9:fc:d2:03:25:7d:52:df:96:01:47:d7:09:e8:ff:84:bc:
         68:74:05:da:ec:bc:cb:d1:a9:b5:45:f0:b9:0f:ab:7a:a9:00:
         fa:aa:77:48:e3:d8:ad:48:73:4d:03:90:a7:66:b0:17:be:f3:
         2c:97:7a:b0:93:7b:78:ae:a9:a4:04:7e:f5:d9:cd:78:bf:13:
         20:d1:bc:89:a3:60:ed:e3:b2:61:b3:7c:46:28:87:a8:a5:21:
         d0:f5:4b:67:f5:75:52:19:dd:ec:e6:61:71:d8:e8:37:92:6d:
         f8:68:a1:67:c0:58:92:cd:3f:76:cb:85:23:3f:61:28:fa:98:
         64:58:89:32:e4:cd:d2:ed:4c:4c:63:e6:70:7c:02:b8:d0:90:
         87:2e:26:a6:f0:49:05:01:9f:cb:e0:1a:5c:79:b6:2f:12:27:
         15:c3:1f:60:22:ae:55:83:a5:b6:8d:f4:76:a2:9b:56:d3:81:
         9b:3f:c3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 00:19:51 2026 by rpki-client