Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/67816620-6420-36e7-9bae-26d3f3b19c5e.roa
File:                     67816620-6420-36e7-9bae-26d3f3b19c5e.roa (raw, json)
Hash identifier:          fBvi21UbmZxMXnwysVUEAcFtEv/uyPetUnAqEHJQjGc=
Subject key identifier:   DA:7F:75:90:5D:1B:B5:98:CE:C8:6C:85:16:7B:96:D1:F4:7B:4C:AA
Certificate issuer:       /CN=7496889c-61af-4c61-8157-4b7f2fde690d
Certificate serial:       010D0C9F4328584D60E50612D1F895CE7E8DA700
Authority key identifier: 59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/67816620-6420-36e7-9bae-26d3f3b19c5e.roa
Signing time:             Fri 03 Apr 2026 01:00:24 +0000
ROA not before:           Fri 03 Apr 2026 01:00:24 +0000
ROA not after:            Thu 02 Jul 2026 01:00:24 +0000
asID:                     611
IP address blocks:        198.164.29.0/24 maxlen: 24
                          198.164.44.0/24 maxlen: 24
                          198.164.47.0/24 maxlen: 24
                          198.164.119.0/24 maxlen: 24
                          198.164.120.0/24 maxlen: 24
                          198.164.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:e5:06:12:d1:f8:95:ce:7e:8d:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7496889c-61af-4c61-8157-4b7f2fde690d
        Validity
            Not Before: Apr  3 01:00:24 2026 GMT
            Not After : Jul  2 01:00:24 2026 GMT
        Subject: CN=3007a30f-dd54-4170-8561-cf5dc6be3989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3a:15:5c:e1:2f:8a:dc:76:d4:a4:9d:e7:e5:
                    ca:d8:9a:80:e5:a6:24:53:ad:fc:9f:66:79:09:f3:
                    c0:9d:4b:57:89:14:0f:8c:e1:c2:20:f3:36:43:bd:
                    6f:de:16:5d:7c:ab:96:77:9b:4e:15:51:c7:94:f2:
                    ae:a6:28:66:8e:9a:cf:2c:09:8b:9c:d5:6f:97:b3:
                    94:b9:65:c0:37:54:41:e7:4f:97:be:09:1b:78:c3:
                    21:b4:32:36:fb:68:2b:0d:b0:bd:4a:49:46:5c:82:
                    58:a5:45:b6:fe:d2:35:5b:84:53:41:fe:a8:5b:55:
                    a2:c9:1a:e7:1e:3e:28:15:b0:30:6e:cb:c0:ed:78:
                    d2:1b:df:37:5c:3f:4a:3f:fe:7b:02:a3:94:24:b6:
                    b5:7d:e7:c3:ed:27:68:7a:92:4d:c9:9f:1c:a3:44:
                    a7:3b:e1:f4:56:2f:07:3a:6d:72:cc:21:94:e0:e6:
                    ef:61:a8:cc:93:f6:fd:64:ce:d3:07:3c:21:66:af:
                    cb:ed:2a:b3:1f:08:d0:3b:b6:75:1c:41:0d:6f:40:
                    ab:b7:a1:91:82:77:80:9b:84:36:f3:c6:c1:f7:a6:
                    24:10:67:52:db:04:33:b6:2d:3d:64:0c:0a:d8:e7:
                    d2:9f:45:d3:9a:54:4b:0e:f9:bf:ef:51:79:80:88:
                    6b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:7F:75:90:5D:1B:B5:98:CE:C8:6C:85:16:7B:96:D1:F4:7B:4C:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/67816620-6420-36e7-9bae-26d3f3b19c5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl

            X509v3 Authority Key Identifier:
                keyid:59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.164.29.0/24
                  198.164.44.0/24
                  198.164.47.0/24
                  198.164.119.0-198.164.120.255
                  198.164.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:cf:bb:8e:ab:4c:93:ff:20:b2:2c:ba:92:07:1a:79:41:75:
         11:bc:97:61:b7:60:46:35:c4:91:bd:23:b8:b1:36:d5:f8:13:
         88:2d:9d:3f:a4:6f:e2:0a:02:6d:36:64:ee:52:06:e4:23:63:
         24:0a:13:8a:21:73:64:f7:71:b0:63:1c:d6:0c:80:fd:11:27:
         6b:7b:d6:22:9d:5b:86:34:c8:5c:60:fc:28:9b:20:ca:9c:a3:
         c0:5a:ec:6b:61:6d:3e:78:41:0e:2f:77:13:3d:d0:63:7a:4f:
         2a:71:3e:58:4e:03:5e:fe:cc:ca:42:b4:42:21:4c:fa:dc:e9:
         c7:66:73:a5:39:e3:37:8c:8e:46:52:12:f6:86:0e:b8:fc:e9:
         41:eb:45:5d:cc:15:e4:5d:dc:a1:5e:68:e7:50:34:d7:0f:ae:
         bb:9c:1d:b6:e4:76:27:64:ee:a9:25:37:e1:49:35:5b:d3:13:
         4d:52:cc:58:1b:18:02:f3:95:68:af:dc:44:d5:10:b7:44:79:
         9a:5f:42:ec:f4:19:cc:ed:14:ef:f2:9a:af:a7:06:80:35:a1:
         e7:41:b4:3b:7b:f4:73:9e:53:d8:86:4d:b0:b7:6c:51:e0:f6:
         23:07:2d:06:4b:a5:4a:ff:91:fe:23:81:cf:89:58:cc:8b:54:
         6b:62:89:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 11:37:47 2026 by rpki-client