Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/6aec473a-28e5-34f2-ae3f-e802466149cf.roa
File:                     6aec473a-28e5-34f2-ae3f-e802466149cf.roa (raw, json)
Hash identifier:          JZ57MAe42QtGANvm1FKOhT9UN1bzvajI+QxH2EL0fGk=
Subject key identifier:   D8:76:08:6C:DC:59:05:6F:B1:20:C5:5F:34:35:FB:03:D6:EF:81:C3
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584DD0904F595EDCF0332A2A20A0
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/6aec473a-28e5-34f2-ae3f-e802466149cf.roa
Signing time:             Wed 13 May 2026 01:00:24 +0000
ROA not before:           Wed 13 May 2026 01:00:24 +0000
ROA not after:            Tue 11 Aug 2026 01:00:24 +0000
asID:                     3257
IP address blocks:        198.1.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d0:90:4f:59:5e:dc:f0:33:2a:2a:20:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: May 13 01:00:24 2026 GMT
            Not After : Aug 11 01:00:24 2026 GMT
        Subject: CN=234c95eb-5cca-4752-83f0-5318ec382cae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:42:66:b9:64:ab:64:0e:72:ed:bf:d3:62:36:
                    f5:07:7d:d5:3a:a9:ca:76:1f:d1:e3:b4:6a:b9:7e:
                    46:87:94:69:3c:97:62:29:2f:ec:8e:3f:24:53:3c:
                    67:3c:06:d7:9c:6c:5c:a0:34:be:fb:30:04:db:12:
                    09:26:57:e7:4a:11:38:68:6c:33:83:54:0d:88:a1:
                    f6:e9:2d:b3:6a:d5:6a:66:7e:4e:77:d6:14:1d:9c:
                    14:93:d6:bf:b2:97:c4:57:9b:f2:12:09:2c:58:fc:
                    fa:89:ce:48:b2:fd:a3:2b:bf:6a:0d:25:68:ea:2b:
                    84:73:1b:aa:b7:af:2f:0d:00:15:8d:09:a8:99:ba:
                    bd:61:a8:57:81:15:8c:77:96:64:5b:f0:d0:2b:08:
                    39:2c:49:c8:3f:05:19:33:9a:3c:91:bf:50:bf:76:
                    ed:91:3d:f3:d2:04:2e:4c:c7:11:44:0d:0d:50:2f:
                    87:1e:16:67:9a:30:e1:cd:81:b6:26:b5:ec:04:40:
                    7b:25:44:97:cb:f5:02:99:af:17:e6:2c:c7:fd:e7:
                    1e:74:e0:a3:b6:c0:5b:22:ff:da:25:b5:a6:53:88:
                    a1:96:28:bb:f4:3b:ab:48:ea:15:32:3a:14:93:8d:
                    35:77:7a:7f:1a:d1:f8:42:d2:34:e0:b5:82:45:6b:
                    85:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:76:08:6C:DC:59:05:6F:B1:20:C5:5F:34:35:FB:03:D6:EF:81:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/6aec473a-28e5-34f2-ae3f-e802466149cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:ac:5b:c8:dd:b9:f4:fc:5f:69:0a:74:98:c5:0c:df:ab:ce:
         50:11:d2:9e:15:df:70:37:81:2b:94:9c:49:62:fb:d2:77:4c:
         86:da:61:26:02:da:69:17:07:1d:87:83:f6:8c:50:b6:09:0b:
         78:a6:47:bc:59:65:d7:aa:96:23:f4:53:eb:95:8b:8a:c8:32:
         02:95:b4:42:c8:70:1c:c7:8d:2c:72:3b:fe:4b:d0:ec:b9:98:
         cd:1c:17:25:d7:17:d8:03:9d:ae:68:54:df:fd:b6:f7:2e:f3:
         23:ea:66:a4:70:10:75:c2:8f:ea:d0:bc:24:df:d3:ed:93:bc:
         70:0e:63:78:07:de:f9:5b:15:4b:d1:27:d2:cb:e3:68:b9:85:
         ba:44:b8:20:95:ae:ec:56:c6:1b:76:b8:3a:e3:1f:d1:8b:e0:
         a8:dd:f6:c7:79:c8:91:7d:ac:d8:76:f0:e7:32:9d:29:b3:d9:
         d3:8a:b4:fa:35:65:87:13:c1:d0:d8:b0:7f:90:8d:cb:4f:93:
         5e:9e:9a:7e:18:fb:90:0d:a6:9f:7c:d5:fb:78:0a:ee:c8:cc:
         f7:b5:da:a7:6e:63:f0:c5:61:85:c8:c0:df:3c:93:77:9c:cb:
         24:8e:c8:97:14:8d:17:8a:ef:3a:0f:f9:b7:72:f6:08:aa:eb:
         04:3f:d1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:39:38 2026 by rpki-client