Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07/c8d20943-c459-32dc-bb1b-21a6aaa29f13.roa
File:                     c8d20943-c459-32dc-bb1b-21a6aaa29f13.roa (raw, json)
Hash identifier:          VY4KNNjLY3ycOAS6dRsYDe8PmF2e22YHtOeUdGAfg3w=
Subject key identifier:   1E:CB:6D:D8:33:BD:32:F2:1E:B6:4B:C6:1B:46:5D:F7:B5:F6:45:D6
Certificate issuer:       /CN=01430e13-506f-444b-8727-f36154b32c07
Certificate serial:       010D0C9F4328584D300A650B4B9E79F5C446AB80
Authority key identifier: 49:9D:C6:85:55:F1:6E:47:A6:42:66:2B:FA:2B:9A:16:91:CA:2A:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07/c8d20943-c459-32dc-bb1b-21a6aaa29f13.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     46256
IP address blocks:        198.217.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07/01430e13-506f-444b-8727-f36154b32c07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07/01430e13-506f-444b-8727-f36154b32c07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:65:0b:4b:9e:79:f5:c4:46:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01430e13-506f-444b-8727-f36154b32c07
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=0185f197-4f97-44c4-93d7-4d762411ffab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:8a:87:8f:9f:b2:7e:d4:b8:bb:ee:88:37:c9:
                    3b:ae:e4:41:6b:1a:21:e9:cb:47:0d:74:7e:4c:7c:
                    47:1f:e6:1a:fd:93:f4:41:98:9d:eb:d1:c3:17:c3:
                    e5:5d:3c:bf:35:c5:b9:d0:8c:fc:7d:6f:03:16:b7:
                    3b:0c:70:e4:64:69:93:23:49:62:b3:69:9a:93:1f:
                    8a:05:00:67:66:e5:a5:b6:f6:19:7e:29:d9:3c:a5:
                    16:ae:93:1b:a0:3c:fa:ff:2d:bd:09:b5:3a:2a:46:
                    47:49:37:77:86:05:6b:db:ca:df:34:b6:6f:44:54:
                    06:bd:19:9b:f3:0b:55:45:6a:b4:de:14:01:8a:33:
                    45:c6:3b:a0:63:1b:9c:a8:62:0b:5a:87:15:1a:c5:
                    73:5e:b6:3f:26:6f:0b:e0:0b:70:92:d5:00:57:ed:
                    22:21:dd:87:26:06:75:1a:9f:27:95:85:d4:ab:fb:
                    24:40:9c:a2:b9:ba:76:3f:29:c9:28:c7:0d:34:32:
                    71:5b:bd:ae:03:89:8d:20:85:74:8f:37:e2:ae:d9:
                    7a:7b:1d:6f:26:e7:e0:06:79:25:ca:44:0f:5f:4f:
                    26:63:0a:5a:0f:d1:fd:c8:bd:49:ef:5c:cc:3e:9e:
                    79:6d:41:d1:d7:8c:18:12:ec:2f:f8:25:92:88:98:
                    a5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:CB:6D:D8:33:BD:32:F2:1E:B6:4B:C6:1B:46:5D:F7:B5:F6:45:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07/c8d20943-c459-32dc-bb1b-21a6aaa29f13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07/01430e13-506f-444b-8727-f36154b32c07.crl

            X509v3 Authority Key Identifier:
                keyid:49:9D:C6:85:55:F1:6E:47:A6:42:66:2B:FA:2B:9A:16:91:CA:2A:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.217.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:6f:11:ec:8f:b9:0e:ee:ff:48:25:d1:89:a3:21:25:4f:df:
         41:9f:c2:9f:b2:bc:4b:09:7a:58:4b:61:f5:13:fd:8d:7d:cb:
         e7:5c:60:c0:ca:94:35:cc:de:62:4b:67:bb:14:81:a4:87:70:
         ac:3d:32:fd:7d:04:d8:7c:19:3b:b1:ba:23:1b:fb:1e:bf:15:
         3c:ea:62:3a:56:34:9f:36:8f:19:76:c0:76:e6:fd:87:90:6e:
         cc:e6:a7:49:25:0b:71:ff:47:9b:a3:a6:97:ee:a0:28:f7:b4:
         85:df:91:48:0d:da:43:d7:26:30:d0:ff:2d:81:86:ba:da:71:
         69:50:d1:58:55:26:a5:83:2b:a0:50:6f:46:81:1c:e5:5a:52:
         0e:6e:ff:99:44:e0:5e:19:c7:5c:df:5c:24:5d:f7:a7:b6:a5:
         a9:ca:14:45:e3:94:c8:44:cc:cd:d5:dd:63:42:0f:cf:8c:34:
         9d:c7:9a:9a:ac:88:0a:06:e8:62:98:f2:e1:8d:82:83:12:28:
         cb:da:61:aa:4d:c2:91:9d:a4:66:46:af:c3:70:08:64:c2:7a:
         94:f9:e2:b4:0a:dc:8d:c3:52:9f:43:c3:ae:22:7b:92:d7:bc:
         0d:bb:dd:b1:b2:7a:c4:22:e6:06:74:58:8f:b2:a9:26:b8:87:
         40:df:0b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:02:57 2026 by rpki-client