Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/651543bd-02d0-3f0e-8d8b-98378be41fbc.roa
File:                     651543bd-02d0-3f0e-8d8b-98378be41fbc.roa (raw, json)
Hash identifier:          stUSQEM6oT+hQILsmEvh+b83a98GrTOv1SVd58vyTwA=
Subject key identifier:   BE:49:6F:E6:8F:56:9C:B3:FA:4D:60:34:E0:5D:B9:7E:53:D7:26:32
Certificate issuer:       /CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
Certificate serial:       010D0C9F4328584DCDC5A4B953ECE1F309773F80
Authority key identifier: C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/651543bd-02d0-3f0e-8d8b-98378be41fbc.roa
Signing time:             Tue 12 May 2026 01:00:24 +0000
ROA not before:           Tue 12 May 2026 01:00:24 +0000
ROA not after:            Mon 10 Aug 2026 01:00:24 +0000
asID:                     36103
IP address blocks:        198.135.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cd:c5:a4:b9:53:ec:e1:f3:09:77:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
        Validity
            Not Before: May 12 01:00:24 2026 GMT
            Not After : Aug 10 01:00:24 2026 GMT
        Subject: CN=70522823-bb51-442b-ac42-4ddb7d6952f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:83:58:88:04:c9:56:4e:c9:f1:60:1d:9d:b7:
                    24:26:79:83:02:0e:ae:14:b0:81:de:07:4e:54:a7:
                    07:65:78:bb:a1:c5:80:89:73:55:c8:f2:8d:2c:da:
                    3b:d2:44:c8:e2:bd:2e:f7:f9:68:30:98:d2:cd:7b:
                    7c:7c:86:a3:f3:e8:2a:33:1e:50:0c:14:42:3b:c9:
                    14:54:e0:95:26:33:5e:b1:30:7e:3a:f5:49:2a:9f:
                    a5:7b:78:b8:41:29:c3:b1:eb:ac:c1:d6:c1:f2:0b:
                    41:37:3e:ff:98:d9:84:46:bc:48:c3:f7:29:d9:02:
                    94:d9:fc:a1:79:30:47:7b:f4:cb:c7:d9:47:f7:16:
                    87:cc:10:35:df:f0:46:2b:19:7a:27:37:45:4d:e0:
                    60:45:a6:f4:af:ad:c5:4d:28:5a:75:a8:cc:be:c9:
                    39:78:bc:34:24:e3:ee:c4:81:ea:1d:1c:f9:b2:a1:
                    57:4b:81:36:c1:b9:b7:22:e8:35:44:a5:58:60:db:
                    db:89:18:5e:ec:db:b0:49:96:42:dd:47:34:04:0a:
                    8c:a4:7a:14:14:71:57:e8:83:22:f3:ed:ae:e5:74:
                    92:04:15:5f:fb:6b:c1:cd:0b:6b:20:5a:a1:57:7f:
                    c6:79:94:3e:e8:2e:3b:ee:b3:db:94:51:60:af:50:
                    6f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:49:6F:E6:8F:56:9C:B3:FA:4D:60:34:E0:5D:B9:7E:53:D7:26:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/651543bd-02d0-3f0e-8d8b-98378be41fbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl

            X509v3 Authority Key Identifier:
                keyid:C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.135.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:7f:ae:ef:f8:cc:de:6a:ef:95:d1:76:83:59:63:ac:5f:66:
         a8:11:e7:03:ff:ea:d2:2b:72:aa:8b:80:f4:d6:2d:9a:5d:57:
         ea:6c:18:3e:1f:ee:59:cd:77:35:bd:cd:79:28:35:71:33:b0:
         bb:6e:5e:71:cc:ca:10:5e:16:d9:d5:c8:e2:5d:b8:5a:1c:1c:
         18:80:26:66:38:7c:13:08:06:02:6e:50:e7:2c:d1:88:e8:61:
         ae:6f:1e:9d:33:6e:21:07:ed:b0:31:e8:2d:d9:06:79:b6:db:
         8b:e6:98:b7:c4:4a:61:4f:32:ae:54:1f:e9:ef:66:45:49:30:
         44:01:c0:1d:4a:8f:64:bd:08:89:96:c0:42:38:00:2d:fb:15:
         27:ce:2b:c7:42:3b:e4:86:6f:e0:14:b1:4b:89:f8:0a:b7:38:
         14:bf:7a:4f:16:cf:c8:8d:c6:9a:0f:37:a3:ce:b2:db:83:bd:
         ed:7e:91:15:72:d5:87:04:99:01:5a:d1:b2:b1:bc:a8:52:b1:
         9e:75:ba:10:78:c5:c7:62:c3:5e:7f:bf:7e:37:ab:6e:0a:0a:
         b3:5f:d0:66:b4:32:b6:73:6b:52:7e:d1:ac:0e:57:44:d4:03:
         d9:43:e6:68:f2:a0:15:ef:9b:f2:c3:fe:f5:50:65:c8:e6:1c:
         59:54:00:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:49:29 2026 by rpki-client