Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/ce18774d-344f-36c4-9f23-6fece962f73e.roa
File:                     ce18774d-344f-36c4-9f23-6fece962f73e.roa (raw, json)
Hash identifier:          xH8rGHVqFehbHEa0dTqVp7/jvzRjAfkJ+9MU22mVga0=
Subject key identifier:   C1:05:84:9A:FD:3D:6A:21:9A:2A:97:9F:8F:F2:F8:4D:FE:98:40:F1
Certificate issuer:       /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial:       010D0C9F4328584EE0C211A7B137C74271606A80
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/ce18774d-344f-36c4-9f23-6fece962f73e.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     2559
IP address blocks:        198.241.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c2:11:a7:b1:37:c7:42:71:60:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=e6c72c27-c62b-4f87-b61c-fdc77630bb14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c5:27:63:aa:0a:7b:57:06:dc:77:96:78:59:
                    c8:3e:0d:c0:df:14:08:85:8d:42:7e:9c:8f:1c:4b:
                    c8:2c:25:8f:6c:70:6b:92:35:fe:42:34:85:05:6d:
                    18:37:e6:3a:b2:a2:57:22:3b:e4:12:ec:40:f1:39:
                    88:57:58:21:37:f3:29:59:a9:04:3f:73:5d:de:c2:
                    00:a2:13:82:74:ad:0c:98:34:55:54:31:0c:c8:bd:
                    39:00:3c:0f:e3:e4:92:73:21:5a:53:1d:99:cd:66:
                    19:a3:21:23:5c:8d:80:5b:ff:86:9e:3d:05:91:59:
                    75:97:dd:b2:a1:99:f9:47:4e:68:87:3b:cb:54:2c:
                    c3:bb:b9:89:db:91:3c:91:e4:5d:7d:b1:c9:e5:2a:
                    4c:89:49:4a:57:8b:99:d1:dd:03:d5:6a:6f:c1:27:
                    f8:5e:82:6e:82:f2:b7:90:90:01:6d:7b:31:54:e6:
                    b7:12:8a:75:e2:f6:77:89:3f:a3:a7:a8:0a:8a:62:
                    7f:87:15:1b:07:4d:aa:d1:11:32:d9:28:f8:da:d3:
                    f4:e6:d7:63:f9:fc:46:66:ba:96:4d:a6:ab:f6:1c:
                    34:60:7f:42:8f:46:1f:c7:85:20:dd:17:f7:cf:fe:
                    cc:02:8f:d6:75:6a:9b:86:ee:82:62:4f:04:02:d5:
                    fb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:05:84:9A:FD:3D:6A:21:9A:2A:97:9F:8F:F2:F8:4D:FE:98:40:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/ce18774d-344f-36c4-9f23-6fece962f73e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl

            X509v3 Authority Key Identifier:
                keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.241.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:b6:c3:00:ad:d9:09:b8:d2:7e:77:39:47:6d:ae:f0:ad:3f:
         29:9c:f9:d3:7c:25:c8:e6:18:46:3c:bb:c2:7f:fb:36:45:67:
         09:bb:6e:74:8e:10:70:ea:ed:2b:d5:a4:15:fb:87:58:75:29:
         59:bb:06:d9:ec:9d:0a:b5:dd:6c:14:99:f6:c7:55:c0:67:41:
         b1:30:6a:5b:19:17:e9:85:3e:85:55:78:b1:e6:d2:30:80:54:
         c3:ec:9a:42:19:34:b2:9d:b1:3a:bc:03:f5:0a:04:b7:b8:ad:
         55:70:e4:02:b2:a7:3e:fa:33:ee:75:fa:b9:0b:07:4b:e4:a0:
         64:16:81:76:28:03:af:19:cf:c4:d6:cd:d5:1d:ae:da:da:cc:
         66:b5:8f:2e:a7:23:d6:93:0c:88:f1:71:77:48:e0:0e:d9:94:
         25:52:a0:7f:67:ed:b9:60:95:78:bd:46:50:fb:45:20:7c:19:
         5b:ce:9f:0f:4b:93:3e:a5:8d:ca:71:ed:d7:4a:64:34:5f:18:
         c7:1f:3e:4d:74:f9:23:87:1a:d8:29:e8:e4:23:8e:a3:20:58:
         bd:24:87:5a:62:50:9d:38:7f:02:51:bd:58:36:e8:c2:83:cd:
         65:a3:97:f3:e3:6f:3b:28:c3:3b:7f:27:fa:62:da:06:90:2d:
         18:27:04:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:48:45 2026 by rpki-client