Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/030fc748-abaa-3cea-bd4c-e3f3aff66c3f.roa
File:                     030fc748-abaa-3cea-bd4c-e3f3aff66c3f.roa (raw, json)
Hash identifier:          MQ+SeV56lpjWs9DWyRDXBaqWhvBrqbVW1mZxg00Br9k=
Subject key identifier:   02:26:7C:08:7E:34:CF:85:C0:15:E1:BF:C0:8D:B3:A9:99:7E:AD:82
Certificate issuer:       /CN=6511a5cc-df0b-4c6e-a228-2902fbea4263
Certificate serial:       010D0C9F4328584EDC91FD76B14F3F0E75156180
Authority key identifier: ED:B2:04:0A:65:F6:8A:00:34:25:EC:FC:AB:A5:2B:F8:26:99:1B:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/030fc748-abaa-3cea-bd4c-e3f3aff66c3f.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        140.98.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/6511a5cc-df0b-4c6e-a228-2902fbea4263.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/6511a5cc-df0b-4c6e-a228-2902fbea4263.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:91:fd:76:b1:4f:3f:0e:75:15:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6511a5cc-df0b-4c6e-a228-2902fbea4263
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=36c5db08-1d44-4adb-a6b2-1e416fa0edcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:52:d1:42:17:b7:8f:50:63:4c:27:1b:45:8e:
                    84:f7:3a:8b:fd:66:02:79:f0:54:94:e3:04:28:df:
                    88:6b:ff:ad:3b:b0:5d:88:46:31:33:c4:5f:da:ba:
                    5a:1e:99:e5:1d:7d:05:10:07:37:aa:82:dd:c2:df:
                    f6:05:ed:5c:8f:0f:d4:66:c8:34:b2:d8:f8:46:b7:
                    51:f6:fe:c5:c5:3c:09:8b:56:dc:b0:16:03:34:2e:
                    71:1a:ca:76:cd:bf:0e:99:bf:85:31:41:b8:8e:1f:
                    e7:e5:08:5d:32:4d:19:23:55:db:7a:e0:0e:8d:71:
                    ff:23:20:0c:ae:1a:77:48:1d:8e:6f:d7:2a:94:39:
                    e3:82:b6:da:5c:c9:3a:dc:5f:c5:79:64:6a:44:7a:
                    70:3f:39:07:dc:b7:0f:9c:13:6f:0a:42:21:ee:48:
                    2d:ad:76:ff:d3:74:21:62:62:43:a5:2d:51:d3:4a:
                    eb:e2:30:c7:18:63:59:93:d3:bf:7b:8f:a6:12:ff:
                    55:a4:b2:1a:eb:9c:3b:bb:9c:6e:cb:87:51:4b:a2:
                    3d:1b:2e:26:bf:bd:a5:d7:8b:00:7c:72:f0:30:ab:
                    ff:0e:60:04:cf:8e:b1:7d:da:a7:49:0f:3d:1a:2f:
                    99:95:c1:d0:92:4e:7e:d1:ac:97:4a:01:b9:31:f1:
                    42:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:26:7C:08:7E:34:CF:85:C0:15:E1:BF:C0:8D:B3:A9:99:7E:AD:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/030fc748-abaa-3cea-bd4c-e3f3aff66c3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/6511a5cc-df0b-4c6e-a228-2902fbea4263.crl

            X509v3 Authority Key Identifier:
                keyid:ED:B2:04:0A:65:F6:8A:00:34:25:EC:FC:AB:A5:2B:F8:26:99:1B:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.98.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:78:04:f7:0e:98:76:be:6b:24:af:d0:2d:b3:15:ef:fc:e8:
         6b:7a:12:bf:98:06:9c:38:c5:6f:46:6e:2f:aa:96:f9:70:17:
         9e:0d:b1:90:41:38:a2:dd:cf:e5:56:24:27:b3:d7:e8:ff:c2:
         6e:19:24:51:90:c2:8e:23:79:e3:66:1a:37:91:22:3e:e0:52:
         c8:dc:33:88:6b:db:e7:a7:70:31:98:1f:a4:c1:61:82:be:5d:
         df:9b:25:ef:b7:a1:10:f8:db:05:db:9c:3d:9d:7d:e8:be:d4:
         8b:03:22:ba:2c:2c:5a:16:b2:ca:0a:be:dd:1d:a1:f5:f0:c9:
         da:54:01:1e:b9:d3:7b:c8:bb:e1:bc:4b:b6:67:ed:aa:aa:54:
         0a:51:54:fc:2f:9b:26:2f:6f:e7:65:3e:27:52:99:83:3e:54:
         71:52:b1:e9:9d:ee:96:98:e6:43:2f:c1:e1:68:76:a8:b4:6b:
         85:ad:62:1a:26:f0:a0:5b:07:99:c6:ec:91:84:3a:ee:b8:c9:
         0b:f9:e9:f4:c4:d7:61:bc:b4:c5:6e:6c:35:21:d6:6b:91:99:
         1f:f2:63:4f:64:80:6f:77:2f:d0:e2:0d:40:d9:50:eb:da:64:
         3f:91:61:e3:95:73:94:ef:38:be:a1:d2:7e:07:c0:48:2e:6e:
         4e:78:5e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:13:06 2026 by rpki-client