Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/4d18e435-85a1-3ccb-9ec1-b0159c9b66c8.roa
File:                     4d18e435-85a1-3ccb-9ec1-b0159c9b66c8.roa (raw, json)
Hash identifier:          n5Op59dpPE0hyfgsPskNe4+2E8dBOaf/6eY5pMueRqs=
Subject key identifier:   1C:77:08:5F:7A:0D:FB:C8:F7:ED:F8:19:7F:52:B7:4B:8E:87:10:A8
Certificate issuer:       /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
Certificate serial:       010D0C9F4328584ECD371E3B86E372C43A490B40
Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/4d18e435-85a1-3ccb-9ec1-b0159c9b66c8.roa
Signing time:             Tue 11 Aug 2026 13:00:11 +0000
ROA not before:           Tue 11 Aug 2026 13:00:11 +0000
ROA not after:            Mon 09 Nov 2026 14:00:11 +0000
asID:                     22147
IP address blocks:        198.160.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cd:37:1e:3b:86:e3:72:c4:3a:49:0b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
        Validity
            Not Before: Aug 11 13:00:11 2026 GMT
            Not After : Nov  9 14:00:11 2026 GMT
        Subject: CN=0ba9c4b9-7310-408e-a8be-26a4581ee63c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f9:0e:b3:2d:f9:c7:44:14:6c:0c:e9:aa:c1:
                    ad:be:8e:e5:fa:f1:aa:91:37:21:3e:a0:e4:85:10:
                    87:c3:d2:dd:bf:82:41:c6:82:4c:0c:79:f2:cc:b3:
                    2e:df:a5:6c:9b:51:06:80:a7:50:02:bc:60:73:6e:
                    b3:8c:0b:88:b0:82:eb:8e:ed:b7:ff:83:8f:98:88:
                    89:24:ff:01:19:09:3a:04:26:45:24:7a:74:39:0f:
                    3c:dc:1b:3c:87:a7:87:d2:1f:f2:9f:10:1e:95:6b:
                    e1:9b:cb:4f:49:5a:8b:74:9c:75:16:03:f5:ce:14:
                    00:1e:23:6b:f0:45:6a:ae:d8:33:89:e2:41:ce:82:
                    a3:8c:7a:d5:80:e0:98:de:12:2a:78:1e:40:33:a5:
                    48:26:ac:c4:a1:41:a9:3b:d9:53:97:a7:41:2d:44:
                    dc:c0:a9:05:68:b2:3a:37:ac:80:7e:fb:32:dc:70:
                    dc:d0:e4:d7:1b:c5:46:6a:6e:fd:20:06:97:8a:b7:
                    25:60:d7:1c:d9:94:5d:8d:71:a5:d8:9e:91:2a:d3:
                    b4:71:81:b2:74:c6:21:fb:55:73:f5:cb:e4:bf:c2:
                    b7:90:39:cf:3a:2a:cf:d7:0b:c3:be:9a:af:e8:ec:
                    86:7b:1c:1e:a7:00:94:60:28:5a:d1:fd:3b:8e:1e:
                    06:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:77:08:5F:7A:0D:FB:C8:F7:ED:F8:19:7F:52:B7:4B:8E:87:10:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/4d18e435-85a1-3ccb-9ec1-b0159c9b66c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl

            X509v3 Authority Key Identifier:
                keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.160.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:96:5c:b0:0b:bf:10:97:99:1c:3c:bc:05:fe:82:64:d4:d4:
         85:0e:0c:54:a8:0a:60:b4:be:e8:4a:63:80:03:35:82:60:d5:
         85:fa:5b:70:b9:31:3b:1e:d3:50:b6:d6:da:57:35:4c:87:50:
         1e:eb:f8:d8:1d:0e:b4:01:25:f0:92:b8:3a:0c:be:92:50:f7:
         c6:dd:7b:67:b4:80:f9:73:94:19:e0:5c:eb:8e:1a:d0:c6:80:
         0c:2c:50:79:e0:18:78:2a:ef:a3:28:7a:b5:00:25:9c:c6:3b:
         fb:50:f0:05:1d:6d:8e:11:e9:5f:f2:50:af:2a:92:60:e4:b9:
         de:29:b1:de:a5:0a:57:0b:d5:f8:d2:7d:3d:b7:1b:a4:65:a6:
         bf:3a:e8:58:dd:45:a4:0c:fc:e9:70:3c:e2:c4:ab:45:f6:04:
         82:be:36:1f:24:56:93:b2:eb:79:36:48:f1:1a:c9:5a:d2:62:
         7a:36:27:a3:65:78:d9:1d:67:93:13:5e:d2:8b:e0:9f:d8:eb:
         77:59:db:43:11:41:c1:2d:fa:d9:00:d6:01:d2:02:80:23:b0:
         d5:02:0b:73:72:0b:da:d7:56:46:e0:6a:b3:16:0a:6b:55:57:
         32:ff:13:9b:07:f8:5f:cf:70:e0:b2:45:42:df:84:5a:db:60:
         94:09:3d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 05:14:06 2026 by rpki-client