Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75f09b45-a279-4225-8dba-d5661fbb05fc/cfbd3432-30af-35a7-94c7-2bacdd2fc029.roa
File:                     cfbd3432-30af-35a7-94c7-2bacdd2fc029.roa (raw, json)
Hash identifier:          htZw02gwUMBDysiC7Z33vLBHnrKFiXlw3hAEfXiEy8g=
Subject key identifier:   15:76:46:57:65:25:6A:B7:B0:CB:62:8C:B3:A9:86:C2:15:50:D1:47
Certificate issuer:       /CN=75f09b45-a279-4225-8dba-d5661fbb05fc
Certificate serial:       010D0C9F4328584E7204C1E82E1190CEF69A6280
Authority key identifier: 37:FF:1E:51:27:EA:A2:96:1E:37:9A:7C:F1:F7:60:5F:21:84:A1:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75f09b45-a279-4225-8dba-d5661fbb05fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75f09b45-a279-4225-8dba-d5661fbb05fc/cfbd3432-30af-35a7-94c7-2bacdd2fc029.roa
Signing time:             Thu 09 Jul 2026 21:00:11 +0000
ROA not before:           Thu 09 Jul 2026 21:00:11 +0000
ROA not after:            Wed 07 Oct 2026 21:00:11 +0000
asID:                     29802
IP address blocks:        198.89.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75f09b45-a279-4225-8dba-d5661fbb05fc/75f09b45-a279-4225-8dba-d5661fbb05fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75f09b45-a279-4225-8dba-d5661fbb05fc/75f09b45-a279-4225-8dba-d5661fbb05fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75f09b45-a279-4225-8dba-d5661fbb05fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:72:04:c1:e8:2e:11:90:ce:f6:9a:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75f09b45-a279-4225-8dba-d5661fbb05fc
        Validity
            Not Before: Jul  9 21:00:11 2026 GMT
            Not After : Oct  7 21:00:11 2026 GMT
        Subject: CN=b60bea66-de55-4cbe-9aff-315d0e71216b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ac:58:31:3b:e6:f3:db:61:c9:2a:ab:d3:20:
                    19:04:fc:9b:25:5b:55:7d:11:c0:80:31:61:3a:81:
                    68:a6:d1:90:c0:4d:db:27:c7:80:85:35:d8:03:eb:
                    e2:f4:bb:e2:d2:2d:91:1c:be:05:f9:be:65:07:84:
                    72:33:1a:b6:e4:4b:67:a8:32:e9:9f:1b:53:53:2b:
                    77:75:db:c9:21:f3:2d:71:f6:3e:fe:e9:92:d3:cd:
                    19:e2:3b:9a:d3:33:85:48:b0:9c:25:83:ac:2a:1e:
                    ea:fa:f2:70:60:35:0d:c9:94:48:13:04:3c:71:bf:
                    3b:02:5c:57:72:b1:b9:86:8b:45:18:76:f2:e3:3a:
                    8e:78:0a:6a:ec:0d:64:e5:55:0d:1f:7c:4c:c6:2d:
                    12:a5:fc:c7:ee:3e:79:24:4b:76:62:a5:24:a1:92:
                    ef:83:81:0e:c2:25:bc:05:d7:71:79:08:d1:29:7e:
                    22:af:46:63:c8:69:f0:97:90:f5:87:bc:a9:93:dc:
                    9a:8b:ef:58:ce:a7:c8:39:3c:11:1d:4c:1e:47:61:
                    77:7f:f5:71:95:51:11:7c:c9:2b:c0:13:cc:07:80:
                    81:c7:f8:0e:bd:b4:5a:13:aa:f5:6b:2c:25:6a:4f:
                    9b:bc:02:a5:5c:6b:c9:0f:3f:ab:c0:ed:48:55:5b:
                    33:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:76:46:57:65:25:6A:B7:B0:CB:62:8C:B3:A9:86:C2:15:50:D1:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75f09b45-a279-4225-8dba-d5661fbb05fc/cfbd3432-30af-35a7-94c7-2bacdd2fc029.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75f09b45-a279-4225-8dba-d5661fbb05fc/75f09b45-a279-4225-8dba-d5661fbb05fc.crl

            X509v3 Authority Key Identifier:
                keyid:37:FF:1E:51:27:EA:A2:96:1E:37:9A:7C:F1:F7:60:5F:21:84:A1:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75f09b45-a279-4225-8dba-d5661fbb05fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.89.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:c3:88:36:19:df:25:0d:d0:51:a8:c0:2a:9b:f0:a7:b2:52:
         80:2e:1e:5d:b3:66:dc:b6:01:e4:2a:61:bd:eb:4e:ab:6e:c9:
         4f:af:3b:43:55:ba:d1:82:17:fc:21:25:21:27:e2:7b:df:1a:
         37:d0:d7:29:b9:1f:0c:a1:81:63:26:47:fd:c0:aa:0d:99:fa:
         d2:8b:73:28:e8:03:7d:e2:c5:e7:d0:11:62:82:37:f5:94:29:
         0a:ac:b9:f2:3a:4d:75:43:7e:65:8f:06:91:43:11:f2:37:93:
         2d:aa:dc:df:09:02:da:92:08:08:9f:fc:c1:b3:54:7a:81:2b:
         37:a3:6e:67:0e:69:46:55:e7:bb:a4:ab:e4:11:6e:d3:af:63:
         f6:64:ef:ee:12:d6:bd:71:60:1b:de:83:f9:6f:52:6f:fa:2b:
         e9:6e:b1:0a:3e:07:fc:81:14:eb:1d:5e:d3:58:7a:02:96:7a:
         15:32:84:64:89:c5:a9:70:54:f1:1f:12:a2:1f:53:e5:60:b4:
         27:35:eb:2f:a6:97:d8:88:3a:59:90:51:d4:03:b9:72:bb:82:
         9a:a2:d4:9e:c8:1b:83:bd:48:8f:e0:05:4b:d4:2b:eb:07:2a:
         74:9b:4c:b9:19:09:04:4e:f1:10:ef:9a:90:ad:18:a4:00:a8:
         be:dd:46:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 04:10:39 2026 by rpki-client