Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/6a790d2b-bde8-3761-a0ab-a46d1338c068.roa
File:                     6a790d2b-bde8-3761-a0ab-a46d1338c068.roa (raw, json)
Hash identifier:          PDX1ihsP4kX9gEJ5qYgzJ8SAO5HcvqvjM1oSP1PkTvM=
Subject key identifier:   5C:EE:D0:A2:FE:9F:CE:32:FE:2A:AB:5A:3C:D0:0D:0B:34:3E:68:AB
Certificate issuer:       /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial:       010D0C9F4328584EDC92064B3D7871E9FAC0B300
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/6a790d2b-bde8-3761-a0ab-a46d1338c068.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     2559
IP address blocks:        198.241.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:06:4b:3d:78:71:e9:fa:c0:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=e7b349ba-b4a9-431c-8f33-bcc83513bbf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a9:13:b0:95:fa:95:97:e9:fe:c8:d2:e2:25:
                    4e:65:2b:c6:2f:df:22:81:21:4e:00:49:8a:39:b2:
                    2b:48:04:68:7c:f7:a2:5a:28:0b:f9:c4:ce:df:d9:
                    fa:84:0c:a0:6c:34:7e:25:1a:e2:85:d1:81:d1:07:
                    ad:46:c3:3d:e7:5d:c2:d6:ee:e7:5a:c4:78:57:10:
                    29:06:6d:ec:e8:3a:50:bd:e0:0a:35:5e:e3:33:9f:
                    1c:73:dc:89:80:bb:f3:3e:25:19:ac:a1:05:e1:58:
                    e8:20:4c:ac:30:45:1d:cb:b5:07:2c:e7:e9:0e:74:
                    d4:3d:2c:5b:8d:a4:53:ff:3c:0d:c3:a4:6e:e7:8e:
                    f9:ae:6e:5c:46:27:bf:51:ba:c1:58:d5:a4:14:77:
                    98:0a:86:44:82:81:46:43:77:3f:79:32:fa:b8:b5:
                    64:ed:fa:26:e3:3e:7c:da:89:22:3b:5e:cd:43:bf:
                    82:fa:0c:3c:a4:89:b6:28:88:04:17:4a:ac:e2:92:
                    18:21:2c:05:b4:5b:e4:b6:4a:aa:a1:46:7d:05:46:
                    2e:b3:2d:9f:fe:9c:36:02:e5:58:d4:32:4b:c8:9c:
                    c5:b1:ab:0b:9f:4c:f3:7d:f5:d2:29:4f:8a:d0:66:
                    2c:6e:74:f3:2c:4a:99:19:a2:c8:c6:21:04:60:dd:
                    34:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:EE:D0:A2:FE:9F:CE:32:FE:2A:AB:5A:3C:D0:0D:0B:34:3E:68:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/6a790d2b-bde8-3761-a0ab-a46d1338c068.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl

            X509v3 Authority Key Identifier:
                keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.241.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:cb:e1:67:b2:0f:29:fb:7e:1d:73:b0:a0:0f:2f:f3:d0:f9:
         50:d7:5b:13:48:03:bc:00:76:dc:2e:f9:b7:db:df:91:2d:a9:
         97:6e:9d:ad:49:26:0a:ba:89:bf:a2:1d:b6:ad:ca:46:5f:f7:
         28:e3:c0:e1:70:56:cb:2c:48:80:cf:05:cc:e3:98:c8:a9:94:
         36:29:c7:ef:32:81:78:77:78:3e:ed:1b:16:30:69:b0:9b:d3:
         b7:a4:89:e4:67:2c:0b:a0:01:3f:3c:db:25:0f:70:b2:e8:36:
         ca:49:22:4b:ca:62:1a:11:bb:24:a0:29:c9:0f:30:23:60:fa:
         66:ad:02:b8:2b:ce:e0:7f:8e:7e:e8:f7:37:b3:81:44:28:5a:
         4b:b6:79:c4:81:0b:7b:c0:d1:b1:c7:e6:7d:7c:a5:e5:2c:0f:
         1b:68:36:8e:3d:b5:26:3f:3f:80:25:1c:33:7c:a4:c4:ff:de:
         13:e4:e4:d2:8b:ab:62:37:bc:05:45:64:6e:81:84:2f:e7:52:
         17:68:63:43:b7:3f:7b:c2:4d:ce:4a:62:e6:13:50:20:bd:32:
         e6:65:48:58:05:4f:1a:26:3d:51:7a:e5:fd:b9:69:33:cb:1a:
         b6:b6:fe:05:bc:88:16:33:09:2f:4c:42:48:e0:3f:7b:8d:49:
         3e:0c:86:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:49:18 2026 by rpki-client