Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644/1f11ed0d-4047-3ec2-9a2d-aaae67adbbd1.roa
File:                     1f11ed0d-4047-3ec2-9a2d-aaae67adbbd1.roa (raw, json)
Hash identifier:          XupZaxZIbJAFG3RHD8b9U4gDkBa474KvMv9QWBghPUQ=
Subject key identifier:   6D:CA:C8:62:25:67:28:B7:28:AC:19:AD:3D:24:A9:ED:B4:02:F6:65
Certificate issuer:       /CN=9fee4199-1b61-4b01-b005-17ea1cb9a644
Certificate serial:       010D0C9F4328584D24DF86805F688767419ABB40
Authority key identifier: 13:79:23:FD:4F:74:3F:9C:89:E3:F1:DA:16:3C:EE:75:C4:BD:B6:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644/1f11ed0d-4047-3ec2-9a2d-aaae67adbbd1.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     14464
IP address blocks:        198.7.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644/9fee4199-1b61-4b01-b005-17ea1cb9a644.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644/9fee4199-1b61-4b01-b005-17ea1cb9a644.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:86:80:5f:68:87:67:41:9a:bb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fee4199-1b61-4b01-b005-17ea1cb9a644
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=1e160633-72d1-4b1a-b695-243e179178a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ea:d9:80:b8:db:30:01:39:9c:a4:93:f6:f6:
                    e3:28:63:f8:d6:23:6f:62:26:ab:8f:5f:81:2e:88:
                    04:a4:97:6c:90:d6:ae:90:53:0e:2a:5e:c0:81:35:
                    ea:6e:63:fd:ba:74:9c:48:85:eb:13:43:9b:bd:c6:
                    ad:c1:3f:d6:9f:d4:af:c9:af:f5:5f:09:02:95:3b:
                    3c:78:ee:d7:97:24:95:5a:25:80:f9:14:f7:c7:60:
                    a3:d2:98:d5:d9:29:a9:c0:e4:aa:10:72:b4:be:fb:
                    f2:c0:5f:58:38:7e:8e:a1:b4:69:98:45:4e:7f:9d:
                    df:20:9d:3a:b7:04:59:e6:22:d0:58:64:16:e8:8f:
                    50:a7:d0:af:45:4d:25:ac:70:82:38:30:ff:3b:26:
                    bf:fd:42:38:5c:ce:50:1a:90:b9:96:25:1b:a7:dc:
                    6f:9f:0c:d9:38:c9:62:06:47:70:7a:22:9a:3c:00:
                    53:91:01:f3:e0:68:bb:50:bb:d5:93:d1:87:72:02:
                    40:29:05:66:9d:ad:46:b2:8f:69:ab:27:f7:15:3d:
                    0f:bc:d3:63:02:c7:01:63:c7:6a:7c:ff:29:58:91:
                    b8:6b:5e:c4:15:b0:42:24:ff:88:57:8b:a3:57:47:
                    b7:4b:32:a2:5c:2a:73:dc:e6:d8:17:c5:ad:78:8d:
                    bf:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:CA:C8:62:25:67:28:B7:28:AC:19:AD:3D:24:A9:ED:B4:02:F6:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644/1f11ed0d-4047-3ec2-9a2d-aaae67adbbd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644/9fee4199-1b61-4b01-b005-17ea1cb9a644.crl

            X509v3 Authority Key Identifier:
                keyid:13:79:23:FD:4F:74:3F:9C:89:E3:F1:DA:16:3C:EE:75:C4:BD:B6:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.7.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:03:6f:d2:32:88:87:ba:d8:af:15:61:e8:1f:cd:8d:58:7c:
         e9:98:53:7c:13:a2:45:67:f8:87:8a:29:01:77:ce:fb:b7:21:
         88:c2:36:7c:5e:7f:a3:40:f9:cf:ae:9c:ae:91:8f:a4:cf:2c:
         0b:89:53:5b:4d:25:95:57:3d:3f:3c:25:bd:6b:69:f5:e6:90:
         11:1f:62:99:d7:8a:2a:e9:ff:5d:f5:0e:13:f0:ea:f6:fe:5e:
         57:80:3e:9b:a9:cf:82:91:4e:88:62:6d:2d:c8:0a:9c:2a:54:
         2b:0b:30:df:a3:aa:13:e8:06:db:f7:b2:3c:3a:5b:6b:94:47:
         77:d9:16:6d:b0:8d:ea:7d:8d:9e:83:5e:a8:bb:39:92:cb:8a:
         49:48:fd:5a:ef:dd:18:b2:ca:60:9d:6a:d7:2b:65:0b:a4:49:
         18:d4:f8:2f:dc:c5:70:cd:9d:b3:f8:76:b7:48:8f:34:f6:8d:
         0d:cd:e5:18:aa:10:d4:43:dd:78:35:df:31:49:bf:68:ab:b2:
         42:f8:31:d9:a8:c6:6c:a8:ab:76:2e:38:24:71:7d:42:1e:a3:
         55:1d:85:15:de:10:d3:2c:c3:14:ed:34:68:70:0a:bb:8d:5a:
         b2:31:c5:4d:52:7f:4d:13:e2:50:51:c1:b2:35:90:ac:43:24:
         39:66:6e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 10:54:12 2026 by rpki-client