Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/6fe1b9ed-c86a-3f36-991b-b4050515422f.roa
File:                     6fe1b9ed-c86a-3f36-991b-b4050515422f.roa (raw, json)
Hash identifier:          5e6xVD3D/lh5vSKt+Pz8fFpWl8Y5QGcKkXrHuONoAjE=
Subject key identifier:   A4:AF:02:24:36:6A:2C:F1:63:C8:98:88:69:D3:9D:A7:2E:1E:28:66
Certificate issuer:       /CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
Certificate serial:       010D0C9F4328584DA6B033AAD72516BF00190C00
Authority key identifier: DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/6fe1b9ed-c86a-3f36-991b-b4050515422f.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     21559
IP address blocks:        192.228.98.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 02 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:33:aa:d7:25:16:bf:00:19:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=0d5bfd66-3084-4fd7-865a-fe913bc302a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d8:a9:f1:a1:0d:50:90:0c:68:65:66:92:76:
                    d3:d5:45:17:1f:fa:ac:42:39:9f:1a:de:b0:b5:ca:
                    d1:c8:d6:84:d0:93:cd:a7:a8:60:0f:ae:f1:5f:4f:
                    41:8c:4f:8a:ca:77:de:3d:2e:11:b5:87:5d:e0:99:
                    dd:b8:42:e9:a9:af:0d:94:d0:80:07:41:52:37:56:
                    31:69:2d:4f:a2:76:63:be:4d:62:87:63:37:33:d5:
                    c6:d6:8e:8f:d3:b8:c8:91:a5:5d:04:75:e7:a5:cd:
                    a9:e5:ac:92:2a:06:b1:7b:13:10:39:ff:72:b2:06:
                    ca:e2:b5:59:6a:f3:ef:52:36:01:26:a2:3e:0c:5f:
                    32:8c:17:f7:c3:6b:f8:f5:96:60:c0:ed:de:45:ee:
                    4b:9c:9d:a5:3a:db:b6:59:e6:1c:91:91:3b:61:09:
                    e8:28:60:f1:4c:65:15:44:dc:fa:b2:94:b0:1c:b1:
                    29:d8:1f:80:be:74:0a:37:64:02:15:23:83:54:a5:
                    a3:98:b8:66:94:81:68:c7:ad:ff:b3:cf:95:7d:64:
                    44:4c:09:c1:99:9d:b8:ed:ee:7d:a3:38:66:a3:3c:
                    2d:be:c8:3e:a9:6c:33:f9:1f:2c:4b:40:ba:c6:e2:
                    07:02:c6:ef:14:35:c3:3b:19:9b:ac:0b:e5:fd:ad:
                    54:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:AF:02:24:36:6A:2C:F1:63:C8:98:88:69:D3:9D:A7:2E:1E:28:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/6fe1b9ed-c86a-3f36-991b-b4050515422f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl

            X509v3 Authority Key Identifier:
                keyid:DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.228.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:bd:ba:9c:e8:7c:35:57:b2:20:ff:61:d2:0f:53:60:f7:9c:
         4a:d7:a6:e9:64:34:b7:a1:ff:f5:7a:35:c2:01:8a:db:7e:ef:
         56:06:d7:af:04:56:82:a1:fd:3e:6a:18:60:73:e2:5c:d7:92:
         2e:5c:ba:0e:4d:99:43:50:20:e1:69:21:1c:7f:af:97:ed:94:
         70:eb:e1:7d:d9:3d:37:4d:3a:43:fd:93:d6:54:9e:cf:7d:92:
         af:9a:7b:64:02:f6:8c:67:6e:0d:0f:a3:2b:49:37:2a:2a:7a:
         84:f2:6d:aa:ee:20:6e:38:27:87:d5:d5:60:10:af:07:34:f6:
         f6:bc:4e:b9:70:39:fd:ae:6e:60:19:e6:ce:6c:68:0b:2c:f3:
         07:25:a1:f9:c1:a9:4f:5e:b7:85:18:5a:fe:de:4e:bd:46:17:
         2e:d0:85:d4:c5:07:3c:13:dc:6d:e2:f9:ad:0c:fc:e0:11:e3:
         b0:ea:25:35:65:80:ae:e8:c0:4a:25:9f:a4:38:9a:e1:c6:1d:
         a4:3d:2a:11:d4:fa:13:84:f9:5c:42:fc:6b:8e:88:76:16:c9:
         aa:c7:6c:aa:15:11:b8:bb:49:bd:d2:d5:d3:e2:11:0c:5d:55:
         dc:18:b1:da:fe:e1:53:f4:64:a5:49:81:e0:d4:69:fd:28:a8:
         cb:0a:31:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 21:30:28 2026 by rpki-client