Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a554cc91-a2cc-4a0d-9989-f24a5c18db99/e8844bc8-e9bc-3604-ae4a-f636578cdb46.roa
File:                     e8844bc8-e9bc-3604-ae4a-f636578cdb46.roa (raw, json)
Hash identifier:          qJJtRljLIj8SnKcqZxDNMKaKj6Nu323Hh6elgAv9sDo=
Subject key identifier:   DD:49:14:6D:A6:77:5F:2F:7F:37:B4:41:DD:69:D4:B2:C9:77:C3:9A
Certificate issuer:       /CN=a554cc91-a2cc-4a0d-9989-f24a5c18db99
Certificate serial:       010D0C9F4328584E0436041B98993DFEBDF9C2D0
Authority key identifier: 71:3D:20:E8:7A:89:2A:3D:F5:18:3D:0F:04:20:FC:2C:F0:4C:BE:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a554cc91-a2cc-4a0d-9989-f24a5c18db99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a554cc91-a2cc-4a0d-9989-f24a5c18db99/e8844bc8-e9bc-3604-ae4a-f636578cdb46.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     15296
IP address blocks:        198.161.120.0/24 maxlen: 24
                          198.161.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a554cc91-a2cc-4a0d-9989-f24a5c18db99/a554cc91-a2cc-4a0d-9989-f24a5c18db99.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a554cc91-a2cc-4a0d-9989-f24a5c18db99/a554cc91-a2cc-4a0d-9989-f24a5c18db99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a554cc91-a2cc-4a0d-9989-f24a5c18db99.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:36:04:1b:98:99:3d:fe:bd:f9:c2:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a554cc91-a2cc-4a0d-9989-f24a5c18db99
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=c2d3c5ed-45a2-4c49-8d84-73b128d3f949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2e:f0:41:6b:9d:2a:ad:c7:cd:4b:06:e3:67:
                    68:6e:88:ab:23:3d:b1:25:91:fb:95:e7:04:37:d6:
                    8f:6b:ed:3e:c7:63:4d:e2:cc:91:92:08:4c:b6:20:
                    6f:64:0b:b2:0b:a2:39:f2:d3:ab:ab:a5:04:a7:61:
                    ab:fe:d9:22:0e:5c:ba:db:73:94:0c:61:25:2c:da:
                    bc:3f:16:69:15:56:74:c9:64:5c:22:a2:63:5f:d2:
                    c1:5f:55:3d:62:b2:d6:26:df:59:17:11:fc:8f:25:
                    a8:14:38:e4:6e:7b:e5:af:4e:64:c3:3d:eb:06:5b:
                    f0:b6:69:59:2a:ea:96:01:ff:fb:f8:22:58:17:7a:
                    de:71:cb:18:43:18:8e:2f:43:6e:af:dd:18:14:2d:
                    f4:a2:6a:cc:5a:d7:0f:fd:6a:d9:2c:af:16:c9:42:
                    a9:01:9b:d5:fb:27:ff:5b:d4:93:00:da:42:b0:e0:
                    e9:b1:77:06:5e:f3:4b:95:72:d0:e2:53:48:b5:1c:
                    91:e1:64:8a:be:7c:4f:84:55:43:85:28:11:7f:1b:
                    cb:0a:ea:fb:24:25:b4:11:25:34:98:75:bf:f3:40:
                    f7:7b:c8:ac:e9:86:23:0f:8e:63:dd:c2:81:9e:6f:
                    d4:5a:2d:52:cb:69:cc:63:1b:cf:fe:e9:64:0e:fa:
                    9f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:49:14:6D:A6:77:5F:2F:7F:37:B4:41:DD:69:D4:B2:C9:77:C3:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a554cc91-a2cc-4a0d-9989-f24a5c18db99/e8844bc8-e9bc-3604-ae4a-f636578cdb46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a554cc91-a2cc-4a0d-9989-f24a5c18db99/a554cc91-a2cc-4a0d-9989-f24a5c18db99.crl

            X509v3 Authority Key Identifier:
                keyid:71:3D:20:E8:7A:89:2A:3D:F5:18:3D:0F:04:20:FC:2C:F0:4C:BE:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a554cc91-a2cc-4a0d-9989-f24a5c18db99.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.161.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:8a:f7:e2:cc:f0:2d:15:b7:64:13:13:a3:d9:3b:33:38:42:
         15:85:c2:98:a9:5f:c7:48:75:8f:31:fd:73:7a:66:93:a9:35:
         55:8f:3a:7a:b1:fb:74:00:6c:b0:26:50:bd:f2:86:a1:42:40:
         f4:a9:7f:11:f2:90:1e:9a:81:d6:3c:0f:6e:12:2f:d2:a8:d0:
         b7:7f:4b:ad:21:e7:3d:0e:69:45:9d:be:2b:d1:8f:9e:2d:c2:
         75:69:de:de:35:da:a6:78:88:1f:4e:65:49:f8:38:2d:27:f0:
         5f:5c:90:dd:d3:68:a1:e9:14:3e:9a:f9:93:61:69:81:66:19:
         f5:e4:2d:8f:49:25:1d:fa:da:5b:2e:04:57:1f:23:4c:0c:76:
         f1:f6:2b:da:51:76:0d:21:e0:d9:8b:87:26:f0:2b:90:5f:40:
         62:72:98:6e:dd:ea:44:0c:4e:0f:eb:90:62:7d:f2:e8:a6:e3:
         93:0c:49:d0:36:60:75:b5:ad:c8:b1:9b:11:99:c2:29:08:9d:
         a1:f3:04:66:87:e2:01:ae:59:dd:75:9e:0a:79:20:9a:c3:66:
         64:7a:60:6c:12:2f:98:9d:6f:f0:9d:5c:a7:fc:44:d4:95:34:
         c6:fb:aa:ba:8c:71:05:0a:0b:de:d0:77:0f:e0:63:1d:4c:89:
         60:66:34:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 20:38:55 2026 by rpki-client