Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/84f84f12-38ad-3ae0-a20a-27a22b71a069.roa
File:                     84f84f12-38ad-3ae0-a20a-27a22b71a069.roa (raw, json)
Hash identifier:          Sr0og+8YNBaaJz6KiaUSoio++ZtFkekHg3b+ujdkHGQ=
Subject key identifier:   B6:12:FA:DE:4E:88:8D:1B:C6:17:AC:23:02:9D:9D:DD:65:1D:26:61
Certificate issuer:       /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Certificate serial:       010D0C9F4328584D300A46FD3AD83DE7D8AB2160
Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/84f84f12-38ad-3ae0-a20a-27a22b71a069.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     6922
IP address blocks:        198.215.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:46:fd:3a:d8:3d:e7:d8:ab:21:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=b2388eab-5f09-4f19-92c2-8fd31a43dee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b1:4a:6b:e1:af:dc:00:06:4f:f9:b7:3b:0a:
                    28:5e:fb:9d:c5:ea:61:6f:0f:54:02:55:28:98:f2:
                    02:61:cb:05:82:4d:4b:27:12:4a:68:34:69:9e:bb:
                    97:e4:c5:23:89:87:1b:52:c9:46:8f:e1:c2:9e:96:
                    e5:63:dc:e2:31:49:53:80:e2:18:c4:ca:a4:9b:e3:
                    34:ae:e6:ba:2f:f2:20:2b:ad:3c:63:9b:23:8e:25:
                    43:bd:3c:a2:ea:49:82:5f:3f:2f:a9:7a:f0:8f:62:
                    80:59:12:f6:50:8e:16:62:94:7b:f1:fa:fe:f1:ad:
                    98:4f:86:f5:e1:24:40:6c:5b:f6:53:a1:0d:13:29:
                    4b:bc:f4:8b:7e:09:0a:c3:c9:02:b7:01:da:ce:70:
                    b7:ea:53:79:a2:e8:fe:90:1d:6a:d4:62:e9:60:ce:
                    03:42:36:5d:94:4e:53:45:86:77:2f:40:b3:bf:25:
                    91:a4:b7:04:f1:3a:2f:16:d3:b6:87:0a:e5:b4:db:
                    25:d2:9a:67:ff:1e:9b:66:7c:ce:ea:b3:e9:45:4f:
                    d0:ee:f4:6f:2a:f7:55:0a:b1:89:d8:97:cb:e1:1a:
                    bc:66:34:da:78:54:4f:c3:e1:ed:b1:c9:88:ae:35:
                    a8:ad:c6:66:17:34:9d:0b:66:1a:cc:e2:56:e4:0b:
                    f0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:12:FA:DE:4E:88:8D:1B:C6:17:AC:23:02:9D:9D:DD:65:1D:26:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/84f84f12-38ad-3ae0-a20a-27a22b71a069.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl

            X509v3 Authority Key Identifier:
                keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.215.14.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:81:cf:95:08:b8:e1:1f:4a:0b:c9:bf:f4:7b:f5:e9:51:9c:
         b0:ae:14:32:03:eb:8c:82:f6:f2:2d:00:0c:5f:f4:41:c8:24:
         d6:42:c2:94:b4:88:6e:dd:75:0f:fb:ab:c1:26:0e:f4:e9:f4:
         03:45:00:d1:69:f6:82:c0:e8:ec:f2:bd:ee:a2:c3:d9:da:d4:
         af:e8:12:a6:ed:1a:e1:b7:f2:ad:7b:78:73:d3:61:b3:72:c1:
         df:99:70:fe:7e:2c:68:61:4a:78:35:21:cf:c0:b3:4c:59:2d:
         ff:d3:f2:90:0f:0b:af:8a:f0:27:53:74:59:02:83:d1:95:f9:
         94:8c:69:28:db:d7:3b:f9:4e:45:99:38:6d:69:66:a5:a3:8f:
         f6:71:aa:10:bc:c1:2e:ce:51:ef:d3:22:a1:c9:09:a1:6a:e5:
         11:5a:8f:e3:2a:0b:28:25:ad:71:8f:3e:8b:35:93:50:5d:23:
         fc:e5:ff:d4:f6:60:8d:5b:ac:e4:66:85:23:6e:59:7b:aa:5b:
         61:1b:80:53:34:06:8c:b1:4d:64:50:e9:05:e6:ab:37:e4:78:
         b7:b6:ed:9c:65:c0:c3:e3:f3:e8:6b:79:83:d4:6b:4e:3b:c5:
         e7:c1:58:de:09:89:c2:63:6f:bb:0d:17:1a:35:f9:c4:55:9d:
         15:67:b1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:06:10 2026 by rpki-client