Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/17290f0c-b076-391a-b7ce-86d939b52d57.roa
File:                     17290f0c-b076-391a-b7ce-86d939b52d57.roa (raw, json)
Hash identifier:          6/+r9FgLyxxEocWHxFr285VUy8vAniZExk65gt+XpqA=
Subject key identifier:   2B:60:0D:36:36:0A:96:46:B9:95:49:F0:A6:9B:AF:1E:40:11:41:02
Certificate issuer:       /CN=ab98592a-7218-439c-b165-34810fd16d71
Certificate serial:       010D0C9F4328584E15E477890785AEA0FF782700
Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/17290f0c-b076-391a-b7ce-86d939b52d57.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     3300
IP address blocks:        198.180.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:77:89:07:85:ae:a0:ff:78:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=2f03e827-ea69-4e5b-9e05-3bcf491e1ae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a5:48:1e:ad:5d:ed:16:eb:51:0a:cb:7f:86:
                    0b:59:71:7a:99:18:94:73:0b:f3:70:8b:f1:b0:1f:
                    9e:20:d2:c3:9c:33:8f:42:c5:f2:cc:d1:74:0c:57:
                    a9:30:76:6b:21:5c:12:42:c0:6f:68:68:79:da:29:
                    f2:1c:8a:4c:5c:44:a2:e9:d0:9a:7e:e1:b7:8b:9d:
                    0b:15:2d:63:4e:5a:5e:73:a3:58:a1:74:54:6e:c3:
                    39:c0:4b:92:28:f7:c0:60:db:7f:93:77:2e:a0:ce:
                    9a:6d:dc:69:24:3c:a8:42:bb:62:33:ca:ba:d7:35:
                    d7:04:e2:36:93:a6:71:56:1d:d7:b7:2d:a1:69:ee:
                    9c:6a:4a:b1:6a:97:a9:cb:8b:4b:be:8b:97:bc:7d:
                    bb:3d:be:47:96:86:07:6d:a1:e2:35:9f:18:20:8b:
                    b6:c0:cb:c1:88:11:7d:2c:b3:9b:dd:7f:08:e8:49:
                    58:6a:b2:8b:da:c1:82:be:76:36:67:1d:cf:1e:35:
                    f3:43:d7:51:13:1c:99:f9:e4:e8:83:a0:2e:d1:15:
                    71:d7:8d:fa:e3:1e:ca:85:73:f8:11:74:36:e5:4d:
                    46:b4:54:c2:fd:55:be:bc:31:6f:5e:41:ca:cb:d3:
                    c8:25:5d:81:60:0c:5e:c7:3e:85:d1:e8:b4:74:ab:
                    f4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:60:0D:36:36:0A:96:46:B9:95:49:F0:A6:9B:AF:1E:40:11:41:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/17290f0c-b076-391a-b7ce-86d939b52d57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl

            X509v3 Authority Key Identifier:
                keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.180.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:05:b1:b0:cb:a5:38:84:f7:7d:55:bb:43:40:89:c6:05:dc:
         22:2c:e8:72:15:67:5c:9c:62:1c:e7:51:fb:e3:ff:28:26:ea:
         e8:d0:3d:ea:b8:a0:db:1e:86:c3:d0:e0:87:03:ae:b4:55:a7:
         3f:43:2c:9e:30:8a:be:46:6e:8e:02:73:54:91:bc:8f:05:a7:
         a9:c3:80:b0:e6:84:59:fe:ef:12:4e:99:a2:9e:07:63:50:9c:
         43:2d:66:38:2c:f0:56:0f:df:a9:ff:b5:12:6b:62:bb:ad:a3:
         0b:0d:8f:39:dc:7b:91:18:b8:6b:87:06:28:b3:ae:68:05:ad:
         70:48:c3:36:fe:dd:1d:3c:61:0b:d6:1b:b7:82:62:bb:2c:1b:
         c0:8f:41:24:88:8f:ea:3f:7a:a3:88:e7:30:a1:68:ca:5d:c9:
         c7:61:4a:e7:cd:59:5e:34:f5:f4:cd:7d:5c:f5:c0:a6:9e:d9:
         c6:8c:2e:6b:62:24:55:b7:95:b6:91:d6:53:1f:cf:b8:88:5d:
         58:6c:38:f2:56:52:b1:d3:82:8a:e9:f9:48:30:f1:4a:6c:b9:
         eb:ab:78:d9:82:18:f4:a9:7b:0a:c3:6e:b0:76:20:ae:d8:fa:
         cc:f2:2a:be:63:e6:94:c3:55:1f:f3:62:6b:89:f1:63:11:14:
         1e:11:fc:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 18:46:10 2026 by rpki-client