Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5d35eb8b-40d6-4e37-beae-ce9733027467/bd81b659-bc77-3a9c-a8cb-fcd72b0f8840.roa
File:                     bd81b659-bc77-3a9c-a8cb-fcd72b0f8840.roa (raw, json)
Hash identifier:          qXu2yUeRlTGwzk4DyrRY0WBzY7EuYzkCkBv6J93XAR0=
Subject key identifier:   D6:44:08:7E:23:60:4B:A3:17:D4:49:61:AE:ED:62:18:C7:2D:E2:A8
Certificate issuer:       /CN=5d35eb8b-40d6-4e37-beae-ce9733027467
Certificate serial:       010D0C9F4328584E3E5F1EE54FE78256582AB580
Authority key identifier: 6F:59:45:11:43:B1:12:C5:88:7B:D2:DA:58:1E:F4:C1:4E:90:BD:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5d35eb8b-40d6-4e37-beae-ce9733027467.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5d35eb8b-40d6-4e37-beae-ce9733027467/bd81b659-bc77-3a9c-a8cb-fcd72b0f8840.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     401244
IP address blocks:        198.160.238.0/23 maxlen: 23
                          198.160.240.0/23 maxlen: 23
                          2602:819:c000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5d35eb8b-40d6-4e37-beae-ce9733027467/5d35eb8b-40d6-4e37-beae-ce9733027467.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5d35eb8b-40d6-4e37-beae-ce9733027467/5d35eb8b-40d6-4e37-beae-ce9733027467.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5d35eb8b-40d6-4e37-beae-ce9733027467.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:1e:e5:4f:e7:82:56:58:2a:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d35eb8b-40d6-4e37-beae-ce9733027467
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=298546e4-6b8d-406b-8538-6f4689ec6eb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b8:dd:b4:12:73:52:c0:bc:b4:fc:6f:a9:b0:
                    d3:26:c1:35:0a:4f:7f:3a:31:7f:4f:69:75:f1:87:
                    7c:45:bf:f6:55:a1:3f:dc:20:2d:9b:6c:68:b6:79:
                    41:6c:ef:d8:83:54:7d:a0:f6:eb:68:b6:f4:2b:2c:
                    02:e8:96:ee:79:42:fc:cb:98:0a:d2:9e:04:fd:96:
                    5b:e7:55:27:b6:76:ff:77:e8:05:65:70:3d:01:14:
                    01:ed:a7:17:6c:9f:06:4f:f5:a9:ad:cc:e1:7e:e3:
                    c4:03:08:25:9d:e3:c4:a2:9a:f7:74:ef:b1:26:e4:
                    a3:89:9a:16:d1:56:67:cd:fe:08:28:b2:cb:33:7c:
                    18:61:ea:80:ed:2a:2f:f2:b1:25:1c:7e:c8:6a:aa:
                    46:de:06:b0:c6:af:28:4f:0f:70:69:1d:21:cd:f3:
                    80:9f:6c:59:13:af:cc:2d:f6:7b:98:b3:16:e9:49:
                    25:27:a7:8c:2b:87:72:cc:10:71:ba:9b:f3:a6:07:
                    42:7c:fb:59:87:8a:de:ed:4a:e4:e3:56:02:2f:60:
                    21:95:c8:26:4f:e5:e4:d7:79:67:26:60:95:e3:8b:
                    e7:fb:76:f1:07:58:e5:21:c0:7c:14:03:33:62:de:
                    8a:b0:28:c0:77:3b:8a:65:2f:1c:6a:21:98:a6:4d:
                    06:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:44:08:7E:23:60:4B:A3:17:D4:49:61:AE:ED:62:18:C7:2D:E2:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5d35eb8b-40d6-4e37-beae-ce9733027467/bd81b659-bc77-3a9c-a8cb-fcd72b0f8840.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5d35eb8b-40d6-4e37-beae-ce9733027467/5d35eb8b-40d6-4e37-beae-ce9733027467.crl

            X509v3 Authority Key Identifier:
                keyid:6F:59:45:11:43:B1:12:C5:88:7B:D2:DA:58:1E:F4:C1:4E:90:BD:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5d35eb8b-40d6-4e37-beae-ce9733027467.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.160.238.0-198.160.241.255
                IPv6:
                  2602:819:c000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:fa:ad:53:1c:79:19:7e:2b:22:b4:12:0f:66:95:ee:c2:17:
         96:05:6a:0d:b4:f9:0d:7a:cd:8e:c1:0c:a5:0c:25:b4:02:14:
         d5:9e:cc:bb:ed:1c:d5:c2:fb:69:5b:03:9f:ef:b4:5b:7a:d4:
         d5:ea:0d:81:9a:43:ba:60:f3:3e:85:90:2a:3e:6c:30:96:ce:
         a4:f0:aa:66:f6:60:6f:f4:45:10:69:9b:40:05:47:4a:01:22:
         b9:52:83:56:f8:d5:a7:f8:a2:19:f5:1e:c2:84:a6:da:35:14:
         db:96:e9:b8:0a:97:44:a9:b3:4a:e3:ca:76:cf:54:ff:e4:96:
         41:b6:a0:fb:60:7b:43:f4:c9:51:86:51:c1:49:8b:0a:3e:a9:
         62:74:37:c8:30:65:29:6d:61:b3:c2:a1:78:62:ca:1f:56:09:
         40:d0:20:71:cd:4b:b6:18:14:e6:01:5d:9f:80:c9:f3:58:f1:
         fa:35:5c:b3:3e:2a:47:f3:47:a0:ad:13:00:98:59:22:95:b3:
         15:b2:a3:cf:74:4d:62:6f:1d:e6:a4:55:ff:d9:f0:53:16:f8:
         1f:0d:6f:36:13:b9:91:f1:b1:34:e2:38:79:38:f7:73:67:d4:
         9c:5c:a8:68:d2:f4:31:7c:61:e3:0e:d8:95:98:47:e5:af:ea:
         e3:ac:f4:bf
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 9 21:05:04 2026 by rpki-client