Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/4b523df5-5901-31c9-b178-ae577a659803.roa
File:                     4b523df5-5901-31c9-b178-ae577a659803.roa (raw, json)
Hash identifier:          1K6NBAnAUugFSChfyOYgA29bHBj1NW6zKG645FkW4IQ=
Subject key identifier:   8C:AE:A8:60:52:0D:84:12:00:13:33:83:F2:45:15:3F:CC:E2:FD:9C
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328584E3B9479E25AD54CD49FD83600
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/4b523df5-5901-31c9-b178-ae577a659803.roa
Signing time:             Sat 20 Jun 2026 09:00:13 +0000
ROA not before:           Sat 20 Jun 2026 09:00:13 +0000
ROA not after:            Fri 18 Sep 2026 09:00:13 +0000
asID:                     262287
IP address blocks:        198.145.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3b:94:79:e2:5a:d5:4c:d4:9f:d8:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Jun 20 09:00:13 2026 GMT
            Not After : Sep 18 09:00:13 2026 GMT
        Subject: CN=bf03f061-5b6f-4a63-8147-826a1c2ff730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:42:6d:80:6a:ed:3c:40:76:50:5c:28:63:16:
                    83:44:61:d1:22:e2:df:e3:3c:a7:2b:32:a5:f0:38:
                    a4:f9:c4:0c:07:c9:41:3b:1b:67:4f:6a:a8:02:f4:
                    63:29:49:9b:9b:bf:07:1d:70:28:61:01:44:80:9b:
                    a5:72:06:5c:30:9c:a9:72:ba:d3:5b:94:55:df:31:
                    51:25:67:e2:14:f3:14:25:c6:a9:18:6d:7a:4a:45:
                    0b:77:b0:d6:7d:9f:9e:d5:e2:2e:7e:fd:61:cc:89:
                    be:f5:f8:de:ff:c3:0d:3b:b1:f8:1d:56:8c:7a:7c:
                    36:44:55:82:93:44:45:4b:de:09:85:a7:c8:f2:21:
                    e5:a8:3a:cb:77:a4:86:d3:14:7e:13:27:2b:54:8e:
                    74:c9:c1:ca:8a:21:63:b5:b8:5a:9f:a5:0e:b5:95:
                    83:f1:73:e9:05:10:35:8f:bf:dc:f3:5b:a0:26:8b:
                    f4:48:4d:98:c1:26:74:db:04:04:10:1a:67:5d:22:
                    3a:1d:1a:7b:11:f4:29:26:54:e4:59:5a:a1:98:1e:
                    d7:e2:d0:89:83:8e:40:33:5f:df:c7:02:87:50:39:
                    05:8d:b1:02:1a:97:04:c9:f1:a2:94:85:c7:25:a5:
                    f6:3a:43:36:c0:96:e4:69:d6:06:81:fd:a3:32:9b:
                    3e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:AE:A8:60:52:0D:84:12:00:13:33:83:F2:45:15:3F:CC:E2:FD:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/4b523df5-5901-31c9-b178-ae577a659803.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:06:1c:30:64:50:87:07:14:4c:f0:78:21:84:51:ab:1a:3e:
         5e:61:f7:0b:46:60:7d:ab:3f:c3:ad:3b:13:88:5a:55:b8:06:
         46:9f:1f:94:6b:e2:dc:ef:04:42:0d:ad:78:59:3b:6c:ab:25:
         99:55:11:1f:83:ec:fa:83:95:88:b9:3d:c0:00:41:b4:54:ce:
         ba:28:9c:7d:ab:b7:a7:8e:d6:49:00:1a:bd:43:1e:5d:5f:80:
         48:4c:48:05:76:0b:ed:6a:4d:a5:4e:1e:4e:a4:ff:9e:eb:73:
         de:59:06:b2:a1:0c:5a:bf:cf:51:88:97:34:70:49:ad:b1:6a:
         79:0d:a1:4e:a1:ec:06:cd:4f:05:04:e8:96:c5:16:c8:03:0a:
         00:ce:de:eb:b0:e6:98:78:ce:6f:df:38:a4:35:b7:79:6d:97:
         be:34:ed:d4:f8:9d:dc:61:5e:2b:55:12:f2:81:39:13:db:64:
         be:dc:df:9b:a1:76:62:22:0c:59:c7:f0:36:a0:b6:a7:be:33:
         5a:47:be:5c:ee:51:21:df:a5:c9:86:5f:45:6e:3f:62:c3:0a:
         b8:fe:b7:0a:48:53:31:37:cc:c3:cc:c1:d2:f7:32:0e:8a:6f:
         2b:39:92:1f:86:53:ab:2f:b8:7f:aa:77:02:53:ef:b7:92:70:
         27:22:d2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:14 2026 by rpki-client