Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/2cb63a88-da96-3e6c-ab4b-eebda9dc7b2d.roa
File:                     2cb63a88-da96-3e6c-ab4b-eebda9dc7b2d.roa (raw, json)
Hash identifier:          rIdKAaI0YUDsaYTBnjn34I3rPhXs9deO2Tluhi+YFqs=
Subject key identifier:   FE:DF:2A:83:99:73:A6:C4:77:2A:71:16:15:59:EF:EA:D8:1E:ED:ED
Certificate issuer:       /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial:       010D0C9F4328584EBDDC5EE947CB2462ACF21AE0
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/2cb63a88-da96-3e6c-ab4b-eebda9dc7b2d.roa
Signing time:             Thu 06 Aug 2026 01:00:12 +0000
ROA not before:           Thu 06 Aug 2026 01:00:12 +0000
ROA not after:            Wed 04 Nov 2026 02:00:12 +0000
asID:                     2559
IP address blocks:        198.241.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bd:dc:5e:e9:47:cb:24:62:ac:f2:1a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
        Validity
            Not Before: Aug  6 01:00:12 2026 GMT
            Not After : Nov  4 02:00:12 2026 GMT
        Subject: CN=e9f835d9-abdd-4857-8849-e7f829b08c08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:74:de:99:28:09:8f:71:6a:82:2a:a9:6f:e1:
                    3a:fc:22:3b:52:14:ce:ce:14:d1:a9:65:36:1a:0d:
                    90:a5:8c:2a:ea:8f:ad:f3:af:22:7c:fa:6e:82:44:
                    f0:86:bc:36:1b:44:9b:ec:b6:41:8e:99:99:9d:07:
                    9e:2a:ab:e5:5d:1f:8b:43:1a:38:e2:b6:63:2e:98:
                    8a:2c:c7:cd:f1:d4:ca:99:da:42:f6:44:c6:56:35:
                    b0:73:e0:ca:8e:bf:c4:b7:24:be:47:87:67:f4:24:
                    d0:12:d0:71:72:69:26:2e:e2:1a:b6:12:09:b0:18:
                    f7:71:11:ff:42:c1:df:ef:1d:65:37:02:70:0a:56:
                    25:2e:bb:6d:0f:b4:85:87:b8:b1:5d:2f:ac:6f:40:
                    32:d1:b5:80:cd:65:9d:97:ce:5f:51:c8:ce:f7:34:
                    5c:2e:76:94:07:4a:d7:81:54:d9:67:f1:fa:59:72:
                    24:e6:eb:6a:bd:dc:2a:8f:d8:12:eb:52:4c:5a:2a:
                    f3:ea:44:6a:f3:56:74:5f:9e:22:1c:fe:4d:e2:25:
                    b7:83:c9:e2:d6:a1:31:38:12:85:5f:e8:fe:87:38:
                    ad:8b:9a:7d:c5:87:e8:a9:17:d5:b0:c3:d1:bc:6b:
                    79:1f:86:55:03:8b:e9:34:7a:23:d7:27:0e:87:b2:
                    9c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:DF:2A:83:99:73:A6:C4:77:2A:71:16:15:59:EF:EA:D8:1E:ED:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/2cb63a88-da96-3e6c-ab4b-eebda9dc7b2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl

            X509v3 Authority Key Identifier:
                keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.241.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:c5:77:27:ba:f0:67:fa:22:ec:49:f4:01:26:cc:59:14:dc:
         de:67:ee:3a:14:47:54:c3:3f:e0:d5:f8:c2:c2:74:1f:61:18:
         50:c5:bd:57:21:63:a2:08:5a:d9:f5:66:15:6f:6a:d8:ff:0c:
         18:d4:1e:1e:1a:ce:ed:27:c0:65:b1:23:37:50:4d:3b:fd:e7:
         ca:01:73:f4:17:29:f8:21:4b:28:f4:36:bd:68:2f:ce:30:57:
         a4:1c:9b:56:40:dd:ac:c7:aa:2e:05:25:68:f5:f7:1a:22:9f:
         24:b7:70:d2:2a:bf:5e:8a:50:c9:da:68:49:12:9a:b9:1d:99:
         6e:94:58:7b:68:8e:b8:bd:56:2c:51:f5:3e:0d:6f:e8:e3:6b:
         11:2c:3e:a3:c7:f6:97:96:ad:0e:e2:37:02:e0:a4:dc:02:98:
         5c:6f:01:68:0a:83:86:7a:9c:80:2b:f0:11:de:06:98:83:5e:
         c8:1b:8a:91:d5:3c:37:07:28:bf:36:7c:cc:7a:e2:b8:f7:9b:
         2f:a8:7f:99:d9:fd:e0:88:8a:7b:31:79:09:98:41:c1:3e:6d:
         d3:17:d7:76:2b:63:49:d7:a2:33:af:8e:d1:92:cd:5f:71:4f:
         b3:56:1d:bd:1f:2e:45:3b:0f:a2:2c:c6:ae:01:7a:9c:d4:c4:
         d4:0e:aa:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:48:23 2026 by rpki-client