Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/2304dba8-24f4-305c-b1c5-37b8af2c3600.roa
File:                     2304dba8-24f4-305c-b1c5-37b8af2c3600.roa (raw, json)
Hash identifier:          Zdh3F++MNFoViuUXEqP+XwUikBerh5zolHIGHj3U3Oo=
Subject key identifier:   A9:94:AD:C5:60:8C:7D:26:0D:F5:24:2D:05:C4:54:33:D4:AA:BE:D0
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328584D7060DB796ADD42D68FD9D880
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/2304dba8-24f4-305c-b1c5-37b8af2c3600.roa
Signing time:             Wed 08 Apr 2026 14:07:16 +0000
ROA not before:           Wed 08 Apr 2026 14:07:16 +0000
ROA not after:            Tue 07 Jul 2026 14:07:16 +0000
asID:                     64249
IP address blocks:        198.145.141.0/24 maxlen: 24
                          198.145.142.0/24 maxlen: 24
                          198.145.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:60:db:79:6a:dd:42:d6:8f:d9:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Apr  8 14:07:16 2026 GMT
            Not After : Jul  7 14:07:16 2026 GMT
        Subject: CN=765d8ad8-79c8-4b65-b8cc-69a9b6e95059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7d:4a:86:3f:d0:af:dc:54:cb:e3:c7:44:4b:
                    91:8e:93:6b:df:95:f1:6f:52:24:87:fc:96:04:ac:
                    20:fa:ab:c5:8c:e3:21:f5:78:35:4d:6b:f7:ba:dc:
                    6d:39:d0:f7:b5:68:b5:4c:fa:74:6c:e5:0c:e1:69:
                    c7:40:61:7f:90:b4:e5:02:62:55:d2:a9:2f:81:3a:
                    52:f5:fd:0b:b1:85:41:bd:17:dc:a7:cc:74:44:b7:
                    3b:bb:04:52:fb:cc:0b:3f:23:be:c7:4e:00:83:30:
                    03:82:4d:92:f0:f1:93:a3:34:5e:f2:a2:40:10:6e:
                    e2:09:55:74:f5:d0:50:dd:5f:0b:d4:4d:70:57:12:
                    7c:60:38:9e:48:73:36:37:44:81:9b:b2:5b:e2:ff:
                    9e:f6:c3:2b:e4:f0:2c:58:23:3b:40:0a:ce:e3:15:
                    ac:7d:23:85:a9:9a:e0:7b:da:94:fc:9b:c7:51:06:
                    f6:71:ee:80:ec:86:2c:fc:bf:48:1b:13:aa:65:05:
                    88:56:0d:86:14:3b:3d:81:ec:4b:ad:e8:4f:e2:ce:
                    73:93:c4:00:54:ee:52:22:1d:4b:4a:36:50:7a:28:
                    bc:45:d4:be:93:30:36:66:b0:77:cb:0a:55:1f:fe:
                    6e:95:60:d1:52:4b:08:33:e1:6c:a1:03:87:12:ca:
                    40:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:94:AD:C5:60:8C:7D:26:0D:F5:24:2D:05:C4:54:33:D4:AA:BE:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/2304dba8-24f4-305c-b1c5-37b8af2c3600.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.141.0-198.145.143.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:2d:74:a8:d3:30:8e:c3:c3:53:97:88:25:7d:d5:c3:90:78:
         ef:20:78:e8:d0:51:79:e4:87:4d:8e:d0:c8:14:2f:0c:71:41:
         42:14:ce:43:99:08:44:f9:15:80:8a:30:9d:2d:8c:fb:13:3d:
         59:8e:fd:bb:eb:f9:00:a2:d2:ac:81:10:c2:f7:78:f6:80:c9:
         2d:b8:cf:ed:01:e5:fa:ce:8b:a1:6c:44:93:d3:8b:06:a2:d5:
         c7:9a:d2:eb:7f:2e:7a:c5:9a:b9:0e:18:51:20:c2:d5:bd:32:
         a5:40:19:f0:ad:ab:ec:4b:6b:34:22:29:97:c5:4d:02:0e:b3:
         61:55:25:64:3d:d7:3f:5e:e1:cc:c5:bf:05:3c:5a:39:9a:ef:
         73:30:ab:78:e9:88:51:ef:e4:42:45:88:04:03:63:24:f1:9d:
         8e:a5:10:fd:7c:9b:4a:ff:69:47:d6:62:45:07:4a:34:08:36:
         99:f3:2c:38:33:45:08:f9:4d:77:f7:7e:11:6e:ab:fc:99:ba:
         45:b5:f3:d4:f6:3a:9c:e7:af:34:7b:d5:9a:f8:f8:8f:3b:50:
         d8:38:34:cb:92:d3:bf:67:13:4c:b7:85:d3:7c:83:d3:c2:ab:
         db:83:53:bc:70:b4:66:99:cd:33:48:49:b3:e7:2e:ed:04:8a:
         aa:d1:20:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 00:31:18 2026 by rpki-client