Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69e23836-98b5-4802-9778-a96a5ee3eac3/7e4d09f5-7d72-30fb-9eb4-b7d94944f78c.roa
File:                     7e4d09f5-7d72-30fb-9eb4-b7d94944f78c.roa (raw, json)
Hash identifier:          23uFj6QRAojmNc5HtnbTuO8evJJXABwPXATT/oCGpeI=
Subject key identifier:   C8:6F:CB:57:45:6A:53:4F:A0:B0:4F:82:AD:8F:93:F9:1C:1B:5B:DE
Certificate issuer:       /CN=69e23836-98b5-4802-9778-a96a5ee3eac3
Certificate serial:       010D0C9F4328584DA6B016E9A8210813686BBF80
Authority key identifier: F7:F4:4E:36:F2:8E:E6:3B:90:99:EE:39:FC:A9:72:F5:D6:4E:E4:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69e23836-98b5-4802-9778-a96a5ee3eac3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69e23836-98b5-4802-9778-a96a5ee3eac3/7e4d09f5-7d72-30fb-9eb4-b7d94944f78c.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     8075
IP address blocks:        198.47.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69e23836-98b5-4802-9778-a96a5ee3eac3/69e23836-98b5-4802-9778-a96a5ee3eac3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69e23836-98b5-4802-9778-a96a5ee3eac3/69e23836-98b5-4802-9778-a96a5ee3eac3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69e23836-98b5-4802-9778-a96a5ee3eac3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:16:e9:a8:21:08:13:68:6b:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69e23836-98b5-4802-9778-a96a5ee3eac3
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=ffaef82f-9d8c-446e-a275-af4876525440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:22:14:dd:d1:54:e0:78:b9:27:96:ec:0a:68:
                    c0:83:7e:fd:a5:44:3b:ea:15:15:b5:f2:bc:05:67:
                    7e:c6:0f:bc:64:b3:d3:69:8f:97:79:5c:a4:66:1c:
                    98:5d:d9:a0:66:b8:73:a7:f6:4e:40:4f:73:85:be:
                    dd:22:f1:5f:ca:22:2e:33:eb:f0:77:61:9a:c1:90:
                    91:d6:c6:59:cb:7a:fb:cf:c1:b1:87:52:7f:17:a8:
                    91:15:39:b2:3b:8b:cd:92:62:13:42:73:c2:11:20:
                    51:ec:27:8c:45:4b:a5:c6:64:cc:d1:65:67:0c:72:
                    48:9b:48:1e:c9:53:ea:7d:2d:7b:34:78:30:cc:64:
                    0f:c9:1b:ea:54:b5:83:46:bd:94:92:66:35:09:e7:
                    5a:1a:36:86:8e:f7:2e:76:cd:ec:5e:8e:38:21:65:
                    15:e4:56:a6:b9:f3:10:05:05:c7:03:e3:b7:79:58:
                    f7:f3:06:18:7e:57:b3:b3:01:69:fe:84:f7:ac:cb:
                    1a:8d:3c:56:a5:dd:4e:36:f6:12:a2:0f:be:01:b3:
                    21:bd:8c:14:d3:e1:c4:c7:8a:d3:30:1c:ab:29:c2:
                    93:d1:95:df:ae:32:d7:95:2e:15:27:e3:e4:fc:2d:
                    c3:e9:f5:90:b1:1e:00:9b:9e:c8:d0:0e:c3:40:29:
                    29:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:6F:CB:57:45:6A:53:4F:A0:B0:4F:82:AD:8F:93:F9:1C:1B:5B:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69e23836-98b5-4802-9778-a96a5ee3eac3/7e4d09f5-7d72-30fb-9eb4-b7d94944f78c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69e23836-98b5-4802-9778-a96a5ee3eac3/69e23836-98b5-4802-9778-a96a5ee3eac3.crl

            X509v3 Authority Key Identifier:
                keyid:F7:F4:4E:36:F2:8E:E6:3B:90:99:EE:39:FC:A9:72:F5:D6:4E:E4:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69e23836-98b5-4802-9778-a96a5ee3eac3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.47.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:84:37:8f:10:7f:bc:d2:5b:91:50:9d:d1:64:51:37:dc:94:
         ab:b8:6c:63:37:b4:86:ef:26:db:e1:9f:3a:04:b4:98:ff:d7:
         19:80:58:e9:4c:95:95:dd:29:ce:f0:ce:a6:52:a1:e0:45:72:
         96:fe:9f:42:2f:2d:1b:b4:dd:ce:28:35:9d:33:5c:56:5a:13:
         34:77:7f:c9:25:69:1a:39:d0:d0:55:86:c2:71:7c:23:d5:15:
         c9:cf:3b:ae:6a:2f:07:f0:2e:ab:66:36:92:78:31:e8:58:82:
         11:1a:98:80:b4:f0:51:f3:d2:20:27:16:6e:35:bc:e7:8e:9e:
         55:d1:4a:cb:07:98:df:ab:4e:9f:4e:4d:af:16:dd:63:ec:9d:
         89:a4:cb:a7:da:a5:6e:44:a8:82:7d:b2:8a:fe:92:bb:ca:ec:
         11:70:ff:e8:56:18:49:e4:ea:d6:6d:8e:68:ff:1b:cc:f1:75:
         0e:32:3f:7b:25:97:30:1d:1e:e9:db:c5:7b:9a:3e:2e:d9:9d:
         49:23:ac:70:34:c8:09:09:67:29:d7:67:42:cf:c1:24:06:ae:
         ca:b6:b3:e8:e5:59:4c:9e:a0:77:5d:6d:c1:98:42:ad:a3:95:
         ed:87:dd:fd:3e:e7:49:9f:7d:02:c7:7b:be:90:86:3e:19:e6:
         64:5b:5a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:17:36 2026 by rpki-client