Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/2cbe8e1f-07c3-34c2-9885-771109a75aab.roa
File:                     2cbe8e1f-07c3-34c2-9885-771109a75aab.roa (raw, json)
Hash identifier:          VUbkx4QwGuYjsOyUvQH+sIBH7EZoCY5w7OLR8FErQzQ=
Subject key identifier:   F8:89:74:56:9F:FB:8D:98:F8:54:AB:32:16:21:8D:E7:D5:8A:C6:EA
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328584EF01CDBC7B9E345EAC3BFC300
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/2cbe8e1f-07c3-34c2-9885-771109a75aab.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     212238
IP address blocks:        198.145.67.0/24 maxlen: 24
                          198.145.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:db:c7:b9:e3:45:ea:c3:bf:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=9a5eea5c-cbf9-4555-8781-08ed45a3346b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:95:7c:9b:c5:a1:68:2e:a4:52:d6:d2:02:72:
                    6a:be:f1:e6:ef:64:a1:8d:df:be:ca:3f:46:55:19:
                    93:69:57:d2:8e:35:39:75:39:2b:fa:77:32:ae:d8:
                    b7:59:20:3b:14:29:8b:27:ef:94:c3:01:2f:15:3d:
                    95:a7:2d:58:9b:a8:9b:56:d5:b0:06:cf:82:8a:af:
                    7b:8d:66:a4:10:f9:be:55:b6:ed:7f:dc:6a:cd:e1:
                    7e:aa:9d:ff:56:aa:5b:c3:f1:54:0e:1f:41:29:1b:
                    1a:26:3d:bb:60:e5:47:7a:76:4a:d5:e3:d3:d6:c3:
                    a8:26:96:83:ce:ca:97:9e:fc:ad:ea:58:26:3e:e8:
                    29:3b:78:fd:8d:d1:2e:25:54:cf:cd:df:a5:d3:e2:
                    9c:f6:2e:e8:b5:3e:ca:1c:04:b5:fd:02:60:e1:89:
                    4f:8e:a0:53:92:d1:84:4d:2f:50:b7:9b:f0:41:4e:
                    1b:74:93:65:26:9b:1a:37:04:14:c1:3d:78:df:27:
                    5a:85:97:ff:99:be:a8:d7:83:63:89:0f:c0:be:7b:
                    4d:01:3e:ee:37:07:f4:79:9a:29:3e:12:51:51:c3:
                    b5:6a:70:cf:01:5f:0d:a0:a5:1c:ce:36:87:aa:63:
                    a2:72:28:b7:00:af:70:57:7a:df:f1:c3:0e:c0:dc:
                    57:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:89:74:56:9F:FB:8D:98:F8:54:AB:32:16:21:8D:E7:D5:8A:C6:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/2cbe8e1f-07c3-34c2-9885-771109a75aab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.67.0/24
                  198.145.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:aa:61:10:36:d1:72:ac:72:ef:a7:3c:03:07:61:05:e0:ef:
         98:c8:24:fa:9c:d0:e4:63:d7:eb:9c:cd:96:5f:6d:f1:c7:e7:
         b7:55:eb:92:5b:8f:5a:b2:2f:59:4a:3a:0c:ad:07:36:ca:72:
         e7:dc:0f:6e:42:8a:b8:4f:da:67:5f:a4:ba:17:97:ef:90:c9:
         92:94:a1:35:f4:4a:d9:ae:81:f0:35:07:05:84:a4:c2:04:41:
         ea:f2:bc:df:cc:d1:33:04:49:58:e7:ef:6a:a3:fa:4d:f3:a2:
         d4:28:be:c0:1d:5f:7c:bc:d5:46:59:86:9a:37:10:7a:84:d4:
         e4:5b:ce:70:01:3a:5d:45:6f:83:11:30:4e:07:e5:94:d6:a7:
         79:10:01:1d:8e:2b:0f:ad:36:28:21:d4:fd:2d:80:4f:8c:f1:
         38:89:bd:9c:94:5b:e0:cb:e9:a3:35:61:18:e4:64:a2:3d:41:
         c7:81:f9:95:9e:9f:53:69:94:8d:04:ec:1a:ab:1e:b6:79:cf:
         e1:f4:b4:c4:ba:0f:fc:8e:16:8c:bd:10:60:f5:6d:08:a7:6f:
         b3:d1:48:49:53:28:dc:d2:58:22:8c:c5:6c:e0:ea:25:2e:b4:
         6f:92:1e:4e:06:8e:f2:4d:79:aa:4e:bd:18:60:a3:66:bb:d2:
         55:8a:1b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 17:07:54 2026 by rpki-client