Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/da28cf00-8f8b-3953-a50b-406aac3a4726.roa
File:                     da28cf00-8f8b-3953-a50b-406aac3a4726.roa (raw, json)
Hash identifier:          CHd8fGEzgb7/XP0rsx98/nTHtHuZazK/C4ofwBaAiy4=
Subject key identifier:   DE:C6:92:8D:7F:B8:3D:56:D4:FE:41:FF:E3:68:B1:11:41:0C:51:9E
Certificate issuer:       /CN=faf569a5-954e-480e-9904-712ec61652b7
Certificate serial:       010D0C9F4328584EA7873A43B9F051641FA9E600
Authority key identifier: 06:32:5E:FB:8B:27:C3:34:23:E2:86:F6:6C:02:1A:A9:B4:81:29:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/da28cf00-8f8b-3953-a50b-406aac3a4726.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     202013
IP address blocks:        198.161.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/faf569a5-954e-480e-9904-712ec61652b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/faf569a5-954e-480e-9904-712ec61652b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:3a:43:b9:f0:51:64:1f:a9:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faf569a5-954e-480e-9904-712ec61652b7
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f490e6fc-70f8-4a5f-b997-0fb627cc4062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ad:af:b7:47:00:9d:1d:e4:ac:93:85:f2:70:
                    bf:47:2c:c8:83:95:44:e6:4c:61:63:00:47:9b:fa:
                    f7:5f:9e:29:8e:d5:c8:ae:2b:3e:04:3d:fb:4a:48:
                    a6:41:53:5f:3c:00:fa:ae:7c:a0:4f:38:b7:92:c6:
                    ce:fe:ff:ac:59:e6:e6:5d:38:48:49:30:04:2c:ba:
                    db:62:37:de:97:a6:79:59:46:20:cd:04:30:7b:35:
                    1e:81:c1:88:4c:08:51:61:9b:65:5f:d6:4d:23:51:
                    e4:32:96:a7:18:b6:8a:24:cf:95:fc:7c:4a:0e:c0:
                    78:35:e5:ff:f9:a6:5e:57:3a:37:26:e5:59:17:89:
                    36:b2:36:02:55:03:3d:68:5e:1a:72:29:c5:fe:5d:
                    73:80:0e:ab:50:b3:c2:4c:22:52:d0:e4:3b:31:65:
                    24:96:f8:b4:cf:93:c2:b2:b8:3c:cc:11:25:82:a0:
                    b6:c2:f0:64:d1:32:9d:29:12:45:fb:34:07:42:f2:
                    2e:57:ab:81:37:7f:89:27:02:9b:27:1b:e1:fa:76:
                    80:03:ae:f0:9c:cf:f2:66:a5:c0:5b:6a:24:cd:52:
                    48:6d:ec:5f:5c:4d:1e:e5:13:3d:67:d8:3e:4f:1d:
                    28:1c:4f:a6:21:f4:88:88:ad:07:76:8d:4c:e4:cb:
                    a9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C6:92:8D:7F:B8:3D:56:D4:FE:41:FF:E3:68:B1:11:41:0C:51:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/da28cf00-8f8b-3953-a50b-406aac3a4726.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/faf569a5-954e-480e-9904-712ec61652b7.crl

            X509v3 Authority Key Identifier:
                keyid:06:32:5E:FB:8B:27:C3:34:23:E2:86:F6:6C:02:1A:A9:B4:81:29:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.161.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:96:87:f3:61:6b:ea:15:d2:e2:75:1d:fb:c9:02:36:66:e0:
         c0:24:6c:5e:fe:a6:b9:5e:bc:30:9a:cd:91:f5:9b:6b:97:be:
         7a:ec:ad:cd:4d:51:4c:0e:3b:6b:b5:19:57:67:d1:6b:fa:6e:
         06:34:d1:1e:5b:e2:c3:ca:5b:8e:41:bc:aa:d0:f1:ca:ab:87:
         54:f5:0e:5e:03:23:bd:79:70:15:38:ef:f2:a2:b0:b5:7f:db:
         69:81:be:ca:6c:4d:77:17:9b:f9:66:4b:b7:5a:0d:6a:c4:c0:
         b2:5d:05:9e:5d:9e:0a:b5:f2:bd:2c:a4:83:5d:e4:ec:3f:06:
         a9:e7:f0:ab:7f:1b:6a:0b:19:b6:21:8b:c5:40:d3:14:a1:fc:
         22:56:6f:9c:41:02:0f:09:40:c5:39:17:2a:b7:04:99:76:e7:
         a3:e1:8f:ef:54:8b:2e:76:b6:a9:b2:b5:fe:9a:f4:b2:1e:ea:
         26:eb:25:c7:66:e8:6e:1c:02:39:04:06:5b:1f:fa:ff:2f:00:
         b6:7a:ab:b7:4a:00:3d:64:03:c6:0d:e1:a4:ba:ee:5e:2f:03:
         48:7c:3c:85:c6:02:ca:1b:b3:c8:be:37:d6:7f:84:02:48:b2:
         66:30:f5:3c:70:ba:af:94:f1:bc:0e:bd:fe:1e:30:74:7f:6d:
         f7:70:03:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 20:39:31 2026 by rpki-client